Audit Manager - Information Systems

The Audit Manager – Information Systems leads and executes IT audit engagements to evaluate the effectiveness of internal controls, risk management, cybersecurity, regulatory compliance, and technology governance across the organization. The role oversees audits from planning through reporting, partners with IT and Internal Audit leadership, communicates results and recommendations, and supports the continuous improvement of the organization's governance, risk management, and control environment.

• Cross-train, lead and develop team of associates to promote maximum productivity, engagement, succession planning and overall contribution to strategic organizational goals.
• Lead and manage information systems audits through managing audit lifecycle phases including controls testing, reporting, and follow up activities and ensure audits are completed within established timelines, budget, and quality standards.
• Develops information systems audit scopes, risk assessments, testing strategies, and work plans that align with organizational objectives and regulatory requirements that influence the project plans for information system audits.
• Facilitate audit walkthroughs with IT and key stakeholders to obtain audit relevant information, evaluate process effectiveness, and identify opportunities to strengthen internal controls and mitigate risk.
• Develop and document audit functions including risk and control matrices (RCMs) and testing procedures to evaluate the effectiveness of information technology controls, cybersecurity safeguards, system access management, and business process controls.
• Communicate audit objectives, information requests, project status, and findings in a clear, professional, and collaborative manner with IT managers and key stakeholders.
• Fosters productive relationships with IT managers and key stakeholders by clearly articulating audit requirements, explaining purpose and value of audit procedures, and maintaining a professional, solutions-oriented approach throughout the engagement, while also effectively managing challenging conversations and conflicting priorities.
• Review and validate audit documentation prepared by associates to ensure accuracy, completeness, consistency, and compliance with audit methodology standards.
• Actively engages in continuous learning to remain abreast of new technology and regulations that impact the information system audit engagements and utilizes continuous learning to adapt quickly to rapidly changing technology environments.
• Associates are expected to perform all additional duties as assigned.

• Bachelor's Degree Accounting, Information Systems, Information Technology, Cybersecurity, or related field
• Six (6+) years of IT audit, internal audit, risk management, information security, or technology consulting
• CISA Certification required
• Knowledge of IT audit methodologies, internal controls, and risk management practices
• Knowledge of information systems, cybersecurity principles, and technology-related business processes
• Relationship Management
• Project Management
• Communication and Facilitation skills
• Communication (written and verbal; regulators and external auditors)
• Critical Thinking and Problem Solving
• Analytical Thinking and Detail Oriented
• Microsoft Office/Productivity Tools (Excel, PPT, Word)
• Learning aptitude and adaptability
• Investigative and Research skills
• Knowledge of banking industry
• Familiarity with generative AI and other AI-enabled tools, with the ability to effectively incorporate these technologies into daily work activities to improve efficiency, innovation, and business outcomes.
• CISSP and/or CRISC certifications preferred

Physical Requirements/Working Conditions: Must be able to sit for long periods of time and use computer keyboard and/or mouse requiring hand and wrist manipulation, while viewing computer screens.

Management retains the right to add, delete or modify the responsibilities and qualifications of the position at any time.

Note: This is a brief description of this position and is not limited to those described herein. Management retains the right to add, delete or modify any of these responsibilities at any time during employment.

Trustmark Bank does not accept unsolicited resumes from agencies and/or search firms for any job postings on this site.  Resumes submitted to any Trustmark Bank employee by a third-party agency and/or search firm without a valid, written search agreement signed by Trustmark, will become the sole property of Trustmark Bank.  No fee will be paid if a candidate is hired for a position as a result of an unsolicited agency or search firm referral.