Director, Internal Audit (On-site)

Job Description

Job Description

Where it began…
In 1951 SF Fire Credit Union first opened its doors from a modest 10′ × 15′ office space in 17 Engine. It was from those humble beginnings—where everyone pitched in to help one another in their community—that the organization forged its way of business forever. Today, the San Francisco-based credit union has grown to $1.7B in assets and a membership that extends from the regional firefighters we trace our roots back to throughout our many neighbors in San Francisco, San Mateo and Marin Counties. Our members benefit from the ideas and principles that have shaped us: Shared trust, continuous innovation of products and services, competitive rates, and excellent member service. These qualities foster a true sense of member-ownership and strengthen the credit union’s bond with the people for whom this credit union was created.
What we stand for...
There are a few things we look for those we hire at SF Fire Credit Union, regardless of role or team.
First, do they align with our values?
Be Personal – Walk the Member/Employee Path
Be a Leader – Empower, Collaborate, Own
Be Outside the Box – Innovate, Educate, Engage
Be Real – Integrity and Transparency Matter
Be the Connection – Serve our Community
Second, will they thrive in a culture like ours, where we default to trust, embrace feedback, and desire to innovate? Finally, do they share our vision to help empower members to accomplish their dreams and build lasting financial security in whatever way is most relevant to their role?
What it feels like…
Most days it feels more like going to work with a big family. Whether it’s a pot luck lunch, baking birthday cakes for colleagues in the kitchen, or after-hours get together, we’re here to do a great job and have a good time while doing it! We value a good sense of humor, are motivated by a higher purpose, and always bring an “in-this-together” attitude.  While we’re driven to do great work, we also value real work/life balance.
Is This the Career for You?
The Director of Internal Audit is responsible for leading, managing, and advancing the Internal Audit function for the credit union. This hands-on leadership role serves as the primary liaison among the credit union, outsourced audit providers, management, business units, and regulatory examiners, as appropriate. The Director is responsible for developing and executing a comprehensive, risk-based audit program that provides independent assurance regarding the effectiveness of governance, risk management, internal controls, and regulatory compliance across the organization.
Given the credit union's current outsourced audit model, the Director will oversee and coordinate all internal audit activities, ensuring effective collaboration between external audit partners and business units throughout the audit lifecycle. Responsibilities include audit planning and scheduling, facilitating audit fieldwork, tracking and validating corrective actions, and providing regular reporting to management and the Audit & Enterprise Risk Committee. As the Internal Audit function matures, the Director will play a key role in building internal audit capabilities by conducting select audits in-house, enhancing monitoring and reporting processes, strengthening governance and control frameworks, and identifying opportunities to improve audit coverage, organizational oversight, and overall program effectiveness.
This is an individual contributor role with no direct reports.
What You’ll Be Doing
Audit Program Leadership and Strategy

• Develop, maintain, and execute a comprehensive risk-based Internal Audit Plan aligned with the credit union's strategic objectives, risk profile, regulatory requirements, and industry best practices.
• Perform annual enterprise-wide audit risk assessments and present audit plans and recommendations to management and the Audit Committee for approval.
• Continuously evaluate audit coverage and identify emerging risks requiring audit attention.
• Maintain the Internal Audit Charter, methodologies, policies, procedures, and quality assurance processes.
• Establish a long-term strategy to mature the Internal Audit function and increase internal audit capabilities.

Outsourced Audit Management

• Serve as the primary point of contact and relationship manager for all outsourced internal audit firms and co-sourced audit partners.
• Coordinate audit activities, schedules, scope, timelines, requests, and communication between auditors and business units.
• Ensure audit engagements are completed efficiently, independently, and in accordance with professional auditing standards.
• Review audit reports for quality, accuracy, completeness, and consistency before issuance.
• Monitor vendor performance and recommend changes to audit service providers when appropriate.
• Assist in negotiating audit scopes, engagement schedules, and annual audit budgets.

Audit Coordination and Execution

• Manage the annual audit calendar and coordinate all audit fieldwork activities across the organization.
• Facilitate audit entrance meetings, status meetings, and exit conferences with management and auditors.
• Coordinate responses to audit requests and ensure timely delivery of information and documentation.
• Act as a trusted advisor to management on audit observations, root causes, risk implications, and remediation strategies.
• Begin performing selected audits internally, including operational, compliance, financial, technology, and process-focused reviews where appropriate.
• Prepare audit work papers, testing documentation, observations, and reports for internally conducted audits.

