Sr. Internal Auditor - Cybersecurity

ESSENTIAL DUTIES AND RESPONSIBILITIES

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

1. Prepare for and lead effective client interviews and document interview results via narratives, flowcharts and process maps for complex business processes.

2. Analyze process documentation to evaluate design effectiveness and efficiency of controls.

3. Design and execute testing strategy by incorporating the use of data analytics.

4. Identify internal control weaknesses, including risks, and root cause.

5. Assist in guiding junior team members to enhance achievement of goals and objectives

6. Present and effectively communicate identified audit issues to Management and the Engagement Manager.

7. Develop advanced audit skills and begin developing risk assessment and project management skills

8. Deepen knowledge of the organization, operations, policies and procedures (including banking laws and regulations) under which Truist operates.

9. Create work papers in line with Truist Audit Services procedures and documentation requirements.

10. Work independently with minimal oversight to ensure work is completed on time and within deadlines.

11. Receive constructive feedback and apply to future assignments.

QUALIFICATIONS

Required Qualifications :

The requirements listed below are representative of the knowledge, skill and / or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

1. Bachelor’s degree in accounting, business or related field or equivalent education and related training or experience.

2. Four to six years of banking, auditing or other relevant experience related to area of responsibility.

3. Developing knowledge, ability and expertise in the principles and practices of technology, cybersecurity, IT infrastructure, IT service management processes and IT industry trends.

4. Developing knowledge of IT General Controls (ITGCs), IT Application Controls (ITACs), and the System Development Life Cycle (SDLC).

5. Developing knowledge of IT, information security and Cloud management and control frameworks (COSO, COBIT, NIST, SOX, PCI DSS).

6. Good decision-making skills.

7. Strong knowledge of audit principles, practices, and methodologies including risk assessment, and audit documentation.

8. Good aptitude for learning analytical, audit and / or facilitation skills.

9. Ability to grasp the underlying concepts in complex information.

10. Ability to identify root causes of problems.

11. Ability to formulate solutions based on a synthesis of information.

12. Proficiency in computer applications, such as Microsoft Office software products.

13. Ability to manage multiple priorities of varying complexities.

14. Ability to work independently with minimal oversight.

Preferred Qualifications :

1. Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.

2. Possess relevant professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), or Certified Ethical Hacker (CEH)

3. Proficiency in using cybersecurity tools and technologies, as well as audit management software.

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation : All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays.