IT Auditor II (Advisory and Technology Implementation)

U.S. Navy
Winchester, VA, United States
18 days ago
Apply on diversityjobs.com
Prepare application

Role details

Contract type
Internship / Graduate position
Employment type
Full-time (> 32 hours)
Experience required
1 year minimum
Compensation
$78,400.0 - $123,200.0
Working hours
Regular working hours

Tech stack

Spreadsheets Cyber Security Data Migration Text Processing Information Technology Audit Microsoft Security Essentials Requirements Traceability Systems Integration IT General Controls (ITGC) Information Technology Data Analytics

Job description

Navy Federal’s Internal Audit team is in the midst of an exciting transformational journey to become a best-in-class Audit function! It is our vision to be a preferred advisor to the business by building and cultivating trust through the consistent execution of high-quality and risk-focused audit and advisory work. We’re focused on implementing efficient processes, maximizing our use of technology, integrating data analytics into everything we do, and investing in our biggest asset, our people. If this sounds like the type of team you’d like to be a part of, then we want to learn more about you!

To contribute to the execution of complex IT, information security, pre-implementation, and integrated engagements across Navy Federal. The IT Auditor II will identify and test key risks and controls in the business and participate in Internal Audit initiatives. This position will play a role in promoting partnership, trust, and accountability within our organization and building deeper relationships with our audit stakeholders., * Perform pre-implementation reviews of new and changing technology to evaluate whether risks are identified and controls are appropriately designed before go-live

  • Contribute toward the execution of other advisory and occasional IT audit engagements in accordance with Navy Federal and industry audit standards
  • Assist the Auditor-In-Charge in identifying and assessing technology risks to develop and execute a risk-based audit or advisory work program
  • Coordinate with points of contact and first/second lines of defense to conduct preliminary research, participate in and occasionally lead process walkthroughs, document process narratives and workflows, identify key risks and controls, and obtain evidence for testing
  • Brainstorm ideas for leveraging data analytics and technology to drive deeper risk coverage and insights to business partners
  • Perform IT testing, including IT controls, across multiple engagements concurrently. Apply critical thinking skills by seeking to understand and execute assigned testing and document results according to professional and internal standards
  • As part of pre-implementation and advisory engagements, independently review and analyze evidence, requirements, and test results to assess design adequacy, control readiness, and whether the solution meets its intended objectives before go-live
  • Evaluate requirements traceability, system integration and data migration testing, and go-live readiness in partnership with project teams
  • Identify and summarize potential issues and discuss with the Auditor-In-Charge in a timely manner
  • Prepare workpapers to document relevant information obtained, analyzed, and evaluated that support audit observations/issues and conclusions
  • Self-manage workload/timelines and report delays and issues to audit management
  • Participate in Internal Audit strategic initiatives and act as a champion of change and continuous improvement
  • Stay abreast of and ensure compliance with applicable federal, state and industry laws, regulations, and guidelines
  • Actively monitor and stay current with evolving industry trends, technology, and emerging risks that may impact the company
  • Perform other duties as assigned

Requirements

  • Minimum one year of experience in IT audit
  • Working knowledge of IT control concepts and practices and risk-based auditing techniques
  • Working knowledge of one or more functions: IT Risk, General Controls, Information Security Frameworks and best practices
  • Effective skill in managing multiple priorities independently and operate well in a team environment to achieve goals
  • Effective interpersonal and communication skills
  • Effective organizational, planning and time management skills
  • Effective word processing and spreadsheet software skills
  • Effective critical thinking, analytical, and problem-solving skills
  • Bachelor’s degree or the equivalent combination of experience, education, and training, * Exposure to pre-implementation reviews, advisory engagements, or technology implementation projects
  • One to three years of experience in internal audit, IT audit, or a technology/risk-related field
  • Experience with credit union financials and/or regulations
  • Working Knowledge of NFCU products, services, programs, policies, and procedures
  • IT Certifications - CompTIA A+, Network+, Security +, CISA, CRISC, CISSP, GIAC Security Essentials (GSEC), or CIA Certification
  • Master’s degree in Computer Science, Information Technology, or related field

Benefits & conditions

  • 2026 Handshake Early Talent Award * Newsweek America’s Greatest Workplaces for Culture, Belonging and Community 2026 From Fortune Magazine. 2026 Fortune Media IP Limited. All rights reserved. Used under license. Fortune and Fortune 100 Best Companies to Work For are registered trademarks of Fortune Media IP Limited and are used under license. Fortune Magazine, Fortune Media (USA) Corporation, and its affiliates are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union. Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law. Accommodations: If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process)

About the company

Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks. Our approach to careers is simple yet powerful: Make our mission your passion. * FORTUNE 100 Best Companies to Work For 2026 * Yello and WayUp Top 100 Internship Programs 2025 * Computerworld Best Places to Work in IT 2026 * Most Loved Workplace - America’s Top Most Loved Workplaces 2025 * 2025 PEOPLE Companies That Care * Newsweek Most Trustworthy Companies in America 2026 * Military Times 2025 Best for Vets Employers * Forbes 2026 America’s Best Large Employers * Forbes 2025 America’s Best Employers for New Grads * Forbes 2025 America’s Best Employers for Tech Workers * 2025 RippleMatch Campus Forward Award Winner for Overall Excellence * Military.com Top Military Spouse Employers 2025

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on diversityjobs.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

59 sec

Proving regulatory compliance to auditors and chief officers

Mike Bursell Mike Bursell · World Congress 2026 Europe

1:22 min

Prerequisite steps for successful tool and data migration

Sérgio Sancho Pinto Sérgio Sancho Pinto · Europe 2026 Virtual

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

1:32 min

Recognizing the persistence and utility of spreadsheet applications

John Bettiol · World Congress 2022

5:51 min

Transitioning to continuous security operations and automated system hardening

Thomas Fuchs +3 · LIVE

3:18 min

Executing background data migrations using AzCopy

Radu Vunvulea Radu Vunvulea · World Congress 2022

Videos

See all

Related articles

See all