Senior Associate, Technology Audit

When you join Sallie Mae, you become a champion for all students.

We’re on a mission to power confidence as students begin their unique journey. To help them plan their higher education, successfully finish, and prepare for life after school.

To help them Start smart. Learn big.

Students need guidance navigating this important time in their life. They need someone who acknowledges that their education path is unique.

They need a partner willing to evolve and not only meet but surpass their expectations. We’re changing. Because students need a better way.

We’re looking for people who are excited to drive this transformation. To break barriers and think of new ways to adapt, help, and create better experiences for students and for each other.

This is where diverse backgrounds, beliefs, and perspectives matter. It’s where you’re empowered to bring your authentic self to work.

Feeling your best allows you to do your best. Our benefits take care of the whole you from physical and mental to financial and professional.

You’ll get opportunities to further your education and career, support for you and your family (including your pets!), paid time off to volunteer for the things that matter to you, and more.

We’re obsessed with impact and making a real difference. For us, that means putting relationships first, asking why not? when tackling challenges, and continuously learning new skills.

Come do more than join something, change something. For students, for future generations, for the future of education.

What You'll Contribute

Looking for an opportunity to be an integral part of organizational change? Want a chance to blend your technology savvy skills with the rigor and discipline internal audit is known to champion?

Then here is your chance to join a vibrant, collaborative, and dynamic team of professionals within Sallie Mae's IT Audit department.

As part of the team, you will be contributing to the Strategic and operational aspects of our technology-focused audits.

You will have the ability to analyze the efficiency and effectiveness of IT controls and providing input on the overall IT governance framework.

What You'll Do

• Conduct comprehensive technology audits, including IT general controls, application controls, system development life cycle, cybersecurity, and other related areas.
• Assess IT processes, systems, and controls to identify risks, evaluate their impact, and recommend appropriate remedial actions.
• Evaluate the effectiveness of IT governance, risk management, and internal control processes.
• Identify control deficiencies and areas for improvement and provide practical and actionable recommendations to enhance IT controls and processes.
• Collaborate with stakeholders to identify potential process improvements and continue to support the process maturation journey of the Bank.
• Conduct post-audit follow-up to verify the implementation and effectiveness of recommended actions.
• Prepare clear and concise audit reports, summarizing findings, recommendations, and management responses.

What you have

Minimum education, skills and experience required.

• Proficient in evaluating and testing IT general controls, application controls, and cybersecurity controls.
• 2+ years of relevant experience in technology audit, IT risk management, or a related field.
• Familiarity with auditing data analytics and automated controls is advantageous.
• Solid knowledge of industry regulations and standards (e.g., SOX, GDPR, ISO 27001).
• Excellent analytical and problem-solving skills, with the ability to identify control deficiencies and propose practical solutions.
• Strong project management abilities, including the ability to prioritize tasks, meet deadlines, and manage multiple assignments simultaneously.

Preferred education, skills, and experience.

• Bachelor's degree in information technology, computer science, or a related field. A master's degree or professional certifications (e.g., CISA, CISSP) are a plus.
• 3+ years of relevant experience in technology audit, IT risk management, or a related field.

Education :

• Bachelor's degree in information technology, computer science, or a related field.
• A master's degree or professional certifications (e.g., CISA, CISSP) are a plus.

Experience :

3+ years of relevant experience in technology audit, IT risk management, or a related field.

Knowledge, Skills, and Abilities :

• Proficient in evaluating and testing IT general controls, application controls, and cybersecurity controls.
• Experience in assessing emerging technology risks, such as cloud computing, artificial intelligence, and blockchain.
• Familiarity with auditing data analytics and automated controls is advantageous.
• Solid knowledge of industry regulations and standards (e.g., SOX, GDPR, ISO 27001).
• Excellent analytical and problem-solving skills, with the ability to identify control deficiencies and propose practical solutions.
• Strong project management abilities, including the ability to prioritize tasks, meet deadlines, and manage multiple assignments simultaneously.
• Interpersonal skills : having the ability to develop and maintain relationships with teammates and auditees.

Additional :

CISA, CISSP, CISM or similar certifications preferred

The Americans with Disabilities Act

Not the right fit? Let us know you're interested in a future opportunity by clickingin the top-right corner of the page or create an account to set up email alerts as new job postings become available that meet your interest!

Sallie Mae is proud to be an equal opportunity (EEO) employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, sexual orientation, national origin, age, genetic information, gender identity, disability, Veteran status or any other characteristic protected by federal, state or local law.

Click to view the U.S. Pay Transparency Policy, and for federal job applicant notices.

Reasonable accommodations are available for applicants with disabilities in all phases of the application and employment process.