IT Auditor

The Auditor, Information Technology (IT) is responsible for conducting and documenting audit examinations throughout Northern Trust Corporation. The role is a direct report to the Associate Director, IT Audit Services, and is responsible for completing audits within the stated budget, timeframes, and in accordance with the Audit Services Department Policies and Standards. The IT Auditor provides input to improve operational efficiency and/or to enhance the design or operating effectiveness of the internal control environment. The role also provides technical and auditing expertise, training, and coaching, to auditors during the audit engagement. Principal Responsibilities

• Functions in various roles on audit engagements, including leading audits and providing consulting or oversight functions based on the needs of the team
• Manages and performs special projects as needed
• Perform systems/applications, integrated audits and project management reviews
• Follow up and perform validation of remediation activities to ensure audit issues are effectively resolved
• Communicates with partners at all levels, across various business units
• Utilizes understanding of various Corporate units and their functions to ensure operations, services, and systems have suitable audit controls in place (i.e., design of the control environment)
• Evaluate technology processes and technology controls for design and operating effectiveness
• Applies analytical skills to review information and determine potential control weaknesses
• Develops a thorough understanding of the Northern Trust Audit Methodology and adheres to all applicable Department Standards
• Completes and compiles a high quality summary of findings and recommendations for review in a concise and professional manner
• Works closely with unit managers to devise specific technology related audit tests
• Responsible for staying current on regulatory requirements and technological changes within the industry
  
  Certified Information System Audit (CISA) certification is preferred. Additional certifications such as Certified Information Systems Security Professional (CISSP), or other related certifications is a plus
• Knowledge of audit procedures and technical security and control standards usually obtained through related work experience
• Knowledge and awareness on NIST 800-53 controls, NIST Cyber Security Framework, SANS and Center for Internet Security (CIS) is a plus
• Knowledge of technology controls around Cloud Computing reviews - AWS, Azure and Google cloud is a plus
• Solid understanding of ITGC and related processes (e.g., Configuration Management, Vendor Management, Access and Identity Management)
• Understanding of Information Technology Service Management (ITSM) controls (e.g., Incident Management, Change Management, Problem Management)
• Skills as needed to perform testing of application controls (e.g., BC/DR, Application Security Testing, Interface Controls)
• Skills as needed to perform testing of information security and cybersecurity controls (e.g., Vulnerability Management, Incident Response, Network Security)
• Analytical and organizational skills are necessary to conduct audits
• Strong issue writing and workpaper documentation skills
• Knowledge of systems and databases such as Windows, UNIX, MS SQL and Oracle is an advantage
• Knowledge of the network devices (e.g., routers, switches, firewalls and load balancers is a plus
Required Experience
• Several years of auditing and systems experience
• A College or University degree is preferred and/or entry level auditing experience in a financial institution
• Specialized technical audit or related experience is preferred
• Experience with auditing procedures and technical security concepts
• Self-starter with an ability to self-motivate
• Excellent verbal and written communication skills
• Strong organizational and problem solving skills with attention to detail
• Ability to proactively assess issues, identify solutions and problem solve
• Ability to react and respond on a timely basis
• Ability to adapt and react positively in a changing and dynamic work environment
• Ability to work under pressure and to deliver to tight deadlines
• Ability to develop relationships with diverse groups and various levels of technology and non-technology personnel
• Flexibility, multi-tasking, creative thinking, good business judgment skills are required to meet strict deadlines and manage other projects
• Proficiency in Word and Excel a plus
• Must be a team player and able to work under pressure during peak periods
  
  Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.
Northern Trust is proud to provide innovative financial services and guidance to the world's most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world's most sophisticated clients using leading technology and exceptional service., As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose. We'd love to learn more about how your interests and experience could be a fit with one of the world's most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater Reasonable accommodation Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at MyHRHelp@ntrs.com . We hope you're excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people. Apply today and talk to us about your flexible working requirements and together we can achieve greater.