OneMain Financial is the country's largest lending-exclusive financial company, proudly serving millions of customers with safe, affordable and transparent installment loans. Our customers turn to us every day-online and at over , branches in states-to help them take control and improve their financial lives . It's all about doing the right thing-a mission that hasn't changed for more than years.
This position will report into the Technology Governance, Audit & Compliance organization and will lead audit and assessment related activities impacting the Technology organization. This role will focus on many aspects of Technology relative to controls evaluations, process reviews, risk assessments and audits.
Responsibilities
Act as the Technology Liaison between Cyber Risk, SOX/PwC and Internal Audit functions on all audit & compliance related activities.
Partner with Cyber Risk, SOX/PwC, and Internal Audit to understand expectations for the role of Technology
Educate and communicate to Technology teams
Notify teams about control areas, audit types, timing & requirements (, Legal / regulatory)
Manage points of contact for each domain area
Make sure interviewees are prepared – obtain questions in advance, help technologists understand how to respond
Coordinate & oversee audits and assessments
Keep audits & assessments within scope
Manage audit findings: Provide clarity, share additional context that auditors and/or assessors may have missed, explain compensating controls, reconsider the validity & risk level of any findings. Ensure findings are communicated, reviewed and responded to formally with the proper visibility.
Manage remediation action items to closure. Track risks to closure. Quantify any business benefits or cost savings as a result of our work.
Publish and continue to enhance audit and assessment reporting and statistics, including the Monthly Scorecard and Confluence space
Execute a proactive internal review program for Technology
Process reviews
Policy & procedure reviews
Application control evaluations and risk assessments
Assist with proactive testing to identify potential issues & risks
Assist with reviewing policy & procedure updates before they are finalized. Identify potential audit gaps/traps that could be created with any policy or procedure changes. Suggest mitigation opportunities.
Identify potential control gaps and work with Technology teams to mitigate risks before issues arise
Assess opportunities for improvement in processes or tooling.
Set high standards for self and others. Drive for measurable results.
Maintain a professional demeanor, even during challenging times.
Build strong relationships and partnerships with leaders and staff members from other teams inside and outside of Technology.
ADDITIONAL INFORMATION
Technology Audit Analyst • Baltimore, MD