Internal Audit Technology - Associate

Job Description Corporate Title: Associate Department: Internal Audit Location: New York Base pay range: $120K - $150K/year* Company Overview Nomura is a global financial services group with an integrated network spanning over 30 countries and regions. By connecting markets East & West, Nomura services the needs of individuals, institutions, corporates and governments through its three business divisions: Retail, Wholesale (Global Markets and Investment Banking), and Investment Management. Founded in 1925, the firm is built on a tradition of disciplined entrepreneurship, serving clients with creative solutions and considered thought leadership. For further information about Nomura, visit Aon’s Benefit Index®, Nomura’s benefits rank #1 amongst our competitors Department Overview The Internal Audit department is a key part of the firm's corporate governance, and the department’s primary objectives are to review the company's control environment and report any weaknesses identified to the Audit Committee and senior management. The department in the US comprises over 35 professionals, split across Business, Risk, Legal & Compliance and IT audit teams reporting functionally to the Global Portfolio Directors of each division and to the Regional Head of Internal Audit for the Americas. Role Description The Associate, Infrastructure and Information Security Technology Audit professional position is a role within Nomura Internal Audit. It reports to the regional lead manager responsible for audits of the CIO Technology Division in Americas. The Associate will have opportunities to take responsibility for major sections of audits of Infrastructure, Information Security, Cloud and other corporate functions globally. Other aspects of the role include supporting related Internal Audit activities, including risk assessments, issue remediation validation, continuous monitoring, and continuous auditing. Responsibilities Assist in the scoping and execution of assurance work in regional and global audits. Assess risks and evaluate the strength and viability of control structures and procedures within Technology. Ensure all audit work is executed in accordance with Departmental Audit Methodology and documentation standards. Stay actively engaged in all phases of assigned audits, from audit planning through testing, completing workpapers, drafting and clearing audit issues with stakeholders, and monitoring own time against budgets and deadlines. Monitor issue remediation status monthly and verify that issues are remediated prior to closure. Develop and assist in the implementation of effective data analytics and automated testing to identity internal control weaknesses during Internal Audit reviews and continuous auditing. Remain current on any changes to Nomura’s risk profile through continuous monitoring the assigned area of responsibility and establishing close contact with Technology stakeholders. This includes assessing operational risk events and other key metrics and updating the audit risk assessments appropriately. Skills, Experience, Qualifications and Knowledge Required Prior experience in the audit of functions within a large financial institution. The candidate should have many of the skills and qualifications listed below. A good understanding of key processes, risks and controls in a large financial institution, with a preference for knowledge and experience of Technology Infrastructure, Information Security and Cloud audits. Experienced in understanding, assessing and documenting relevant risks and controls preferable for Broker-Dealer or Financial Services. Experience in and ability to discuss risks and control issues effectively with senior auditees. Strong understanding of the use of technology, relevant risks, and control processes. Firm understanding of project management and systems development processes. Experience with applications and technology infrastructure typically employed to support an Investment Bank / Broker-Dealer. Strong knowledge of IT security, including both technical and business controls. Firm understanding of technology including Linux, Windows, Messaging Infrastructure, Collaboration Tools, Cloud Infrastructure, Remote Access Technologies and Networking products. Demonstrate ability to work across teams and multi-task. Confident manner and well-developed communication (both verbal and written), influencing, interpersonal and project management skills. Experience in assessing controls based on NIST, SANS, ISO2700 or other leading cyber security frameworks. Relevant certification or industry accreditation (CISA, CISSP, CISM, securities licenses, etc.) is a plus but not required. Good understanding of US market structure, and the regulatory compliance environment, including SEC and CFTC regulatory requirements applicable to the global markets in the US. *base pay offered may vary depending on multiple individualized factors, including market location, corporate and functional title and duties, job-related knowledge and advanced degrees, skills, and experience. The total compensation package for this position may also include other elements, including a sign-on bonus, restricted stock units, and discretionary awards in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as vacation, sick time, and parental leave), dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment. If hired, employee will be in an “at-will position” and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors. Nomura is an Equal Opportunity Employer #J-18808-Ljbffr Nomura