Sr. IT Auditor at Cathay Bank

People Drive Our Success

Are you enthusiastic, highly motivated, and have a strong work ethic? If yes, come join our team! At Cathay Bank – we strive to provide a caring culture that supports your aspirations and success. We believe people are our most valuable asset, and we proudly foster growth and development empowering you to achieve your professional goals. We have thrived for 60 years and persevered through many economic cycles due to our team members’ drive and optimism. Together we can make a difference in the financial future of our communities.

Apply today!

What Our Team Members Are Saying

Video Clip 1

Video Clip 2

Video Clip 3

Learn more about us at cathaybank.com

General Summary

The Senior IT Auditor is responsible for Information Technology (IT), Information Security (IS), and Integrated Audits as well as special projects under the direction of IT audit management. The Senior IT Auditor will assist Internal Audit management with project planning, execution, and reporting.

DIRECT REPORTS

None

Essential Functions

• Under the direction of IT Audit management, owns the execution of assigned key audit process areas (i.e., planning, testing, reporting and remediation testing activities) for IS, IT, and Integrated Audits in accordance with professional and department standards.
• Responsible for owning and executing assigned audit process areas from start to finish, including planning, audit execution (according to a risk-based approach), recommending internal control improvements (including operational enhancements or efficiencies), preparing audit reports and conducting remediation testing activities.
• Effectively manage the budget and deadlines and provide timely project updates to management for assigned audits.
• Demonstrate experience in IT, IS, IT application controls, business process control reviews, systems development / project reviews and IT general computer controls.
• Ensure the assigned audit deliverables (e.g., planning memo, audit report) meet department guidelines, and the conclusions are properly supported.
• Ensure assignments are completed within established time frames and that delays/issues/concerns are communicated to Internal Audit management in a timely manner.
• Partner with process owners to promote and support a culture of continuous process improvement and efficiency driving toward standardized practices.
• Stay abreast of emerging IT/IS risks issues in the areas applicable to the Bank.
• Obtain and maintain a general understanding of business activities, objectives, applicable laws, regulations, and associated risks to the Bank and industry.
• Identify opportunities for, and participate in approved special projects, investigations or other significant business issues.

Qualifications

• Bachelor’s degree in Accounting, Finance, Information Technology, or a related field required. An equivalent combination of education and relevant experience may be considered. Master’s degree in management information systems or a related discipline is preferred.
• Minimum 3 years of IT/IS audit-related work experience in a public accounting or private industry internal audit, including at least 2 years in a Bank or Financial Services industry is required.
• Demonstrated hands-on experience independently executing information security and technology audits across the areas listed below. Experience must include assessment of process design, control execution, supporting evidence, and underlying technical configurations, as well as development of audit observations and conclusions.Asset, Incident, Problem, Change, and System Development Lifecycle (SDLC) Management
• Data Governance (e.g., data lineage, data quality, data ownership, classification)
• Network Security and Management (e.g., network topology, switches, routers, segmentation, firewall rule management, IDS/IPS, DNS security)
• Database Security and Management (e.g., SQL Server, database permissions, privileged access, audit logging, encryption)
• Security Monitoring, Detection Engineering, Incident Response, IAM/PAM, Vulnerability Management, Patch Management, and Configuration Hardening
• Cloud, Endpoint, and Platform Security (e.g., Azure, Microsoft Defender, Microsoft Sentinel, Microsoft Purview)
• Operating System Security (e.g., Windows, Linux, Active Directory, Group Policy)
• Retail and Wholesale Payment Systems (e.g., ACH, wire transfers, online banking, Fedwire, CHIPS, SWIFT, and payment messaging systems)
• Regulatory and Industry Frameworks (e.g., GLBA Section 501(b), FFIEC, NIST, ISO, COBIT)
• Ability to work independently and with others.
• Knowledgeable about the financial industry and related markets, related regulatory bodies, and current industry events and trends
• Strong understanding of risk assessment, audit methodology, and IT/IS audit execution, including the ability to identify risks, assess controls, develop and execute testing procedures, evaluate technical configurations and supporting evidence, and communicate clear, well-supported audit conclusions. Strong time management and organizational skills including the ability to manage multiple projects and competing priorities.
• Ability to exercise sound judgment in the execution of assignments and communication with others.
• Excellent verbal and written communication skills; interpersonal and presentation skills – ability to work closely and collaboratively with people at all levels in the department and within the organization.
• Strong analytical thinker and detail oriented with the ability to proactively identify issues and assist in resolution.
• Excellent computer skills, Proficient in Microsoft Office Products (i.e. Excel, PowerPoint, Word, etc.).

Certifications

• CISA, CISM, CISSP or other relevant professional certification highly desirable
• Additional qualifications, such as CFE, CIA and CAMS also preferred

Other Details

Pay Range: $70,000 – $110,000 / year.

Pay determined based on job-related knowledge, skills, experience, and location.

This position may be eligible for a discretionary bonus.

Cathay Bank offers its full-time employees a competitive benefits package which is a significant part of their total compensation. It is our goal to provide employees with a comprehensive benefits package to fit their needs which includes, coverage for medical insurance, dental insurance, vision insurance, life insurance, long-term disability insurance, and flexible spending accounts (FSAs), health saving account (HSA) with company contributions, voluntary coverages, and 401(k).

Cathay Bank may collect personal information from potential job candidates and applicants. For more information on how we handle personal information and your applicable rights, please review our California Job Applicant Privacy Policy.

Cathay Bank is an Equal Opportunity and Affirmative Action Employer. We welcome applications for employment from all qualified candidates, regardless of race, color, ethnicity, ancestry, citizenship, gender, national origin, religion, age, sex (including pregnancy and related medical conditions, childbirth and breastfeeding), reproductive health decision-making, sexual orientation, gender identity and expression, genetic information or characteristics, disability or medical condition, military status or status as a protected veteran, or any other status protected by applicable law.

Click here to view the “Know Your Rights: Workplace Discrimination is Illegal” Poster:

Poster- English

Poster- Spanish

Poster- Chinese Traditional

Poster- Chinese Simplified

Cathay Bank endeavors to make www.CathayBank.comaccessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact, Mickey Hsu, FVP, Employee Relations Manager, at (626) 582-7370 or [email protected]. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.