IT Audit Senior Associate (EMEA Shift)

Are you ready to make an impact at DTCC? 

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We're committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

Pay and Benefits:

• Competitive compensation, including base pay and annual incentive


• Comprehensive health and life insurance and well-being benefits, based on location


• Pension / Retirement benefits 


• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.


• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee). 

The impact you will have in this role:

Being a member of the Internal Audit Team means you will be part of a diverse and collaborative team. The IT Audit Senior Associate is predominantly passionate about audit projects, participating in planning, driving fieldwork, and assisting with report writing and clearance. The primary measure of success is identifying meaningful potential issues about the design and efficiency of controls, while creating reliable and well-written documentation to support conclusions. The IT Audit Senior Associate must handle a number of auditee relationships, be a good team player, and take accountability for their personal growth and professional development.   

What You’ll Do:

Strategic Control Impact - Identifies important issues in which controls are not accurately designed or are not operating effectively. Assesses the risk and control environment for processes within coverage areas. Work closely with auditees to verify timely progress and completion of agreed upon issue closure, under the mentorship of a supervisor. Understands the financial services industry and risk and control environment for coverage areas and identifies new risks. 

Audit Execution - Assists an IT Audit Manager with the execution of audit planning, fieldwork, and reporting. Completes risk-focused fieldwork on time and within the allocated budget, advising the auditor in charge promptly of issues that arise or when budgets or timelines are at risk. Understands and performs root cause analysis for issues. Possesses and demonstrates a strong understanding of audit techniques. Performs validation of prior identified issues, along with periodic continuous monitoring of key controls. 

Quality Process - Demonstrates a validated understanding of our policies, procedures, and documentation standards. Independently prepares work papers that fully align with IAD policies and procedures. Participates in continuous improvement initiatives. Aligns risk and control processes into day to day responsibilities to supervise and mitigate risk; escalates appropriately. 

**NOTE:  The Primary Responsibilities of this role are not limited to the details above. ** 

Sounds Like You?

• Bachelor’s degree is required, preferably with a technology-related major.


• Certifications related to the candidate’s coverage responsibilities are beneficial, but not required, such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), and Certified Information Systems Security Professional (CISSP). 

Talents Needed for Success:

• Minimum of 6 years of related experience 


• Previous job experience for IT Auditors can vary to meet the department’s goal of having a team with diverse perspectives and work experiences. 


• Capable of identifying, assessing, and advising on risks for large-scale technology projects, IT general controls and completing IT process audits (e.g., SDLC, Change Management, Logical Security, Business Continuity/Disaster Recovery, and Incident/Problem Monitoring), as well as reviewing application-level processes and controls. 


• Proficiency in auditing cyber security and infrastructure components is a plus (e.g., Mainframe, Unix/Linux, Windows).