Manager, Internal Audit - Technology

Your Opportunity The Internal Audit Department (IAD) of The Charles Schwab Corporation provides independent and objective assessments to figure out whether all significant risks are identified and appropriately reported by management and risk functions to the Board and Executive Management, to evaluate whether risks are adequately controlled, and to challenge Executive Management to improve the efficiency of governance processes, risk management, and internal controls. The Technology enterprise team is seeking an Internal Audit Manager primarily responsible for handling infrastructure audits. The Technology internal audit enterprise team is responsible for the execution of infrastructure, application, and project audits. Infrastructure audits focus on systems and technology that support and secure Charles Schwab applications with a focus on areas such as cybersecurity, data center, information technology (IT) operations, change management, network security, and cloud computing. Application audits focus on automated functionality and data integrity that support business processes such as segregation of duties, configuration management, system interfaces, and data processing. Project audits are assessments over key initiatives to figure out whether intended business objectives were met and to identify risks or issues early. Reporting to a Director or Senior Manager of the Technology enterprise team, the Internal Audit Manager will have responsibility for the independent and objective assurance activity designed to improve the organization's operations and compliance with key regulations by evaluating and improving the efficiency of risk management, control, and governance processes specifically around the firm's IT infrastructure, operations, and security programs. This position is also responsible for working with auditing resources provided by an external co-sourcing provider. This individual will not have administrative responsibilities for direct reports. What you'll do:

Audit Execution:

Direct and supervise the design and execution of IT internal audits specific to infrastructure. Ensure work is performed in accordance with IIA standards and IAD policies and procedures. Participate in an audit team may include internal or co-sourced internal audit professionals. Lead meetings with partners Ensure coordination with integrated and data analytic audit teams Prepare and/or reviewing work papers to ensure clear identification of risks and issues, validating appropriateness of fieldwork testing, and sign-off on audit deliverables. Lead and advance changes in audit timelines, budget, resourcing, and achievements. Assess the quality of management's Risk & Control Self-Assessments; and support the assessment of the operational risk management program that leads the RCSA program.

Issues Identification:

Review draft issue observations, vet issues with key partners, identify compensating controls, and evaluate the appropriateness of the management action plan prior to finalizing the audit report.

Issue Management and Validation:

Monitor and review issue validation testing to ensure comprehensive testing and adherence to SLAs.

Business and Project Monitoring:

Participate in the department's business and project monitoring program execution to identify emerging risks.

Risk Assessment:

Participate in the annual Risk Assessment process, including the scoring and documentation of risk ratings. Review audit universe updates after the completion of each audit.

Coaching:

Provide support, mentoring, and feedback to the audit team throughout the audit. Provide assistance with onboarding and ongoing support to new team members.

Regulatory:

Conduct validation testing on the action plans completed by management to address MRAs. As needed, provide responses to IAD management related to regulatory questions during exams.

Administration/Training:

Completion of firm-wide and departmental administration and training requirements.

Other Initiatives/Special Projects:

As needed, assist with special projects related to business operational improvement or department strategic initiatives. What you have 5-7+ years of IT audit experience with growing responsibility. Financial services and/or Big 4 Accounting experience a plus. Demonstrated experience leading IT internal audits and their associated team members, amongst a complex operational and regulatory environment. Ability to lead a project team and cultivate a strong working relationship with external co-sourcing provider, regulators, and internal lines of businesses. CPA, CIA, or CISA strongly preferred. Other relevant certifications will be considered. Clear understanding of risks and internal controls and the ability to evaluate and figure out adequacy and effectiveness of controls. Stays current on industry and regulatory issues and standard methodologies; imparts this knowledge to the team and the auditees. Excellent analytical skills, including the ability to anticipate issues and to design appropriate solutions. Strong verbal and written communication skills with a shown ability to articulate effectively and authoritatively. Uses relationships and insights to successfully influence others. Builds authentic and trusted relationships to create alignment and support. Bachelor's degree required. Ability to travel occasionally to build relationships.