Staff It Auditor

SoFi SoFi · Fintech · New York, NY · Internal Audit

Staff IT Auditor role at SoFi, a financial services company. The role involves evaluating technology and information security controls, assisting with audits over cybersecurity, data protection, system access, and change management. Responsibilities include risk assessment, control testing, and reporting, with a focus on identifying and mitigating risks within the technology environment. Experience in IT auditing, risk management, and regulatory compliance within the financial services industry is required.

What you'd actually do

  1. Assist the Internal Audit team in accomplishing audit department objectives in a team environment.
  2. Assist the Internal Audit team in identifying and analyzing risks, prioritizing audit work, and conducting interviews; observe the operation of technology processes and controls, document and analyze procedures and controls, perform audit tests, document audit work papers, timely identify and discuss potential audit issues and findings with the Internal Audit team.
  3. Conduct internal technology audits and assist in performing individual audit risk assessments.
  4. Continuously seek opportunities for audit process improvement.
  5. Use knowledge of the current technology environment and financial services industry technology trends to proactively identify potential risks, issues, and findings; and communicate this information to the audit team.

Skills

Required

  • Bachelor's degree or equivalent in business, accounting, finance, information systems, cybersecurity, computer science or related fields.
  • Minimum of 1+ years of experience working as an IT auditor (external or internal audit), or related experience working in a financial institution with knowledge of general and technology internal controls, risk management, and regulatory compliance.
  • Understanding of internal control concepts, internal auditing standards, risk assessment practices, COSO three lines of defense, etc.
  • Understanding of IT, cybersecurity, engineering processes, architecture, resiliency, automation, data, and cloud computing.
  • Strong written and verbal communication as well as presentation skills.
  • Ability to develop audit work papers, and write meaningful reports and presentations.
  • Minimum 1 professional certification or certification obtained within 12 months of hire date (e.g., CISA, CISM, CRISC, CIA).

Nice to have

  • Possessing or striving for professional certification(s) or related licensure (CIA, CISA, CPA, CISSP, or equivalent).

What the JD emphasized

  • Minimum of 1+ years of experience working as an IT auditor (external or internal audit), or related experience working in a financial institution with knowledge of general and technology internal controls, risk management, and regulatory compliance.
  • Possessing or striving for professional certification(s) or related licensure (CIA, CISA, CPA, CISSP, or equivalent).
  • Minimum of 1 professional certification or certification obtained within 12 months of hire date (e.g., CISA, CISM, CRISC, CIA).