Assistant Audit Director, Information Technology - IT - (HYBRID - Richmond, VA)

Position Description

The Assistant Audit Director– Information Technology (ADIA-IT) position is primarily responsible for leading all IT audit activities; including planning and scheduling of IT test work.

The ADIA-IT is responsible for managing multiple, complex technology and/or integrated audits, evaluating risks, and leading projects teams through audits. The ADIA-IT will also perform assigned individual audits or portions of audits to determine the nature of operations and the adequacy of the system of control to achieve established objectives.

Work is varied in nature with changing priorities and may require more than 40 hours per week. ADIA-IT, as assigned by the Director of IT Assurance, is responsible for special projects, resource development, research projects, and from time to time, may be assigned projects of a highly sensitive nature. The ADIA-IT may also be responsible for assigned administrative functions.

Position Accountabilities
• Manage the execution of a portfolio of Technology & Operations risk-based audits, ensuring audit engagements are risk based and executed according Internal Audit policies and guidance Coordinate the scope of work of third party support, independent registered public accounting firms, regulators and other control and monitoring functions as the work pertains to IT.
• Define department objectives related to information technology. Department objectives should comply with organizational strategies, risk assessment of organizational processes, and regulatory requirements.
• Supervise audit staff, ensuring quality, timeliness and budget adherence of each audit team.
• Provide subject matter expertise for technical risks and audit processes
• Identify opportunities for continuous improvement and innovation in audit processes and audit coverage
• Collaborate and build relationships with key stakeholders across Enterprise Technology and Business
• Oversee team performance and support Teammates’ professional development
Other duties:
• Assist in ensuring the Internal Audit Department conforms to the IIA’s International Standards for the Professional Practice of Internal Auditing.
• Assist in ensuring the Internal Audit Department meets the metrics defined in its Quality Assurance and Improvement Program (QAIP) as required by IIA Standard 1300.
• As they relate to information technology, direct test work over key internal controls, as defined in Auditing Standard No.3, promulgated by the Public Company Accounting Oversight Board (PCAOB), over financial accounting and reporting as directed by the independent registered public accountant.

Organizational Relationship

This position reports to the Director of IT Assurance. This position works closely with the Internal Audit Team as well as with all members of the first and second lines of defense, including senior and executive management. This position also works closely with the independent registered public accountants and the regulatory examiners.

Position Qualifications

Education & Experience
• Bachelor degree in accounting, business administration, information systems, or a related field
• Ten years experience in IT audit, IT risk management, or information security.
• No less than four years of supervisory experience.
• Required professional certification as a Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Public Accountant (CPA), Certified Internal Auditor (CIA), or other relevant certification.
• Preferred experience in financial services or banking, with knowledge of regulatory expectations (e.g. FFIEC, SOX, GLBA).

Knowledge & Skills
• Proficiency in audit methodologies and control testing techniques.
• Knowledge across a diverse range of Information Technology and Information Security control practices
• Knowledge of cybersecurity frameworks (e.g. NIST, CIS Controls, ISO 27001)
• Familiarity with regulatory requirements (e.g. FFIEC, SOX, GLBA, PCI-DSS, HIPAA)
• Proficiency in IT governance and risk management frameworks (e.g. COBIT, COSO)
• Understanding of emerging technologies (AI, cloud computing, blockchain, DevOps, etc.).
• Excellent analytical skills, including the ability to define problems, collect data, establish facts and draw valid conclusions.
• Demonstrated ability to interact with executive management, the Board of Directors, external auditors and regulatory agencies with tact and diplomacy while achieving stated objectives.
• Advanced written, oral, interpersonal and negotiating skills with ability to prepare and present technical presentations and supervise employees.
• Demonstrated ability to lead a team.
• Demonstrated ability to manage competing and changing priorities.

Salary offered will be based on several factors including but not limited to education, work experience, certifications, etc.  This position is also eligible to participate in either an applicable incentive compensation plan for the position or a discretionary profit sharing bonus program.  General information on our comprehensive benefits package can be found by visiting https://www.atlanticunionbank.com/about/careers/benefits. 

We are proud to be an EEO/AA employer, Minority/Female/Disability/Veteran. We maintain a drug-free workplace.