Senior IT Auditor

Responsibilities

• Assist in identifying, analyzing, and assessing IT, cybersecurity, and data security risks throughout Mercury.
• Scope and plan multiple audits across Mercury products and operations.
• Conduct process walkthroughs and execute audit testing to confirm the design and operational effectiveness of internal controls.
• Assess compliance with Mercury’s compliance obligations.
• Socialize, document, and report audit issues identified.
• Collaborate with teams to develop appropriate action plans, track audit issue remediation, and conduct issue follow-up testing.
• Other duties as assigned.

Requirements

• Experience scoping and planning new, complex audits.
• Comfortable conducting walkthroughs, creating audit test plans, and executing internal controls testing.
• Experience working with financial services companies, with working knowledge of laws, regulations, and risk management standards for financial services.
• Familiarity with IT control frameworks (e.g., NIST, ISO 27001, COBIT).
• Exposure to cloud environments (e.g., AWS) and related security controls.
• Experience with security and threat assessments.
• Ability to quickly grasp and understand complex business processes.
• Ability to build relationships/partnerships and work cross-functionally to drive time-sensitive deliverables, issues tracking, and reporting.
• Excellent written and verbal communication skills.
• Ability to manage own schedule to ensure deadlines are met.
• Self-starter who likes to innovate and think about how to do things differently to be more efficient and effective.

Nice-to-Haves

• Comfortable using AI tools (Claude, ChatGPT, etc.) to support day-to-day workflows.