Senior IT Auditor

As a Senior IT Auditor and member of a collegial team, you will help support our audit and strategic plan by participating in the planning, scoping, execution, and reporting of audits based on dynamic risks. You will conduct technical audits by working with various business and IT partners across the Federal Reserve System and in doing so, you will gain valuable exposure to advanced systems and frameworks in areas such as cloud, agile (SAFe), cybersecurity, and DevSecOps.

As a member of the Audit Team you will participate in developing meaningful insights that help our stakeholders achieve their business objectives by translating technical risks into business issues and providing practical recommendations for remediation.

This position applies specialized knowledge of IT, cybersecurity, project management, and cloud to complete technical audit assignments and is considered intermediate level and performs work of moderate complexity. The incumbent works under general supervision and may take directions from a more senior team member. This job does not have any direct reports., * Conducts and document moderately complex IT audit fieldwork according to IIA standards, producing comprehensive workpapers and evidence documentation, ensuring workpapers are prepared in accordance with IIA standards

• Designs, evaluates and tests IT controls across business systems, application development activities, and business processes, leveraging an end-to-end, data-driven mindset (ex. key control/risk identification) and supports the identification of control gaps and contributes to risk assessment processes
• Identifies and analyze IT and cybersecurity risks, documenting impacts and recommending mitigation strategies
• Proactively performs follow-up reviews on previously reported findings to verify remediation effectiveness, producing closure documentation
• Serves as IT Audit Liaison for moderate risk business processes, coordinating between audit teams and business stakeholders
• Evaluates IT projects and programs to assess control effectiveness, governance, and risk management practices, delivering formal assessment reports
• Monitors key IT risk indicators for specific areas of responsibility, producing trend analyses and exception reports

• Bachelor’s degree in computer science, Information Management, IT, IS, Cybersecurity or commensurate specialized training, certification, or work experience
• Minimum one year of work experience
• Professional certification such as CISA, CIA, or CPA (in progress acceptable)

• One of the following professional certifications recommended: CRISC (Certified in Risk and Information Systems Control), CISM (Certified Information Security Manager), CIA (Certified Internal Auditor), Cloud, AI, or SAFe

• Intermediate knowledge conducting moderately complex IT audit fieldwork and preparing formal documentation or assessing risk and controls in moderately complex IT business operations
• Intermediate knowledge of IT audit methodologies and frameworks (IIA, NIST); including integrated audit techniques, project management approaches, risk, controls, and cloud concepts
• Intermediate analytical skills including sound business judgment and ability to think independently
• Effective written and verbal communication skills with the ability to influence peer leaders and business partners
• Strong attention to detail and organization skills
• Strong interpersonal relationship building skills

What we Offer

• Comprehensive benefits package includes medical, dental, vision, prescription drug coverage, 401k savings plan, retirement plan, paid time off, transit benefit, onsite gym and subsidized cafeteria
• A learning environment with opportunities to gain new skills and grow your career, * Applicants must be currently authorized to work in the United States without the need for visa sponsorship now or in the future.
• This position has additional screening requirements due to the information accessed while performing the job. These additional screenings would be initiated at the time of offer acceptance and can take approximately two months to be completed. The screening covers areas such as education/employment verification, criminal history, credit history, and reaches out to your references and people that know you well.
• As a condition of employment, Federal Reserve Bank of Chicago employees must comply with the Bank’s ethics rules, which generally prohibit employees, their spouses/domestic partners, and minor children from owning securities, such as stock, of banks or savings associations or their affiliates, such as bank holding companies and savings and loan holding companies. If you or your spouse/domestic partner or minor child own such securities and would not be willing or able to divest them if you accepted an offer of Bank employment, you should raise this issue with the recruiter for this posting, who can provide you contact information for our ethics official if necessary.

The expected starting salary range for this position in Chicago is between $96,400 and $114,100 annually in addition to potential annual performance-based discretionary bonuses. Final salary and offer will be determined based on the employing Bank and the applicant’s relevant experience, skills, internal equity, and alignment with geographic and other market data.

Federal Reserve Bank of Chicago

The Federal Reserve is one of the most recognizable brands around the world. The Federal Reserve is the central bank of the United States-one of the world’s most influential, trusted and prestigious financial organizations. The Federal Reserve is charged with the important mission of promoting a strong economy and a stable financial system and fulfills this responsibility by formulating national monetary policy, supervising and regulating banks and bank holding companies, and providing financial services for banks and the U.S. government., The Federal Reserve Banks are committed to equal employment opportunity for employees and job applicants in compliance with applicable law and to an environment where employees are valued for their differences.