> Markdown version of [/jobs/ext/480976-internal-audit-department-it-audit-avp](https://www.wearedevelopers.com/jobs/ext/480976-internal-audit-department-it-audit-avp). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Internal Audit Department - IT Audit AVP - **Company:** Bank of China Limited, New York Branch - **Location:** New York, NY, United States - **Experience:** Expert - **Salary:** $65,000.0 - $150,000.0 - **Contract:** Permanent contract - **Skills:** Data Analysis, Control Objectives for Information and Related Technology (COBIT), Data Control, Issue Tracking Systems, Information Technology Audit, Program Design Languages, Workflow Management Systems, IT General Controls (ITGC), Information Technology, Data Management - **Published:** June 3, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=95ff33a8c9f234cd ## About the Role Do you have a valid CPA license?, Do you have a valid Certified Internal Auditor certification?, Do you have experience in Training program design for professional development?, Do you have a Bachelor's degree?, * A bachelor's degree is required, and an advanced degree is preferred * Minimum 5 years of experience in IT risk/audit on IT infrastructure, application and system implementation is required for the AVP level * Experience as a bank examiner, auditor, consultant or compliance professional with a strong understanding of IT risks, familiar with core banking systems, transactional platforms, workflow tools use for retail and commercial banking is required * Experience in using computer assisted auditing tools to evaluate assertions is required * Deep IT lifecycle expertise in order to perform pre-implementation reviews and to evaluate sufficiency of IT beyond operating effectiveness is required * Familiarity with FFIEC regulatory standards, COSO, COBIT, ISO among others, for IT controls is required * Capability and willingness to develop staff on technical and soft skills is required * CPA, CIA, CISA, CRISC, CGEIT, CISSP, CISM and/or equivalent certifications are preferred but not required * Bilingual capability in Mandarin is preferred but not required" ## Description The incumbent will be responsible for assisting the Team Lead with oversight, design and execution of the Bank's IT audit program including audits of IT systems, applications and operations and the attendant risk undertaken in the line of business and control functions. S/he will contribute to audit risk assessment and perform detailed testing, evaluate management action plans, follow up on control issues, and update audit program, risk assessment and audit plans timely. Responsibilities: Include but are not limited to: Audit Program Enhancement * Plan, design, and execute the audit coverage strategy of the IT and data quality and management programs, contribute to the US-wide audit risk assessments, and perform assigned audits by executing approved audit programs and questionnaires * Review auditor work papers covering planning and fieldwork for sufficiency * Influence the execution of other audits (business, control functions) with related risks * Ensure the delivery of audit reports and Internal Audit feedback that is complete, insightful, timely, error free and concise * Timely update audit programs, risk assessment and audit plans * Recommend improvements in streamlining audit methodology and optimize the use of the audit workflow tool when available * Establish and maintain relationships with senior internal stakeholders for the IT and data management and quality programs * Coordinate with the Data Analysis Team in the design and implementation of continuous monitoring of the IT and data controls during integrated audits Prompt, Oversee and Report on Corrective Action * Evaluate management action plans to ensure the audit issue raised are adequately addressed * Coordinate with key stakeholders to identify emerging and/or control issues affecting operation * Perform issue tracking and risk-based validation of issues specific to IT program * Follow up with counterparts to ensure control issues are resolved effectively Build Expert Knowledge * Design the auditor professional development plan specific to related skills * Provide coaching and on-the-job training to audit staff * Serve as the department subject matter expert on IT risks and audit procedures to test these risks ## Related Videos - [Your Code as a Crime Scene](https://www.wearedevelopers.com/videos/1342-your-code-as-a-crime-scene) - [Data Science in Retail](https://www.wearedevelopers.com/videos/586-data-science-in-retail) - [It's all about the Data](https://www.wearedevelopers.com/videos/425-it-s-all-about-the-data) - [Unleashing the power of AI to prevent financial crime](https://www.wearedevelopers.com/videos/1088-unleashing-the-power-of-ai-to-prevent-financial-crime) - [Data Science on Software Data](https://www.wearedevelopers.com/videos/162-data-science-on-software-data) - [AI Sovereignty: What Does It Take?](https://www.wearedevelopers.com/videos/1703-ai-sovereignty-what-does-it-take) ## Related Articles - [Data Analyst Salary in Switzerland](https://www.wearedevelopers.com/magazine/276-data-analyst-salary-in-switzerland) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges) - [How to Write a CV and Interview if You Don't Fully Qualify For The Job](https://www.wearedevelopers.com/magazine/183-how-to-write-a-cv-and-interview-if-you-don-t-fully-qualify-for-the-job) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)