information systems auditor

Michael Silver & Company

<div>Job Description:
We&rsquo;re KSM, one of the top 50 largest independent advisory, tax, and audit firms in the United States. But more than our size, it&rsquo;s our people and culture that set us apart. We believe great things happen when people are supported, challenged, and given the freedom to do their very best work. That&rsquo;s why we&rsquo;ve built a workplace where your career and personal life can thrive together &ndash; where you have the flexibility to manage your time, the resources to grow, and a team that genuinely cares about your success.
We&rsquo;ve been employee-owned since 2001, giving every team member a stake in our collective success. This ownership mentality fosters a culture of collaboration, curiosity, and excellence &ndash; where new ideas are welcomed, different perspectives are valued, and you&rsquo;re encouraged to explore what excites you most. Whether you&rsquo;re expanding your skills, tackling new challenges, or making an impact beyond the office, we provide the resources and support to help you grow in the direction that&rsquo;s right for you.
At KSM, your contributions matter &ndash; not just to the firm, but to your colleagues, clients, and the communities we serve across the U.S. If you&rsquo;re looking for a place where you can do meaningful work, build lasting relationships, and grow in ways that align with what&rsquo;s most important to you, we&rsquo;d love to meet you.
Noble Consulting Overview:
Noble Consulting Services, Inc. (Noble), headquartered in Indianapolis, is a nationwide consulting firm providing a full range of services to insurance regulators. Through our deep experience as former regulators, big-4 managers, and insurance industry professionals, as well as highly motivated recent graduates, we are recognized for our understanding of the insurance regulatory environment. We serve regulators throughout the United States and certain foreign jurisdictions.
Position Summary:
An Information Technology (IT) Examiner is needed to perform the Information Technology General Controls (ITGC) portion of risk-focused statutory examinations on behalf of state insurance regulators. The IT Examiner will be responsible for planning, scoping, and executing the ITGC portion of an examination which includes evaluating the governance and controls of an insurer&rsquo;s IT environment. The IT Examiner will also be responsible for evaluating cybersecurity risks and controls of subject insurers.
An IT Examiner should have sufficient knowledge, background and experience to perform the ITGC portion of a financial examination, and must have the certification of Certified Information Systems Auditor (CISA), sponsored by the Information Systems Audit and Control Association (ISACA). The designations of Automated Examination Specialist (AES) and/or Certified Financial Examiner (CFE) sponsored by Society of Financial Examiners (SOFE) are a plus.
Training and professional development opportunities are made available for both industry specific and specialized areas.
Responsibilities:
General
<ul><li>Review and analyze statutory laws, regulations, policies, and procedures as they apply to the IT environment for insurers.
</li><li>Apply the Risk Focused approach in performing IT examinations in accordance with the National Association of Insurance Commissioners (NAIC) Financial Condition Examiners Handbook.
</li><li>Ability to evaluate and leverage work of others, including CPA&rsquo;s and internal auditors, including SOC (System and Organization Controls) reports.
</li><li>Participate in discussions regarding the IT environment and IT controls.
</li><li>Participate in interviews with insurer representatives.
</li><li>Provide support to the Examiner-in-Charge and the examination team related to IT governance and controls.
</li><li>Obtain and maintain skills with TeamMate software and other electronic tools utilized in examinations.
</li><li>Work in an environment with multiple projects and clients.
</li></ul>Service clients
<ul><li>Exercise professionalism in both written and oral communication.
</li><li>Manage the expectations of the client, insurer, your supervisor and other team members.
</li><li>Provide the client, insurer, and your supervisor with regular status updates.
</li></ul>Monitor and meet budgets
<ul><li>Work with supervisors to manage timelines and budgets.
</li><li>Provide supervisor advance notice when areas are near completion.
</li></ul>Ensure quality of work product
<ul><li>Communicate the project objectives and responsibilities of all team members.
</li><li>Perform/review work completed in a timely manner.
</li><li>Identify opportunities for improvements.
</li><li>Identify and work towards resolution of potential issues.
</li></ul><ul><li>Assist other team members as needed.
</li></ul>Personal Development
<ul><li>Participate in performance reviews with Noble staff and project debriefing.
</li><li>Ensure evaluations are received/administered as per Noble policy.
</li><li>Embrace opportunities to expand responsibility.
</li><li>Expand knowledge of IT audit procedures and sound practices related to the governance and control environment within insurance regulation.
</li><li>Expand knowledge of NIST, HIPAA, SOX/MAR, and ISO Standards.
</li></ul>Deliver conclusions and work product
<ul><li>Communicate proactively throughout engagements.
</li><li>Provide conclusions in work performed, including summary memos of any findings.
</li></ul>Requirements/Qualifications:
<ul><li>Bachelors Degree in computer science, information technology, business administration, accounting or finance.
</li><li>Preferred minimum experience of 10 years evaluating IT governance and controls.
</li><li>CISA designation
</li><li>Solid communication skills, both verbal and written.
</li></ul>We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, color, sex, sexual orientation, gender identity, disability, genetic information, national origin, race, religion, veteran status, or any other protected category.
KSM only accepts resumes directly submitted by a candidate and referrals submitted by current KSM employees. Unsolicited resumes or candidate profiles sent by staffing agencies and fee-based referral services will not be considered outside of a signed KSM vendor contract. KSM will not pay a fee to recruiters or agencies that do not have a signed KSM vendor contract.</div>

