Director, IT Audit

• Compensation: USD 150,000 - USD 175,100 - yearly

Company Description

Ent Credit Union and Wings Credit Union joined forces in January 2026. This merger means more opportunities, expanded resources, and a shared commitment to delivering exceptional member service. Together, we become more - empowering members, communities, and teams through a bold, unified future. Both organizations bring a strong legacy of member satisfaction, operational excellence, financial stability, and community impact. Recognized locally and nationally as best-in-class financial institutions and employers of choice, each is known for its commitment to financial well-being and philanthropic leadership. Join us during this transformative time and be part of shaping the future of banking! To learn more about the merger, click here .

Job Description

Position Summary

The Director of IT Audit plays a critical leadership role in shaping the future of technology risk assurance, insight regarding technology risks, and Internal Audit at Wings Credit Union. Reporting to the VP of Internal Audit, this leader is responsible for developing and executing the IT audit strategy while providing independent assurance, advisory services, and risk insights across the organization's technology, cybersecurity, data, and digital environments.

As a key member of the Internal Audit leadership team, the Director of IT Audit partners closely with executive leadership, technology leaders, risk partners, regulators, and the Audit Committee to evaluate and strengthen governance, risk management, and control practices. This leader is responsible for building and leading a high-performing IT Audit function, developing talent, enhancing audit methodologies, and providing assurance over the organization’s readiness for an evolving technology and risk landscape.

This role offers the opportunity to influence enterprise technology risk oversight, build and scale a modern IT audit function, develop future audit leaders, and help shape the future of Internal Audit within a growing and increasingly complex organization.

Essential Functions

IT Audit Strategy & Risk Oversight

• Develop and maintain the IT audit universe, risk assessment methodology, and audit strategy to ensure appropriate coverage of technology, cybersecurity, data, operational resilience, and emerging risks.
• Lead the development of risk-based audit, advisory, and continuous monitoring plans that align with organizational objectives, regulatory expectations, and evolving risk landscapes.
• Evaluate emerging technology, cybersecurity, digital transformation, artificial intelligence, and operational risks to ensure audit coverage remains relevant and forward-looking.
• Lead the integration of artificial intelligence, emerging technologies, digital transformation, and operational considerations into audit planning, risk assessments, and assurance strategies.
• Establish both short- and long-term audit priorities, resource plans, and capability strategies that support the continued growth of the organization.
• Ensure audit approaches remain appropriately aligned to the organization's risk profile, strategic priorities, and technology environment.

Audit Leadership & Execution Excellence

• Provide leadership and oversight of the IT Audit portfolio, ensuring engagements are completed efficiently, effectively, and in accordance with Internal Audit methodology and professional standards.
• Approve audit scopes, objectives, and resource allocations while serving as an escalation point for complex issues, barriers, and emerging risks.
• Monitor audit execution, resource utilization, project milestones, quality standards, and audit plan delivery while proactively identifying and addressing risks to successful delivery.
• Ensure high standards of audit quality, consistency, documentation, reporting, and stakeholder engagement across all audit activities.
• Drive continuous improvement efforts that enhance audit effectiveness, efficiency, and overall value delivered to the organization.

Leadership, Talent Development & Team Growth

• Build, lead, coach, and develop a high-performing IT Audit team capable of supporting current and future organizational needs.
• Foster a culture of accountability, collaboration, innovation, continuous learning, and professional growth.
• Develop leadership capabilities across the team through coaching, mentoring, succession planning, and meaningful development opportunities.
• Assess future talent and capability needs while helping build a scalable audit function designed to support organizational growth.
• Champion employee engagement initiatives that strengthen retention, team effectiveness, and performance.

Executive Partnership & Organizational Influence

• Serve as a trusted advisor to executive leadership by providing meaningful insights into technology, cybersecurity, governance, and operational risks.
• Translate complex audit results, risk trends, and control observations into practical recommendations that support informed decision-making and business performance.
• Build strong relationships across technology, risk, compliance, and business functions while maintaining audit independence and objectivity.
• Engage effectively with regulators, external auditors, and governance committees while representing the Internal Audit function with professionalism and credibility.
• Partner with leaders across all lines of defense to support effective risk management and continuous improvement efforts.

