- Company Name
- Metropolitan Commercial Bank
- Job Title
- IT Internal Audit Officer
- Job Description
-
**Job Title**
IT Internal Audit Officer
**Role Summary**
Act as the primary liaison between the bank’s Internal Audit Department and the co‑sourced audit firm to ensure effective, compliant IT audits that support the institution’s risk management and regulatory obligations.
**Expectations**
Deliver accurate, timely audit findings, maintain strong professional relationships with technical and business stakeholders, and continuously apply emerging IT and regulatory knowledge to enhance audit effectiveness.
**Key Responsibilities**
- Serve as main point of contact for co‑sourced IT audits, managing scheduling and communication.
- Assist in developing and updating the annual risk assessment and audit plan in alignment with the bank’s risk profile.
- Evaluate design and operating effectiveness of IT controls, policies, procedures, and regulatory requirements (FFIEC, GLBA, SOX).
- Review, validate, and follow up on co‑sourced firm workpapers, addressing irregularities, exceptions, and deficiencies.
- Track, document, and resolve regulatory issues, ensuring evidence quality and management validation.
- Support SOX 404 control testing and documentation, coordinating with the external auditor.
- Provide objective counsel on strengthening the IT control environment, including pre‑ and post‑implementation reviews of IT systems.
- Contribute to the development of IT audit methodology and procedures.
- Participate in continuous professional development, staying current on IT risk and audit trends.
**Required Skills**
- 6+ years progressive IT audit experience in banking or publicly traded firms.
- Strong knowledge of IT general controls, cybersecurity frameworks, and regulatory guidelines (FFIEC, GLBA, SOX).
- Excellent written and verbal communication, stakeholder engagement, and relationship building.
- Strong analytical, problem‑solving, and decision‑making abilities.
- Attention to detail, time‑management, and organizational skills.
- Ability to lead, coach, and influence cross‑functional teams.
**Required Education & Certifications**
- Bachelor’s degree in Information Technology, Computer Science, or related field.
- Preferred certifications: CISA, CISSP, CIA, or CPA.
---
New york city, United states
On site
Mid level
27-01-2026