Staff IT Assurance Specialist

This role leads the design and execution of technology assurance capabilities that enable continuous monitoring of control effectiveness, risk posture, and compliance across systems and processes. This role applies deep expertise to embed scalable assurance practices into engineering and operational workflows, ensuring reliable, audit-ready controls and driving improvements in resilience and governance outcomes., Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Designs and advances automated assurance capabilities that continuously evaluate the effectiveness of technology controls across platforms, systems, and processes.
• Integrates governance and compliance guardrails into development and operational workflows, enabling proactive risk mitigation and consistent control execution.
• Develops and enhances continuous control monitoring processes, including automated evidence collection and validation to support ongoing assurance and audit readiness.
• Defines and maintains control frameworks and standards aligned to regulatory requirements and industry benchmarks, ensuring applicability across diverse technical environments.
• Translates complex control performance data into meaningful risk insights, key risk indicators, and reporting that inform operational and strategic decision-making.
• Leads moderately complex initiatives to improve assurance processes, balancing competing priorities, dependencies, and risk considerations.
• Applies advanced judgment to assess control gaps and emerging risks, recommending practical and scalable solutions that strengthen overall risk posture.
• Partners cross-functionally with engineering, security, audit, and compliance teams to embed assurance practices early in the lifecycle and enable sustainable remediation.
• Establishes methods and approaches for new or evolving assurance activities, while guiding and coordinating the contributions of other team members.
• Provides coaching and support to peers, helping elevate consistency in control implementation, monitoring, and documentation practices.

Typical Scope:

• Interprets internal/external business challenges and recommends best practices to improve products, processes or services. Manages projects or programs with moderate resource requirements, risk and/or complexity. Handles diverse and complex problems requiring evaluation of multiple factors; acts autonomously on most decisions. Requires guidance only on highly complex judgments.
• Exercises judgment in selecting methods, techniques and evaluation criteria to work on complex issues. Advanced understanding of functional area and expert knowledge in specialized discipline. Recognized subject matter expert.
• Determines methods and procedures on new assignments and may coordinate activities of other team members. Works highly independently with limited oversight. Manages large projects or programs and accountable for processes. Coaches and delegates to others., Other Duties:
• Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.
• Perform other job-related duties as assigned or requested.
• Complies with regulatory compliance and assigned training requirements.

• Required Education: Bachelors degree in field relevant to role (or 4 additional years of relevant experience in lieu of a degree)
• Required Experience: 6 - 8 years of relevant experience, * Advanced knowledge of IT assurance, risk management, and control frameworks, with the ability to apply concepts across a range of technologies and environments.
• Demonstrated experience designing or enhancing automated control monitoring, evidence management, or compliance processes.
• Strong analytical and problem-solving skills, with the ability to evaluate complex situations involving multiple variables and risks.
• Ability to independently lead initiatives and make sound decisions in ambiguous or evolving circumstances.
• Effective collaboration and communication skills, with experience working across technical and non-technical stakeholders.
• Familiarity with regulatory and industry standards (e.g., SOX, NIST, ISO, SOC) and their application within technology environments.
• Experience translating technical control data into clear, actionable insights for broader audiences.
• Certification/License:

Work Environment & Conditions (with or without reasonable accommodation):

• Ability to travel infrequently (less than 10% of the time)
• Ability to remain stationary (sitting or standing) for at least 50% of time worked
• Must be able to communicate effectively in person and via digital platforms with other employees, members, and third-party vendors
• Capable of operating appropriate office equipment required for employee productivity, including use of keyboards
• Possess the ability to function independently
• Ability to lift up to a minimum of 10 lbs. (maybe more for some roles)
• Role may require extended hours during peak periods (e.g., fiscal close, audits, etc.)

• Traditional medical, dental, and vision coverage
• Generous 401(k) match
• Paid Time Off: You’ll accrue up to 15 days in your first year. In addition, you’ll receive 40 hours of sick time and 3 personal days, which refresh annually
• Paid federal holidays
• Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility subject to standard account requirements and underwriting criteria)

Every great journey begins with a bold idea-and ours is no different. First Tech and DCU were founded on the belief that financial solutions should put people first. That belief has fueled decades of innovation and service, rooted in the tech sector and expanding to support members from all walks of life.