Director - IT Examiner

Moore JFC Group

We are seeking a detail-oriented and analytical IT Auditor &ndash; GRC to evaluate and improve the effectiveness of IT controls, risk management, and governance processes. The role involves assessing compliance with regulatory requirements, identifying control gaps, and recommending improvements to strengthen the organization&rsquo;s IT risk posture.Key Responsibilities:<ul><li>Conduct IT audits covering systems, applications, infrastructure, and processes.</li><li>Evaluate the design and effectiveness of IT general controls (ITGCs).</li><li>Assess compliance with internal policies, standards, and external regulations.</li><li>Perform risk assessments and contribute to the development of audit plans.</li><li>Identify control weaknesses and provide actionable recommendations.</li><li>Review access controls, change management, and data security practices.</li><li>Collaborate with business and IT teams to ensure remediation of audit findings.</li><li>Prepare audit reports and present findings to stakeholders and management.</li><li>Support governance frameworks and risk management initiatives.</li><li>Monitor emerging IT risks, cybersecurity threats, and regulatory changes.</li></ul><ul><li>Strong understanding of ITGC, risk frameworks, and internal controls.</li><li>Professional certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor are preferred.</li></ul>Key Skills &amp; Competencies:<ul><li>Knowledge of GRC frameworks (e.g., COBIT, ISO 27001, NIST).</li><li>Familiarity with regulatory requirements and standards.</li><li>Strong analytical and problem-solving skills.</li><li>Excellent report writing and communication abilities.</li><li>Ability to work independently and manage multiple priorities.</li><li>Attention to detail with a risk-focused mindset.</li></ul>Preferred Experience:<ul><li>Experience with ERP systems (e.g., SAP, Oracle).</li><li>Exposure to cloud environments and cybersecurity audits.</li><li>Prior experience in financial services, telecom, or large enterprises is an advantage.</li></ul>Key Performance Indicators (KPIs):<ul><li>Timely completion of audit assignments.</li><li>Quality and impact of audit findings and recommendations.</li><li>Effectiveness of risk mitigation and control improvements.</li><li>Stakeholder satisfaction and audit report quality.</li></ul>Job Type: Full-timePay: AED6,000.00 - AED15,000.00 per monthWork Location: In person

IT Auditor - GRC

Duncan & Ross Consulting

<div>
 
 
 ROLE OVERVIEW
 
 
 
 We are seeking a skilled IT Audit professional (Assistant Manager / Senior Consultant level) to lead and deliver technology and cybersecurity audit engagements. The role involves assessing IT controls, security frameworks, and governance practices across a range of environments, ensuring alignment with regulatory requirements and industry standards.
 