Audit Innovation & Continuous Improvement

• Lead the evolution of audit processes, methodologies, tools, and reporting practices to improve coverage, efficiency, and insight generation.
• Lead the development and maturation of Internal Audit's artificial intelligence capabilities, including governance frameworks, audit methodology enhancements, documentation standards, risk assessment integration, assurance strategies, and AI-enabled auditing practices.
• Promote the use of data analytics, automation, artificial intelligence, and technology-enabled auditing techniques across the audit lifecycle.
• Identify opportunities to modernize the Internal Audit function and implement leading practices that support future-state audit capabilities.
• Stay informed on industry developments, regulatory expectations, emerging technologies, and evolving audit practices to ensure continued relevance and effectiveness.

Bank Secrecy Act

• Remain knowledgeable of and adhere to Wings policies, procedures, and regulations related to the Bank Secrecy Act.

Qualifications

Minimum Formal Qualifications for this Position:

• Bachelor's Degree in Information Technology Operations, IT Security, Business Administration with a focus on Information Systems, or similar field of study required
• 10+ years' of progressive experience in internal audit, external audit, risk management, regulatory supervision, operational and informational required
• 3+ years' supervisory experience. required
• 10+ years' IT Auditor related experience acquired in a bank, credit union, or other financial services focused entity. preferred

Technical or Specialized Knowledge/Skills:

• Mastered ability to lead a risk-based assurance strategy, develop a forward-looking audit pipeline, prioritize work across evolving risks, and influence enterprise-minded decisions that strengthen business outcomes and resiliency.
• Deep understanding of operational and technical information systems concepts and controls including network infrastructure, computer operating systems, database management systems, SDLC, change management, IT governance and complex computer applications.
• Demonstrated executive communication, storytelling, stakeholder partnership, and influencing skills, including the ability to communicate complex risk and control topics clearly and actionably.
• Experience working with a variety of technology platforms and must be familiar with performing network, hosted site/SaaS, database, cyber security operations, project management, and information system general controls audits.
• Strong understanding of technology processes (e.g., Change management, security, technology operations, and application controls).
• Strong professional judgment, critical thinking, professional skepticism, curiosity, courage, and ability to make sound decisions in ambiguity while preserving independence, objectivity, and quality.
• Strong understanding of financial institutions and applicable regulatory oversight.
• Aptitude for detail / analytical work.
• Proven ability to hold confidential information in strict confidence.
• Proven aptitude for leadership, mentoring staff, and initiative.
• (preferred) Experience in managing vendor relationships for outsourced audit services.
• Demonstrated ability to lead, coach, and develop team members through ambiguity and change while fostering belonging, inclusive and caring leadership, accountability, and future-ready skills, behaviors, and mindsets.

Certifications Required:

• Cert Info Sys Auditor One or more IT certifications (CISA, CISSP, CISM, etc.) required
• Cybersecurity Audit Certification preferred
• Certified in Risk and Information Systems Control (CRISC) preferred
• Related nationally accredited Auditor designation approved by upper management. required

Additional Information

PAY RANGE:

$150,000 to $175,100 Annually(I19) + 20% annual target bonus.
Final compensation for this position will be determined by various factors such as relevant work experience, specific skills and competencies, education, certifications, location and internal pay equity.

BENEFITS:

• Generous 401(k) match
• 401k Discretionary Profit Sharing
• Health Insurance
• Vision Insurance
• Life Insurance
• Short Term and Long Term Disability
• Health Savings Account with company contribution
• Employee Assistance Program
• Paid Vacation, Sick, Floating Holidays and Volunteer Time Off
• Paid Holidays
• Tuition Reimbursement
• Paid Parental Leave
  Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply