Information Technology Auditor II

: Compensation Grade: 10 OUR VISION FOR DIVERSITY AND INCLUSION: FHLBank Atlanta contributes to our members' success through a diverse, inclusive, and engaged culture that enables all individuals to work together to fulfill our purpose. BASIC PURPOSE: Performs independent evaluations of the adequacy, effectiveness and efficiency of the systems of control within the organization, and the quality of ongoing operations in accordance with Internal Audit division policies and procedures, the Institute of Internal Auditors Standards for the Professional Practice of Internal Auditing, and applicable generally accepted auditing standards. The Information Technology Auditor II is responsible for independently performing all phases of an audit subject to the review of a more senior auditor. ESSENTIAL FUNCTIONS:

• Leads large and complex audits of the Bank's Information Technology functions and participates in complex, in-depth application reviews of Web-based and other distributed applications both in production and during development.
• Gains an understanding of the information systems area/function being audited and documents such understanding through use of flowcharts, narratives, and other forms of internal correspondence. Develops new or revises existing information systems audit procedures to test significant controls, and reviews such procedures with the designated manager.
• Performs and documents audit procedures and evaluates audit results and concludes as to the adequacy and effectiveness of internal controls and/or the degree of compliance with policies and procedures and applicable laws and regulations.
• Assists the designated manager in planning audits by risk assessments of the information systems functions and determining audit requirements and objectives.
• Performs or participates in system development reviews, special projects, interim reviews, and anticipatory audit techniques, and assists in conducting special investigations under supervision of the designated manager.
• Provides other Internal Audit department staff with information systems technical assistance and formal/informal training, as required.
• Assists with technical support for automated audit applications used in the department and works with audit staff in the design and use of ACL in audit testing.
• Keeps Internal Audit management current on material audit findings and other audit-related matters of significance.
• Maintains knowledge of applicable laws and regulations, accounting principles, auditing standards, and information technology issues. Completes applicable training programs. Maintains membership and participates in the activities of business, banking, and other organizations in order to maintain professional competence and certification.
• Participates in management meetings at varying levels when information systems auditing expertise is required.
• Basic understanding of scripts for general information technology controls and application controls related to Sarbanes-Oxley compliance.

KNOWLEDGE, SKILLS, ABILITIES: Excellent oral and written communication skills. Ability to work independently, manage multiple concurrent tasks and be results oriented without negative impact on quality of work. Possess knowledge and skills in order to use the personal computer as an audit tool (ACL and strong Microsoft Office experience is preferred). Thorough technical knowledge of information technology systems planning, design, analysis and programming language as it applies to the audit process. Familiarity with Web-based and distributed application design, security and controls. Experience auditing relational databases (Oracle, SQL Server and Sybase). Familiarity with IT Frameworks such as COBIT and NIST Demonstrate the ability to plan, organize, analyze, and draw logical conclusions. MINIMUM REQUIREMENTS A bachelor's degree, with an emphasis in information systems, accounting or other business subjects, three to five years of experience as an Information Systems Auditor with a demonstrated track record of increasing responsibility, or the equivalent combination of education and experience is necessary. Either Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP) required. Experience in banking or other finance services industry is strongly preferred. WORK LOCATION: Onsite with an opportunity to work remote partially. This position may not be filled in California, either in-person or remotely. We are an equal opportunity employer committed to diversity , equity, and inclusion in the workplace.