What are the responsibilities and job description for the Senior Internal Audit Associate - Cybersecurity position at JPMorgan Chase?
We are on the lookout for a talented Senior Associate to join our Cybersecurity and Technology Controls Internal Audit team with a focus on Technology Governance, Risk, and Compliance. This is your opportunity to play a crucial role in enhancing our organization's governance and operational excellence!
As a Technology Senior Internal Audit Associate within the Cybersecurity and Technology Controls Team, you will execute the annual audit plan, participate in audit engagements by performing audit testing, and participate in various continuous monitoring efforts.
Job Responsibilities
- Participate on technology audit engagements, from planning to reporting, and produce quality deliverables to both department and professional standards, while ensuring audits are completed timely and within budget.
- Work closely with global Audit colleagues in the early identification of emerging control issues, and report them in a timely manner to Audit management and business stakeholders
- Partner with stakeholders, business management, other control groups (i.e. risk management, compliance, fraud prevention), external auditors, and regulators, establishing strong working relationships while maintaining independence
- Finalize audit findings and use judgment to provide an overall opinion on the control environment by developing recommendations to strengthen internal controls
- Communicate audit findings to management, and identify opportunities for improvement in the design and effectiveness of key controls
- Stay up-to-date with evolving industry/regulatory changes and emerging technologies impacting the business and participate in appropriate control forums
- Find ways to drive efficiency with existing technical infrastructure through automation while embracing the innovative opportunities offered by new technologies
- Recognize the confidential nature of Internal Audit communications and access to information; exercise discipline in protecting the confidentiality and security of information in accordance with firm policy
Required qualifications, capabilities and skills
- Bachelor's degree in a Technology-based field (e.g., Computer Science, Engineering, Cybersecurity, etc.) (or comparable relevant experience)
- Extensive internal or external technology auditing experience, or relevant technology risk and control management experience.
- Understanding of internal control concepts, with proven ability to evaluate and determine the adequacy of controls by considering business and technology risks in an integrated manner.
- Advanced analytical skills, particularly in regard to assessing the probability and impact of an internal control weakness
- Excellent written, verbal, and presentation skills; adept at presenting complex and sensitive issues to senior management and strong interpersonal and influencing skills, with the ability to establish credibility and build partnerships with senior business and control partners
- Enthusiastic and self-motivated, with a keen interest in learning; effective under pressure and willing to take personal responsibility/accountability as well as adaptable to changing business priorities and ability to multitask in a constantly changing environment
Preferred qualifications, capabilities and skills
- Experience with internal audit methodology and applying concepts in audit delivery and execution preferred
- Certified in CISA, CISM, CRISC, CISSP, CCSP or other technology certifications
- Risk management knowledge in public cloud provider (AWS, GCP, Azure) services