Senior IT Auditor - Hybrid

Are you looking to make a real impact in IT Audit while leveraging your cybersecurity expertise?Our client, a highly regarded financial services organization in the Hartford area known for strong internal mobility and career progression, is seeking a Senior / Lead IT Auditor to join its Technology Audit team. This high-visibility role will focus heavily on IT Security, alongside infrastructure and SOC 2 audits, offering the opportunity to lead key initiatives and partner closely with the business on critical risk areas.This is an ideal opportunity for a senior-level IT Auditor ready to step into a leadership-oriented role, gain exposure to enterprise-wide technology operations, and work with emerging technologies in a fast-paced, forward-thinking environment. The position requires strong analytical thinking, a risk-based audit mindset, and a genuine interest in cybersecurity and evolving IT landscapes.Title: Senior / Lead IT Auditor Salary: $90,000 – $120,000 + Bonus Location: Hartford County, CT (Hybrid)Summary This position offers the opportunity to analyze end-to-end IT & Security service operations and the complex tools and applications that enable them, which requires keeping pace with emerging technology and industry trends. In addition, you will review and analyze IT governance processes, as well as develop and perform continuous auditing techniques leveraging data analytics to provide ongoing insights on the health of the control environment for the Audit Committee of the Board of Directors and Senior Management.Key Responsibilities:

• Deliver risk-based assurance and advisory reviews in accordance with department professional standards in a team environment.
• Independently produce high quality work papers, clearly and comprehensively documenting understanding of control procedures and results of work performed.
• Effectively interface with 1st and 2nd lines of defense, including various levels of management, and have a working knowledge of effective governance processes for critical IT areas.
• Participate on all phases of the audit from planning to reporting, including understanding the technologies under review, how IT enables business operations, scoping the audit, identifying risks and controls, and designing and executing testing with minimal oversight.
• Examine key operational and information technology/security processes, leverage critical thinking skill to identify risks and ensure appropriate controls have been designed, and develop corresponding test procedures.
• Further technical knowledge through independent research/formal training and demonstrate a strong understanding when completing assigned work related to emerging technology risks for existing and new technology implementation efforts.
• Identify value-add improvement opportunities and control enhancements, effectively communicate audit issues and valuable recommendations in both technical and non-technical terms.
• Demonstrate understanding of data analysis concepts and practices.
• Possess an innovative mindset and contribute to process improvement initiatives, including establishment of continuous monitoring models across key IT controls and performance metric reporting.
• Demonstrate leadership through engagement and personal development.Qualifications:
• 4+ years of experience in IT/Security internal audit department, or equivalent IT/Security area.
• Experience in IT Audit with a Big 4 firm is a plus. Experience in auditing controls in the public cloud also a plus.
• Familiarity with California Consumer Privacy Act (CCPA)
• Strong understanding of SOC 2 audits, including experience evaluating controls related to security, availability, processing integrity, confidentiality, and privacy.
• Thorough and detail-oriented, as well as possessing the ability to piece together the ‘big-picture’ (vision/strategy, forward thinker).
• Strong critical thinking and analytical skills, as well as project management experience in an audit project setting.
• Deep knowledge of risk assessment; experience with optimizing processes is a plus.
• Desired candidate will have excellent written and verbal communication skills, and a history of demonstrated courage, conflict management, customer focus, dealing with ambiguity, interpersonal savvy, agility, and perseverance.
• Must be resourceful, adaptable, and able to effectively transition between priorities.
• Familiarity or proficiency with analytic tools and techniques, e.g., advanced Excel, SQL, Tableau, Python, is a plus.
• Familiarity with both industry frameworks/guidance (e.g., NIST CSF, CIS Critical Security Controls, etc.) as well as regulatory requirements (e.g., NY DFS 500, etc.) and an ability to assess against them.