IT Audit, Officer

Who we are looking for

We are looking for an Infrastructure IT Auditor, Officer within State Street’s Corporate Audit Division to participate in audit engagements focused on Information Technology within the Global Technology Services (GTS) Business Unit. GTS is a key enabler to achieving State Street’s vision to be a technology-led innovator, a leading enterprise outsourcing partner, and a resilient platform for our investors. GTS aims to deliver innovative product and platform capabilities, a resilient and scalable technology platform, and continuous productivity to enable State Street to win across each of its client segments. In this role, you will operate as part of dynamic and cross functional teams responsible for the execution of individual audit engagements. Working under the direction of the audit project lead, you will carry out a variety of responsibilities, which include: interfacing with business partners, executing control design assessments and operational effectiveness testing, developing audit test conclusions and drafting summary observations. You will also play a role in the onboarding and coaching of junior staff and support various departmental initiatives. This role is based out of Toronto, Ontario (Canada).

Why this role is important to us

The team you will be joining plays an important role in the overall success of the organization. Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability; regulators rely upon us to provide assurance that the bank operates in a manner that is compliant with key banking regulations to properly manage risks to the company and the global financial systems. To make that happen we need teams like yours to help navigate employees and the organization as a whole. In your role, you will help us build resilience and execute day to day deliverables at our best. Join us if making your mark in the financial services industry from day one is a challenge you are up for.

What you will be responsible for

As a Infrastructure Auditor, Officer you will:

• Perform audit work in line with the Division’s risk-based methodology and the Institute of Internal Auditor’s standards to identify and understand risk; determine control objectives; and evaluate whether controls sufficiently address identified risks through various testing techniques.
• Obtain and analyze evidentiary data as a basis for drafting informed and objective opinions on the adequacy and effectives of controls under review.
• Draft audit issues that clearly outline the identified issue and underlying root cause.
• Review corrective actions taken by management to improve deficient conditions.
• Escalate potential issues / obstacles to audit management along with proposed solutions.
• Develop and maintain understanding of internal State Street products and processes as well as relevant industry and regulatory topics.
• Develop relationships with audit clients and business partners across the lines of defense; serve as the primary audit contact for assigned area in individual audit engagements.
• Contribute to change initiatives through active participation in working groups and adoption of practices in day-to-day responsibilities.
• Assist in the onboarding of audit staff.

What we value

These skills will help you succeed in this role:

• The ability to operate in a complex, non-routine and fast-paced environment that requires working independently and as part of a team.
• Ability to clearly demonstrate proficiency in evaluating business processes, identifying inherent risk and testing associated internal controls.
• A high degree of professionalism and proficient organizational, analytical, problem solving and project management skills.
• Excellent communication (written and verbal), interpersonal and presentation skills
• Proven ability to research, interpret and apply regulatory requirements.
• Fluency in English, both written and spoken.

Education & Preferred Qualifications

• University degree in Information Systems, Computer Science, or related field; or, an advanced degree in Information Technology, Cyber Security, or Systems Engineering preferred.
• Preferred professional certification(s): CISA, CISSP, CRISC, CISM.
• Experience in auditing information technology general controls (ITGCs).
• 3+ years of experience executing or auditing the following technology-related areas:
  • Financial services operational processes and technology
  • Automated business process controls
  • Enterprise security controls frameworks
  • Enterprise application development models (i.e., waterfall, rapid prototyping, agile)
  • IT asset Management
  • Lifecycle Management
  • Technology Governance
  • Identity and Access Management / Privileged Access Management / Adaptive Authentication Solutions
  • Resiliency and Business Continuity Management
  • Cloud Solutions (SaaS, PaaS, IaaS)
  • Data Loss Prevention technologies and support processes
  • Vulnerability Scanning and Penetration Testing
  • Perimeter / Internal Security Technologies (Firewalls, Intrusion Detection, and Prevention Systems)
  • Network Segmentation and Separation Solutions
  • Platform and Configuration Hardening Practices
  • Threat Intelligence and Insider Threat Detection
  • Security Incident and Event Management (SIEM) Technologies
  • Cyber Incident and Response
  • Data protection (GDPR)

Additional requirements

While majority of the time you will work from your primary location, some domestic and international travel may be required to a variety of locations where State Street operates.

Are you the right candidate? Yes!

We truly believe in the power that comes from the diverse backgrounds and experiences our employees bring with them. Although each vacancy details what we are looking for, we don’t necessarily need you to fulfil all of them when applying. If you like change and innovation, seek to see the bigger picture, make data driven decisions and are a good team player, you could be a great fit.

About State Street

What we do. State Street is one of the largest custodian banks, asset managers and asset intelligence companies in the world. From technology to product innovation, we’re making our mark on the financial services industry. For more than two centuries, we’ve been helping our clients safeguard and steward the investments of millions of people. We provide investment servicing, data & analytics, investment research & trading and investment management to institutional clients.

Work, Live and Grow. We make all efforts to create a great work environment. Our benefits packages are competitive and comprehensive. Details vary by location, but you may expect generous medical care, insurance and savings plans, among other perks. You’ll have access to flexible Work Programs to help you match your needs. And our wealth of development programs and educational support will help you reach your full potential.

Inclusion, Diversity and Social Responsibility. We truly believe our employees’ diverse backgrounds, experiences and perspectives are a powerful contributor to creating an inclusive environment where everyone can thrive and reach their maximum potential while adding value to both our organization and our clients. We warmly welcome candidates of diverse origin, background, ability, age, sexual orientation, gender identity and personality. Another fundamental value at State Street is active engagement with our communities around the world, both as a partner and a leader. You will have tools to help balance your professional and personal life, paid volunteer days, matching gift programs and access to employee networks that help you stay connected to what matters to you.

State Street is an equal opportunity and affirmative action employer.

Discover more at StateStreet.com/careers