What are the responsibilities and job description for the AVP, IT Auditor position at Bayview Asset Management, LLC?
Overview
ABOUT US:
Founded in 1993, Bayview Asset Management is an investment management firm focused on investments in mortgage and consumer credit, including whole loans, asset-backed securities, mortgage servicing rights, and other credit-related assets.
POSITION SUMMARY:
The Assistant Vice President (AVP), IT Audit Manager serves as a senior leader within Bayview’s Internal Audit Department, responsible for delivering independent assurance on technology governance, cybersecurity, and operational resiliency across the enterprise. The AVP partners with senior IT and business leaders—including the CIO, CISO, and CTO—to assess the effectiveness of IT controls, identify emerging risks, and drive continuous improvement in control design, automation, and analytics. This role also provides mentorship to audit staff and fosters innovation in audit execution.
Travel is expected to be limited (generally less than 10%).
DUTIES AND RESPONSIBILITIES:
Audit Execution - Planning
Bayview is an Equal Employment Opportunity employer. All aspects of consideration for employment and employment with the Company are governed on the basis of merit, competence and qualifications without regard to race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, or any other category protected by federal, state, or local law.
ABOUT US:
Founded in 1993, Bayview Asset Management is an investment management firm focused on investments in mortgage and consumer credit, including whole loans, asset-backed securities, mortgage servicing rights, and other credit-related assets.
POSITION SUMMARY:
The Assistant Vice President (AVP), IT Audit Manager serves as a senior leader within Bayview’s Internal Audit Department, responsible for delivering independent assurance on technology governance, cybersecurity, and operational resiliency across the enterprise. The AVP partners with senior IT and business leaders—including the CIO, CISO, and CTO—to assess the effectiveness of IT controls, identify emerging risks, and drive continuous improvement in control design, automation, and analytics. This role also provides mentorship to audit staff and fosters innovation in audit execution.
Travel is expected to be limited (generally less than 10%).
DUTIES AND RESPONSIBILITIES:
Audit Execution - Planning
- Lead interviews and walkthroughs with business and technology owners.
- Develop audit scope, approach, and planning memoranda for IT audit engagements.
- Contribute to the development of the annual audit plan and enterprise risk assessment.
- Design and execute risk and control matrices for IT processes, including applications, cloud, network, and cybersecurity.
- Evaluate compliance with cybersecurity and data privacy regulations (e.g., NY DFS Part 500, GLBA, GDPR).
- Perform control testing and analytical procedures with minimal supervision.
- Document work performed using audit management software (e.g., AuditBoard) in accordance with professional standards.
- Identify control gaps, root causes, and recommend actionable improvements to strengthen risk management and governance
- Apply Bayview’s Internal Audit Procedures and the IIA International Professional Practices Framework (IPPF).
- Promote continuous improvement through the use of agile audit techniques, analytics, and automation.
- Drive enhancements in audit methodology, templates, and toolsets.
- Serve as a resource for technical guidance, risk evaluation, and best practices across the audit team.
- Partner with IT and business leadership to align audit focus with enterprise risk priorities.
- Communicate emerging technology risks, trends, and control themes to senior management and the Audit Committee.
- Support interactions with regulators, external auditors, and other assurance providers regarding IT risk and controls.
- Lead meetings to obtain process understanding, provide engagement updates, and communicate audit results.
- Develop clear, concise, and well-supported audit reports summarizing scope, findings, and recommendations.
- Present results to management and influence agreement on control enhancements and remediation actions.
- Mentor and provide feedback to junior auditors; may supervise direct reports.
- Foster a collaborative, high-performance culture focused on learning and innovation.
- Share technical expertise, emerging risk insights, and best practices with the broader team.
- Demonstrate a strong understanding of Bayview’s policies, regulatory obligations, and data handling responsibilities.
- Uphold Bayview’s values of honesty, integrity, professionalism, accountability, creativity, and teamwork.
- Take ownership for work quality, adapt to change effectively, and maintain a proactive approach to problem solving.
- Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field.
- Minimum of 6 years of experience in IT audit, cybersecurity, or related technology risk disciplines.
- Experience in financial services, asset management, lending, or mortgage servicing preferred.
- Familiarity with regulatory and control frameworks such as FFIEC, NIST CSF, COBIT, and SOX 404.
- Knowledge of emerging technologies such as AI/ML, RPA, and cloud security.
- Public accounting or Big 4 experience preferred.kills, Knowledge, and Abilities.
- Preferred certifications include CISA, CISSP, CIPP, CIA, or cloud security certifications (e.g., AWS Security, Azure Administrator).
- Active pursuit of one or more certifications is encouraged.
- Advanced knowledge of IT systems and infrastructure (applications, cloud, network, access control, cybersecurity, database administration).
- Proficiency with data analytics tools (e.g., Power BI, SQL, Python, ACL, IDEA) to enhance audit coverage and insight.
- Strong command of internal audit principles, risk assessment, and control evaluation methodologies.
- Excellent analytical, critical-thinking, and problem-solving skills.
- Proficiency in Microsoft Excel (advanced functions, macros, pivot tables), Word, PowerPoint, and Visio.
- Experience with audit management software such as AuditBoard.
- Effective project management, prioritization, and multi-tasking capabilities.
- Exceptional written and verbal communication skills; able to articulate complex IT issues to non-technical audiences and executive stakeholders.
- Demonstrated ability to lead, motivate, and develop team members; strong collaborator and influencer.
- Ability to connect audit results to broader enterprise risk management objectives.
Bayview is an Equal Employment Opportunity employer. All aspects of consideration for employment and employment with the Company are governed on the basis of merit, competence and qualifications without regard to race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, or any other category protected by federal, state, or local law.