 
 
 KEY RESPONSIBILITIES
 
 
 
 
 Technology Audits
 
 
 <ul>
 <li>
 Perform audits covering cloud environments, including security, governance, and deployment architecture
 </li>
 <li>
 Review system configurations, hardening practices, and infrastructure security across platforms
 </li>
 <li>
 Assess risks related to emerging technologies and recommend mitigation strategies
 </li>
 </ul>
 
 
 Cybersecurity Audits
 
 
 <ul>
 <li>
 Evaluate cybersecurity governance frameworks and organizational security posture
 </li>
 <li>
 Review identity and access management controls (IAM)
 </li>
 <li>
 Assess network security components including firewalls, IDS/IPS, and web application firewalls (WAF)
 </li>
 <li>
 Conduct or review Vulnerability Assessments and Penetration Testing (VAPT)
 </li>
 <li>
 Assess data protection measures, incident response processes, and security operations
 </li>
 </ul>
 
 
 IT Controls Assessment
 
 
 <ul>
 <li>
 Perform reviews of IT General Controls (ITGC) including access management, change management, and IT operations
 </li>
 <li>
 Evaluate application controls to ensure data integrity, accuracy, and reliability
 </li>
 <li>
 IT Service Management (ITSM) Audits
 </li>
 <li>
 Assess IT service management processes aligned with frameworks such as ITIL
 </li>
 <li>
 Review incident, problem, change, and service request management processes
 </li>
 </ul>
 
 
 Compliance &amp; Regulatory Audits
 
 
 <ul>
 <li>
 Conduct compliance assessments against relevant standards and regulations such as:
 </li>
 <li>
 UAE Information Assurance (UAE IA)
 </li>
 <li>
 ISO 27001
 </li>
 <li>
 NIST
 </li>
 <li>
 CIS Controls
 </li>
 <li>
 Identify gaps and provide actionable recommendations for compliance improvement
 </li>
 </ul>
 
 
 QUALIFICATIONS &amp; EXPERIENCE
 
 
 <ul>
 <li>
 Bachelor's degree in Information Technology, Computer Science, or related field
 </li>
 <li>
 6&ndash;8 years of experience in IT Audit, Technology Risk, or Cybersecurity
 </li>
 <li>
 Experience working in consulting firms or large enterprises is preferred
 </li>
 <li>
 Strong understanding of cloud platforms (AWS, Azure, GCP) and security best practices
 </li>
 <li>
 Hands-on experience in ITGC, ITAC, and cybersecurity audits
 </li>
 </ul>
 
 
 Preferred Certifications
 
 
 <ul>
 <li>
 CISA (Certified Information Systems Auditor)
 </li>
 <li>
 CISSP (Certified Information Systems Security Professional)
 </li>
 <li>
 ISO 27001 Lead Auditor / Implementer
 </li>
 <li>
 ITIL Certification
 </li>
 </ul>
 
 
 Key Skills
 
 
 <ul>
 <li>
 Strong knowledge of IT audit methodologies and risk assessment techniques
 </li>
 <li>
 Familiarity with cybersecurity tools and technologies
 </li>
 <li>
 Analytical thinking with strong attention to detail
 </li>
 <li>
 Excellent communication and stakeholder management skills
 </li>
 <li>
 Ability to manage multiple engagements and deliver within timelines
 </li>
 </ul>
 
 
 Key Deliverables
 
 
 <ul>
 <li>
 Audit reports highlighting risks, gaps, and control weaknesses
 </li>
 <li>
 Practical and actionable remediation recommendations
 </li>
 <li>
 Compliance assessment reports aligned with industry standards
 </li>
 <li>
 Stakeholder presentations and audit documentation
 </li>
 </ul>
 
