Senior IT Auditor

New York City Employees' Retirement System
New York, NY, United States
18 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
3 years minimum
Compensation
$95,000.0 - $125,000.0
Working hours
Regular working hours
Job source

Tech stack

Data Analysis Control Objectives for Information and Related Technology (COBIT) Cyber Security Information Systems Data Integrity Data Visualization Disaster Recovery Human-Computer Interaction Information Technology Audit Cloud Services Tableau (Software) IT General Controls (ITGC)
+1 more
Information Technology

Job description

The New York City Employees’ Retirement System (NYCERS) is recruiting one (1) IT Project Specialist (Senior IT Auditor) in the Internal Audit Division. The senior IT auditor is responsible for continuously inspecting and assessing the effectiveness of internal controls of NYCERS IT systems and security functions. They find the best practices to complete audit requirements quickly and efficiently. Their duties include setting audit objectives, gathering data by interviewing NYCERS employees or comparing current NYCERS procedures to IT standards (NIST, COBIT) and creating actionable plans to improve IT systems along with the following: Key Responsibilities

  • Plan, execute, and report on IT audits covering areas such as cybersecurity, access controls, data integrity, and disaster recovery.
  • Evaluate the design and effectiveness of IT controls within pension administration systems, financial applications, and supporting infrastructure.
  • Conduct risk assessments to identify vulnerabilities in systems that manage sensitive member and financial data.
  • Collaborate with IT, security, and operations teams to recommend practical, risk-based improvements.
  • Monitor compliance with relevant regulations (e.g., NIST, SOC, PCI, COBIT, state pension laws) and internal policies.
  • Review third-party vendor systems and cloud services to ensure they meet our security and compliance standards.
  • Prepare clear, actionable audit reports for executive leadership and the Board of Trustees.

Requirements

  1. A baccalaureate degree from an accredited college in computer science, engineering, human computer interaction, interactive media, digital and graphics design, data visualization, communication or a related field, and four years of satisfactory full-time experience related to the area(s) required by the particular position and a specialization in a relevant technology, process, methodology and/or domain; or

  2. An associate degree from an accredited college in computer science, engineering, human computer interaction, interactive media, digital and graphics design, data visualization, communication or a related field, and six years of satisfactory full-time experience related to the area(s) required by the particular position and a specialization in a relevant technology, process, methodology and/or domain; or

  3. A baccalaureate degree from an accredited college, and eight years of satisfactory full-time experience related to the area(s) required by the particular position and a specialization in a relevant technology, process, methodology and/or domain; or

  4. Education and/or experience which is equivalent to “1”, “2”, or “3” above.

Preferred Skills

  • Bachelor’s degree in Information Systems, Accounting, or a related field (CISA, CISSP, or similar certification preferred). - 3+ years of IT audit, IT risk management, or information security experience preferably in financial services, government, or pension systems. - Strong understanding of IT general controls, application controls, and cybersecurity frameworks. - Experience with audit tools and data analysis software (e.g., Tableau). - Ability to translate technical findings into clear, actionable recommendations for non-technical stakeholders. - A meticulous eye for detail and a commitment to ethical, independent judgment.

Public Service Loan Forgiveness

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

59 sec

Proving regulatory compliance to auditors and chief officers

Mike Bursell Mike Bursell · WWC Europe 2026

1:48 min

Automating exploratory data analysis within training pipelines

Dora Petrella · WWC 2023

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

1:55 min

Maintaining software and data integrity during execution

Christian Wenz Christian Wenz · WWC Europe 2026

2:39 min

Navigating strict environments for enterprise banking

Lea Fragner · LIVE

1:36 min

Performing exploratory data analysis to uncover underlying patterns

Julian Joseph · LIVE

Videos

See all

Related articles

See all