Audit Issue Tracking and Remediation

• Maintain a comprehensive audit issue tracking program for all internal audits, external audits, and regulatory examinations.
• Monitor management action plans and remediation efforts for identified findings.
• Validate corrective actions and supporting evidence to ensure issues are appropriately resolved.
• Escalate overdue or high-risk issues to management.
• Provide regular reporting on audit findings, trends, and remediation status.

Reporting

• Prepare monthly, quarterly, and annual Internal Audit reports for the Audit Committee and Board of Directors.
• Develop meaningful reporting metrics, dashboards, and key risk indicators to support governance oversight.
• Maintain effective communication with executive leadership regarding significant audit matters.

Regulatory Examination Coordination

• Coordinate internal audit support for examinations conducted by the state regulators, external auditors, and other regulatory agencies.
• Serve as a key liaison between regulators and management during examinations.
• Coordinate examination requests, document submissions, management responses, and follow-up activities.
• Track regulatory findings and monitor corrective action plans through completion.
• Analyze examination results and identify opportunities to strengthen controls and compliance practices.

Governance, Risk Management, and Control Enhancement

• Evaluate the adequacy and effectiveness of internal controls, governance practices, and risk management processes.
• Partner with business leaders to identify control improvements and risk mitigation opportunities.
• Promote a culture of accountability, compliance, and continuous improvement across the organization.
• Support enterprise risk management initiatives by providing independent assurance and insight.
• Recommend enhancements to policies, procedures, monitoring activities, and control frameworks.

Program Development and Continuous Improvement

• Develop a roadmap for expanding the Internal Audit function and bringing select audit activities in-house.
• Implement audit management tools, issue tracking systems, and reporting enhancements.
• Establish ongoing monitoring and continuous auditing processes where appropriate.
• Stay informed of regulatory developments, industry trends, emerging risks, and auditing best practices affecting credit unions.
• Lead special projects, investigations, and consulting engagements as assigned.

What We Look For In You
Education

• Bachelor's degree in Accounting, Finance, Business Administration, Risk Management, or related fields.

Experience

• Minimum 8-10 years of progressive experience in Internal Audit, Risk Management, Regulatory Compliance, Public Accounting, or related fields.
• Minimum 5 years of experience leading audit programs within a financial institution, credit union, bank, or financial services organization.
• Experience interacting with Audit Committees, executive leadership, external auditors, and regulators.
• Experience managing outsourced audit providers or co-sourced audit arrangements strongly preferred.
• Experience conducting operational, financial, compliance, and risk-based audits.
• Credit union industry experience preferred.
• Experience with regulatory examinations and supervisory activities preferred.
• Experience building or maturing an Internal Audit function is highly desirable.

Certifications
One or more of the following certifications preferred:

• Certified Internal Auditor (CIA)
• Certified Information Systems Auditor (CISA)
• Certified Risk Management Assurance (CRMA)
• Certified Fraud Examiner (CFE)

COMPETENCIES
Knowledge, Skills, and Abilities

• Thorough knowledge of internal auditing principles, professional standards, and risk-based audit methodologies.
• Strong understanding of credit union operations, regulatory requirements, compliance frameworks, and internal controls.
• Knowledge of NCUA regulations, state regulatory requirements, and financial institution governance practices.
• Ability to assess organizational risk and develop effective audit strategies.
• Strong project management and organizational skills.
• Excellent analytical, problem-solving, and critical-thinking abilities.
• Exceptional written and verbal communication skills.
• Ability to present complex information effectively to management.
• High degree of integrity, objectivity, professionalism, and confidentiality.

Physical Demands
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
While performing the duties of this job, the employee is regularly required to sit. The employee frequently is required to use hands to handle objects and to operate a PC, and to talk or hear. Specific vision abilities required by this job include close vision and the ability to adjust focus.
Note: This job description is non-contractual, or an exhaustive list and it may be added to or changed to from time to time.
Salary
This compensation range takes into account the wide range of factors that are considered in making compensation decisions including but not limit