 Vertical
 
 
 Technology
 
</div>

Information Technology Audit Consultant

Moore JFC Consulting

The Role
 We are seeking a meticulous and proactive IT Auditor specializing in Governance, Risk, and Compliance (GRC) to join our dynamic team in Dubai. The successful candidate will play a key role in evaluating IT systems, ensuring compliance with policies and regulations, and mitigating risks to support our client organizations’ strategic objectives. Responsibilities: - Conduct comprehensive IT audits focusing on governance, risk management, and compliance frameworks. - Assess the effectiveness of internal controls in IT systems and processes. - Identify vulnerabilities and risks within IT infrastructure and recommend practical remediation strategies. - Collaborate with cross-functional teams to ensure compliance with relevant laws, standards, and corporate policies. - Prepare detailed audit reports highlighting findings, risks, and suggestions for improvement. - Support the development and implementation of IT governance policies and procedures. - Stay updated on emerging risks, IT regulations, and industry best p
 
Requirements
 <ul>
<li>Bachelor's degree in information technology, Computer Science, Accounting, or related field. - Professional certifications such as CISA, CISSP, or CGEIT are highly desirable. - Minimum of 4 years’ experience in IT auditing, preferably within consulting, audit, or finance environments. - Strong knowledge of IT governance, risk management, and compliance standards like COBIT, ISO 27001, and SOX. - Excellent analytical skills with a keen eye for detail and problem-solving abilities. - Effective communication skills, able to convey technical information clearly to both technical and non-technical stakeholders. - Ability to work independently and as part of a team in a fast-paced, dynamic environment. - Strong ethical standards and commitment to confidentiality and integrity.</li>
</ul>
About the company
 Moore JFC Group, headquartered in Dubai, has been providing the highest quality of Auditing, Consulting and Business Advisory Services for more than 45 years by working closely with clients from a wide range of sectors. Moore Global is ranked as the world's 11th largest international network of professional firms JFC Group is an independent member firm of Moore Global worlds 11th largest international network of professional firms Dealing with Moore JFC Group means dealing with the whole world at one place, for seamless services are provided through worldwide offices of the member firms around the Globe. The Company has over four decades of operations has experience in vast & varied industries and businesses as well as knowledge, skills and resources to deliver great solutions that add real, tangible value to every stage of your business.

