Job Description:

Position Description :

Performs data-driven, risk-based IT audit assessments of key software systems and applications using Identity and Access Management, Authentication Services, DevSecOps, and Encryption. Reports on technical issues and software solutions to improve the control environment within operating systems -- UNIX/Linux, Windows, and Mainframe, Amazon Web Services (AWS), Azure, Openstack, and Google. Identifies and assess technological risks and provides advice to management regarding mitigation of these risks using Datadog, CloudAware, Divvy Cloud, and Cloudability. Enhances existing IT controls and enterprise cybersecurity frameworks within database systems -- Oracle, DB2, and SQL Server. Develops automation for assessing controls related to software applications, systems, networks, computer operations, databases, and production support processes using Python, PowerShell, and Java.

Primary Responsibilities:

• Leads or participates in professional teams to execute technical audit projects.
• Evaluates the design and effectiveness of applications, infrastructure, and cybersecurity controls and processes.
• Identifies and addresses systemic gaps in control environment technology risk management.
• Develops data analytics, and applies leading edge technologies and automated tools to provide management with proper context of potential exposures (to control weaknesses).
• Develops an ongoing trusted advisor relationship with internal clients and Audit business unit colleagues to ensure timely and consistent controls advice.
• Collaborates with business, technology, security, legal, and privacy practitioners to evaluate initiatives that protect employee and customer privacy.
• Collaborates with application developers, system architects, engineers, and security practitioners to perform readiness assessments of pre-production applications and systems.
• Develops and implements strategies to mitigate risks and enhance the overall security posture.
• Communicates emerging issues across technologies and business processes to management and stake holders.
• Leverages audit automation tools in the evaluation of business operations and systems.
• Performs and reviews audit test work by organizing and analyzing data, testing controls and documenting results.
• Applies strategic and data analytics concepts, principles, and techniques to more efficiently and effectively identify control deficiencies.
• Drafts audit reports to provide a clear description of issues identified, related implications to the business or enterprise as a whole and management action plans to resolve the issues.
• Coaches and mentors Analysts and Senior Analysts on the team.
• Plans and executes multiple concurrent IT audits, including reviews of cybersecurity, existing production applications, systems currently being developed, technology infrastructure, and specialized/emerging technologies.
• Works with business and technology management to build an understanding of complex functions in order to assess the design and operating effectiveness of controls.

Education and Experience :

Bachelor s degree (or foreign education equivalent) in Computer Science, Engineering, Information Technology, Information Assurance, Mathematics, Physics, or a closely related field and three (3) years of experience as an IT Audit Manager (or closely related occupation) performing IT audit, information security, and risk management of enterprise or financial services applications and IT infrastructure (on premises or in the Cloud).

Or, alternatively, Master s degree (or foreign education equivalent) in Computer Science, Engineering, Information Technology, Information Assurance, Mathematics, Physics, or a closely related field and one (1) year of experience as an IT Audit Manager (or closely related occupation) performing IT audit, information security, and risk management of enterprise or financial services applications and IT infrastructure (on premises or in the Cloud).

Skills and Knowledge :

Candidate must also possess:

• Demonstrated Expertise (\u201CDE\u201D) coordinating operational and technology risk analysis and assessments of financial applications and processes using data visualization and reporting on Power BI; and identifying technology and operational controls weaknesses incorporating systems accuracy and security weaknesses to mitigate risk by consulting the senior management on risk profile using audit tools built using Python and KNIME.
• DE coordinating and executing risk-based and data-driven audit engagements for large-scale financial service technology platforms on Amazon Web Services (AWS) including containers (ECS or EKS) and database environments (RDS, Dynamo Db, Oracle on EC2, S3, or Snowflake); and evaluating CIA controls on distributed Java, Oracle, mobile, caching, queueing and messaging frameworks.
• DE evaluating the security and quality control design and effectiveness for Continuous Integration /Continuous Deployment (CI/CD) pipelines and tooling using DevOps and vulnerability scanning platforms -- Bitbucket, Github, Jenkins, Artifactory, or Mend; and identifying security gaps in privileged accounts administration, secrets management, branch configurations, and identity and access management using Active Directory, SAML, oAuth, or CyberArk.
• DE evaluating IT General controls by performing control evaluation in adherence to cybersecurity principles and information security standards -- NIST CSF, ISO 27001; designing and implementing review of privilege access management, networking, resiliency, data security, change management, and performance monitoring controls using Qualys, DivvyCloud, ServiceNow, SailPoint or Fusion.

#PE1M2

Certifications:

Company Overview

Fidelity Investments is a privately held company with a mission to strengthen the financial well-being of our clients. We help people invest and plan for their future. We assist companies and non-profit organizations in delivering benefits to their employees. And we provide institutions and independent advisors with investment and technology solutions to help invest their own clients money.

Join Us

At Fidelity, you ll find endless opportunities to build a meaningful career that positively impacts peoples lives, including yours. You can take advantage of flexible benefits that support you through every stage of your career, empowering you to thrive at work and at home. Honored with a

Glassdoor Employees Choice Award, we have been recognized by our employees as a top 10 Best Place to Work in 2024. And you don t need a finance background to succeed at Fidelity\u2014we offer a range of opportunities for learning so you can build the career you ve always imagined.

Fidelity s hybrid working model blends the best of both onsite and offsite work experiences. Having the majority of our associates work onsite is important for our business strategy and our culture. We also value the benefits that working offsite offers associates. Most roles listed as Hybrid will require associates to work onsite all business days of every other week in a Fidelity office. This does not apply to roles listed as Remote or Onsite.

At Fidelity, we value honesty, integrity, and the safety of our associates and customers within a heavily regulated industry . Certain roles may require candidates to go through a preliminary credit check during the screening process. Candidates who are presented with a Fidelity offer will need to go through a background investigation,

detailed in this document, and may be asked to provide additional documentation as requested. This investigation includes but is not limited to a criminal, civil litigations and regulatory review, employment, education, and credit review (role dependent). These investigations will account for 7 years or more of history, depending on the role. Where permitted by federal or state law, Fidelity will also conduct a pre-employment drug screen, which will review for the following substances: Amphetamines, THC (marijuana), cocaine, opiates, phencyclidine.

We invite you to Find Your Fidelity at

fidelitycareers.com.

Fidelity Investments is an equal opportunity employer. We believe that the most effective way to attract, develop and retain a diverse workforce is to build an enduring culture of inclusion and belonging.

Fidelity will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process. To initiate a request for an accommodation, contact the HR Accommodation Team by sending an email to