Associate Principal, Internal Audit, Information Technology – Security

OCC

. Support and lead independent assessments of OCC’s Information Technology and Security environment, risk management, and related objectives .

Posted 10/13/2026full-timeUnited StatesMid-Level💰 $104,800 - $170,600 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in conducting risk-based Information Technology and Security audits, applying AICPA, IIA IPPF, COBIT, and NIST CSF principles. Proficient in evaluating management controls, identifying risks, and delivering actionable recommendations to enhance audit quality and compliance.

Highest-signal resume keywords

Risk-Based AuditingInformation Technology AuditsAICPA StandardsCISA CertificationMicrosoft Office Proficiency

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk ManagementAudit MethodologiesCybersecurity ReviewsData AnalysisRoot Cause Analysis

Soft Skills

Effective CommunicationProblem SolvingAnalytical ThinkingTeam CollaborationTime Management

Tools & Technologies

CyberArkSplunkServiceNowJiraConfluence

Certifications & Qualifications

CISACISSPCRMACIACPA

Industry Keywords

Financial ServicesReg SCIInternal AuditingOperational RisksCompliance Standards

Tech Stack

Tools & technologies

AWSCyber SecurityOracleServiceNowSplunkSQL

About the role

Key responsibilities & impact

Support and lead independent assessments of OCC’s Information Technology and Security environment, risk management, and related objectives
Determine the sufficiency of management controls and activities addressing regulatory, operational, and strategic risks
Present recommendations for improvements to engagement management and auditees
Support delivery of assigned audits within the annual audit plan
Support a professional auditee experience
Own audit quality, accuracy of results, and timely delivery
Identify regulatory, operational, and strategic risks and bring them to the engagement team
Evaluate exceptions or inefficient practices, identify root causes, and propose achievable solutions
Lead audits related to organizational changes, business requirements definitions, technology implementations, change management, security, and alignment with business objectives
Maintain understanding of policies, procedures, standards, and supporting technologies and educate staff
Apply AICPA, IIA IPPF, COBIT, and NIST CSF principles and standards to test and evaluate risk management processes and controls
Keep current on financial services industry best practices and emerging risks
Support relationships with business groups and leadership and partner with management
No supervisory responsibilities

Requirements

What you’ll need

Ability to communicate clearly and effectively, orally and in writing
Strong problem solving and analytical capabilities
Ability to gather, analyze, and evaluate facts and prepare concise oral and written reports
Ability to work independently or as part of a team and prioritize multiple audit assignments
Experience working in a complex, fast paced environment
Experience conducting audits in accordance with the International Standards for the Professional Practice of Internal Auditing published by the IIA
Bachelor’s degree (or equivalent) in Information Technology, Computer Science, Computer Engineering, Accounting, Finance, Business Administration, or related field
5+ years of audit-related experience conducting risk-based Information Technology and Security audits and projects, cybersecurity reviews, and internal audits
Required proficiency with Microsoft Office applications
Preferred familiarity with CyberArk, Splunk, SailPoint
Preferred familiarity with ServiceNow, Jira, Confluence, GitHub
Preferred familiarity with Oracle, DB2, SQL
Preferred familiarity with AWS and Workday
Preferred proficiency using Archer or other audit or GRC software
Preferred consulting and/or accounting firm experience
Preferred financial services/security industry experience and knowledge of regulations such as Reg SCI
Preferred CISA, CISSP, CRMA, CIA, CPA, or equivalent certification

Benefits

Comp & perks

A hybrid work environment, up to 2 days per week of remote work
Tuition Reimbursement
Student Loan Repayment Assistance
Technology Stipend allowing you to use the device of your choice while working remotely
Generous PTO and Parental leave
401k Employer Match
Competitive health benefits including medical, dental and vision
Discretionary annual incentive compensation award; target incentive range 8% to 15%