M&T Bank

<div><h1 class="jobSectionHeader">THIS ROLE WILL BE HYBRID 4 DAYS/WEEK (1 DAY REMOTE) OUT OF: BUFFALO NY, BRIDGEPORT CT, or WILMINGTON DE. MUST BE WITHIN A COMMUTABLE DISTANCE OR WILLING TO RELOCATE</h1><h1 class="jobSectionHeader">
Overview:
</h1><ul><li>Leads and executes audits over the Bank&rsquo;s Information Technology (IT) Engineering, Operations, Governance, Risk Management and Architecture functions or technology supporting core business operations. . Communicate audit progress and findings to Bank management and oversee Auditors (as applicable) on assigned audit activities.
</li></ul><h2 class="jobSectionHeader">Primary Responsibilities:</h2><ul><li>
Lead and participate in audits from planning to reporting and produce quality deliverables in accordance with the Division&rsquo;s methodology and professional standards while ensuring timely completion.</li><li>
Plan and execute other assurance activities (including continuous monitoring &amp; auditing, product delivery assessments, validation procedures, investigations, and retrospective reviews) utilizing modernized assurance methodologies, tools, and approaches and in accordance with the Division&rsquo;s methodology.</li><li>
Write audit findings that clearly identify risk and root cause. Communicate findings to Bank management in a timely fashion.</li><li>
Partner with stakeholders, business management and Risk Management establishing strong working relationships while maintaining independence.</li><li>
Embrace innovative change and help the team adapt to change.</li><li>
Effectively incorporate data analytics and other automation techniques into all phases of audits and other activities.</li><li>
Maintain knowledge in the assigned subject matter discipline.</li><li>
Coach, develop and oversee work of Auditors and new hires, including executing review and supervision.</li><li>
Embrace and exemplify the culture of engagement and belonging.</li><li>
Contribute to the achievement of Division priorities.</li><li>
Understand and adhere to the Company&rsquo;s risk and regulatory standards, policies, and controls in accordance with the Company&rsquo;s Risk Appetite. Identify risk-related issues needing escalation to management.</li><li>
Promote an environment that supports belonging and reflects the M&amp;T Bank brand.</li><li>
Maintain M&amp;T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.</li><li>
Complete other related duties as assigned.</li></ul><h2 class="jobSectionHeader">
Scope of Responsibilities:</h2><ul><li>
This position leads and executes assurance activities, maintains relationships, and communicates with Bank management, and oversees Auditors. The position ensures activities are in conformance with professional auditing standards. The jobholder reports to an Audit (Senior) Manager.</li></ul><h2 class="jobSectionHeader">
Supervisory/Managerial Responsibilities:</h2><h2 class="jobSectionHeader">
Education and Experience Required:
</h2><ul><li>Bachelor&rsquo;s degree and a minimum of 5 years&rsquo; relevant work experience, or in lieu of a degree, a combined minimum of 9 years&rsquo; higher education and/or work experience, including a minimum of 5 years&rsquo; relevant work experience</li><li>
Minimum of 1 year&rsquo;s leadership experience</li><li>
Experience with internal audit methodology</li><li>
Solid understanding of internal control concepts</li><li>
Experience evaluating adequacy of the controls</li><li>
Strong leadership skills</li><li>
Experience coaching and developing others</li><li>
Proven analytical skills</li><li>
Proven critical thinking skills</li><li>
Excellent verbal and written communication skills</li><li>
Experience presenting sensitive and complex findings to business management and influencing change</li><li>
Proven ability to handle multiple projects at the same time</li><li>
Experience in challenging the status quo and defending conclusions when challenged</li></ul><h2 class="jobSectionHeader">
Education and Experience Preferred:
</h2><ul><li>Bachelor&rsquo;s degree in Accounting, Business, Finance, Technology, Cybersecurity, Mathematics, Statistics, or related technical field</li><li>
MBA or Master&rsquo;s Degree in an appropriate field</li><li>
Related professional certifications (CIA, CPA, CISA, CISSP, cloud certification, or similar)</li><li>
Financial services industry experience</li><li>
Strong experience in infrastructure auditing (preferably in the banking/financial services sector)</li><li>
Working knowledge and experience in auditing server operating systems, server virtualization systems, database management platforms, middleware technologies, storage infrastructure, network infrastructure, firewalls, VPN, and other types of security appliances, data backup solutions, email management systems, mainframe systems and related security products, file transmissions and job scheduling systems.</li><li>
Working knowledge of cloud computing risks and related controls frameworks</li><li>
Working knowledge of modern delivery practices and supporting tech (agile, DevOps tools, etc.)</li><li>
Working knowledge of API Management and associated security risks</li><li>
Working knowledge of ITIL Standards and core IT services such as change, problem, incident, and asset management</li><li>
Understanding of regulatory requirements as they relate to technology in the financial services industry</li></ul>
M&amp;T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $89,600.00 - $149,300.00 Annual (USD). The successful candidate&rsquo;s particular combination of knowledge, skills, and experience will inform their specific compensation.<h1 class="jobSectionHeader">
Location</h1>
Buffalo, New York, United States of America</div>

Internal Audit - IT Lead Auditor: Integrated Technology

The Certification International

Hiring: Lead Auditor(An Arabic auditor is preferred) &ndash; IMS, Information Security &amp; Food SafetyWe are seeking a highly qualified Lead Auditor with strong experience in:Integrated Management Systems (IMS)(ISO 9001 &ndash; ISO 14001 &ndash; ISO 45001)Information Security &amp; Business Continuity(ISO 27001 &ndash; ISO 22301)Food Safety Management Systems(ISO 22000 &ndash; HACCP &ndash; FSSC 22000)Responsibilities: Conduct certification and surveillance audits according to international standardsPrepare audit reports with professional accuracyEnsure clients&rsquo; compliance with quality, environmental, occupational health &amp; safety, information security, business continuity, and food safety requirementsSupport continuous improvement initiativesRequirements: Certified Lead Auditor for IMS, Information Security, and Food SafetyStrong knowledge of ISO standardsExcellent communication &amp; reporting skillsAbility to travel and handle multiple auditsJob Type: Full-timeWork Location: Hybrid remote in Doha

