About the Role:

Wells Fargo is seeking a Senior Auditor for their Enterprise Technology Audit Group. The Enterprise Technology Audit Group (ETAG) conducts and coordinates audits of information technology and information security, primarily focused on the Wells Fargo Technology (WFT) organization, the Independent Risk Management (IRM) Technology, and the Third Party and information Risk Oversight (TPIRO) group. ETAG is broken out into the following sub-teams:

Chief Information Office (CIO) - CSBB Technology, Consumer & Small Business Banking, Consumer Lending Technology, Digital & Innovation Technology, Enterprise Functions Technology, Financial Crimes & Enterprise Data Technology, WIM Technology

Chief Technology Office (CTO) - Cloud Platforms, CIO Development, Change Enablement, Middleware

Information Security - Access Management, NIST Assessment, Cybersecurity Defense Monitoring, Information Protection, Third Party Risk

Infrastructure & Technology Recovery - Technology Continuity & Resiliency, Technology Infrastructure

Technology Governance - IT Governance, Risk Management, Compliance

Strategy & Digital, & Innovation Group (SDI) - Corporate Strategic Planning, Digital Platform, Innovation Group

The Senior Auditor will support the Audit coverage of the IT Governance, IT Infrastructure, Risk Management, Access Management and Application Development to include evaluating systems development life cycle, change management, computer operations, and information security risks and controls focused primarily on the application and database layer.

In this role, you will:

Perform audit testing components of assigned audits within multiple segments of the Audit Plan
Plan and execute independent audit testing and ensure that they are timely and accurate
Identify and assess key risks and controls
Execute and document work in accordance with Wells Fargo Audit Services policy
Identify and develop compensating controls that mitigate audit findings and make recommendations to management
Inform manager of situational issues that might compromise objectivity or independence
Design and execute tests to verify control effectiveness
Document work papers according to the standards of the Internal Audit policy and guidance
Demonstrate professional skepticism while performing major components of audits
Lead smaller scale audits or projects
Develop ways to improve existing audit practices
Develop effective test plans for engagements as assigned with limited guidance
Participate in projects as directed
Develop business partnerships within Internal Audit and with teams companywide through professional communication and clear audit deliverables

Required Qualifications:

4+ years of Audit, Risk experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

Relevant bachelors degree in information technology, auditing or accounting.
4+ years of experience in IT/IS Audit, Technology Governance, Risk Management or equivalent experience demonstrated through one or a combination of the following: work experience, training, military experience, education.
Be part of IT/IS audit engagements that are generally small to moderate in size and complexity, and on occasions, may handle multiple assignments.
Be responsible to assist the teams in the preparation of Walkthrough documents, identification of Process, Risk & Controls, performance of control effectiveness testing, drafting the findings and discuss issues with business stakeholders.
Exhibit understanding of business & infrastructure functions and the underlying technology, operational, financial, and regulatory aspects.
Establish & maintain relationships with business partners, relevant stakeholders, and identify emerging risks as part of ongoing business monitoring activities.
Develop and demonstrate strong understanding of audit approach and methodology.
Perform process walk-throughs, assess risks and perform control effectiveness testing.
Demonstrate professional ability to credibly challenge status quo.
Present audit results in an objective and unbiased manner.
Write audit issues reflecting relevant facts that lead to logical conclusions.
Escalate significant risks and loss exposures to appropriate levels of management.
Support other team members, if needed through the audit process.
Work effectively in a team environment and across all organizational levels, where flexibility, collaboration, and adaptability are important.

Job Expectations:

Credentials such as Certified Information Systems Auditor (CISA) and/or similar IT/IS certifications such CISSP, CISM, GSNA, CRISC, CIA, CCNA, CSX, GSEC, CCSP.
Experience performing audits in the areas of Cyber Security, Cloud, Mobile Apps, Automated Workers (RPA), Micro-services, Artificial Intelligence (AI), DevOps, and large-scale technology transformation projects/programs is highly desirable.
Background of Technology Audit, preferably within international financial service organizations.
Experience with general Information Technology control reviews as well as application control reviews.
Experience in medium to large-scale application reviews and system development projects, and ability to perform reviews on various platforms (e.g., Unix, Windows, i-Series, z/OS, SQL DB, Oracle DB, network devices).
Good knowledge or ability to learn quickly system development methodologies, information security controls, access management, technology governance and risk management.
Knowledge of information security management frameworks (e.g. COBIT, ISO 2700x, ITIL, NIST Cybersecurity Framework, SANS Top 20 Critical Security Controls).
Ability and zeal to build domain knowledge and overall business acumen.
Sound knowledge and understanding of audit methodologies and tools that support audit processes, and / or orientation to risk and controls.
Excellent verbal, written, and interpersonal communication skills.
Strong organizational, multitasking, and prioritizing skills.
Ability to work effectively in a team environment and across all organizational levels, where flexibility, collaboration, and adaptability are important.
Ability to execute in a fast paced, demanding environment while balancing multiple priorities.
Ability to work with minimal supervision and exercise independent judgment consistent with department guidelines.
Ability to execute in a fast-paced, demanding environment while balancing multiple priorities.
Agile mindset, problem solving attitude and good analytical skills with high attention to detail.
Willingness to handle global engagements and work in a shifting schedule.
Ability to travel approximately 10% of the time.

Role: IT Audit

Industry Type: IT Services & Consulting

Department: IT & Information Security

Employment Type: Full Time, Permanent

Role Category: IT Infrastructure Services

Education

UG: B.Tech/B.E. in Any Specialization

PG: Any Postgraduate

Senior Technical Lead

Senior Cybersecurity Risk & Compliance Specialist

Sr Advanced Embedded Engr

Senior Auditor - Sr-AVP- Governance & Control

SAP Basis Resource 5+ years

Mobile Android Engineering Manager, Google Home Growth