LEAD AUDITOR

Security Bank

Position Title: Internal Auditor Position SummaryUnder the direction of the Bank&rsquo;s Audit Committee, the Internal Auditor is responsible for independently evaluating the adequacy and effectiveness of internal controls, risk management practices, and governance processes. This role performs detailed reviews of financial and operational activities to ensure compliance with regulatory requirements, internal policies, and industry standards while promoting operational efficiency and safeguarding bank assets.Key Duties and Responsibilities<ul><li>Perform comprehensive audits of financial, operational, and compliance functions across the bank.</li><li>Conduct general and application control reviews of core banking systems and related technology platforms.</li><li>Execute periodic, risk-based audits of internal procedures, including deposits, lending, BSA/AML compliance, and other critical banking operations.</li><li>Assist in the development and annual update of the bank&rsquo;s audit plan and enterprise risk assessment.</li><li>Evaluate the design and effectiveness of internal controls and recommend improvements where necessary.</li><li>Prepare clear, concise audit reports summarizing findings, risks, and actionable recommendations for management and the Audit Committee.</li><li>Follow up on audit findings to ensure timely and effective remediation.</li><li>Ensure compliance with applicable laws and regulations, including guidance from regulatory agencies (e.g., FDIC, OCC, Federal Reserve, and state regulators).</li><li>Collaborate with external auditors and regulatory examiners as needed.</li><li>Maintain awareness of emerging risks, regulatory changes, and industry best practices.</li><li>Promote a strong culture of internal control, accountability, and ethical standards throughout the organization.</li></ul>Qualifications<ul><li>Bachelor&rsquo;s or Master&rsquo;s degree in Accounting, Finance, Business Administration, or a related field.</li><li>Professional certification such as Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or Certified Information Systems Auditor (CISA) preferred but not required.</li><li>2&ndash;5+ years of experience in internal audit, public accounting, or banking operations (community bank experience preferred).</li><li>Strong understanding of banking regulations, internal controls, and risk management principles.</li><li>Experience with core banking systems and audit software is a plus.</li><li>Excellent analytical, organizational, and problem-solving skills.</li><li>Strong written and verbal communication skills, with the ability to present findings to management and the Audit Committee.</li><li>Ability to work independently and manage multiple priorities effectively.</li></ul>Core Competencies<ul><li>Integrity and ethical judgment</li><li>Attention to detail and accuracy</li><li>Critical thinking and risk awareness</li><li>Confidentiality and professionalism</li><li>Adaptability in a regulatory-driven environment</li></ul>Working Conditions<ul><li>Primarily office-based with occasional travel to branch locations (if applicable).</li><li>Standard business hours, with additional time as needed to meet deadlines or audit schedules.</li><li>Professional certification such as Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or Certified Information Systems Auditor (CISA) preferred but not required.</li><li>2&ndash;5+ years of experience in internal audit, public accounting, or banking operations.</li><li>Strong understanding of banking regulations, internal controls, and risk management principles.</li><li>Experience with core banking systems and audit software is a plus.</li><li>Excellent analytical, organizational, and problem-solving skills.</li><li>Strong written and verbal communication skills, with the ability to present findings to management and the Audit Committee.</li><li>Ability to work independently and manage multiple priorities effectively.</li></ul>Pay: $50,000.00 - $80,000.00 per yearBenefits:<ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Dependent care reimbursement</li><li>Disability insurance</li><li>Employee assistance program</li><li>Flexible spending account</li><li>Health insurance</li><li>Life insurance</li><li>Paid time off</li><li>Vision insurance</li></ul>Work Location: In person

Internal Auditor

Search 10000+ Information systems auditor jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 information systems auditor jobs Near Me

Director - IT Examiner

IT Auditor - GRC

Information Technology Audit Consultant

IT Auditor - GRC

Internal Audit - IT Lead Auditor: Integrated Technology

LEAD AUDITOR

Internal Auditor