IT Audit & Compliance Analyst

Mascoma Bank is looking for an IT Audit & Compliance Analyst to join our Information Technology this role you will support the Banks technology risk audit and access governance programs by reviewing user access evaluating internal IT controls and helping ensure our systems and practices meet regulatory audit and information security expectations.

What Youll Do

Perform scheduled and risk-based user access reviews across core banking lending deposit digital infrastructure cloud and third-party systems.

Evaluate access against least-privilege segregation-of-duties and role-based access control principles.

Identify and document access concerns such as dormant terminated shared or over-privileged accounts and partner with system owners to drive timely remediation.

Review privileged administrative service and emergency access on a defined cadence.

Verify timely access provisioning transfers and de-provisioning in partnership with People Resources and IT Support.

Maintain accurate evidence documentation and audit trails to support internal audit external audit and regulatory examination needs.

Assess the design and operating effectiveness of IT general controls across areas such as change management logical access computer operations backup and recovery and incident response.

Test adherence to IT policies standards and procedures and identify gaps between documented processes and actual practice.

Partner with business line managers to determine appropriate system access profiles for new or changing roles.

Recommend and document role-based access templates that support strong controls and effective business operations.

Help managers understand access request standards recertification responsibilities and the business rationale for control requirements.

Coordinate with IT Risk and Compliance teams to support audit plans regulatory requests evidence gathering issue tracking and corrective action follow-up.

What Were Looking For

Bachelors degree in information systems Computer Science or a related field or an equivalent combination of education and experience.

35 years of experience in IT audit IT controls information security identity and access management or IT risk preferably in banking financial services or another regulated environment.

Working knowledge of GLBA FDICIA IT general control expectations and NIST Cybersecurity Framework concepts.

Experience conducting or supporting user access reviews and IT control testing.

Strong analytical organizational and documentation skills.

Ability to communicate risk and control concepts clearly to both technical and non-technical audiences.

Ability to work independently manage multiple reviews at once and handle confidential information with discretion.

Relevant certifications such as ISACA IT Audit Fundamentals CISA or CIA are preferred.

Background and Credit Check

As part of our commitment to maintaining a secure financial institution all final candidates will be required to successfully complete background and credit screenings as part of the hiring process. These screenings will be conducted in accordance with applicable laws and industry regulations.

Please note: Having a record on a background or credit report does not automatically disqualify you. We evaluate results on a case-by-case basis considering their relevance to the role and any regulatory requirements.

Our Commitment to Belonging!

The communities served by Mascoma Bank consist of individuals from diverse backgrounds. Our employees likewise bring unique perspectives experiences and approaches to the bank. We strive to create a safe and welcoming environment for all who pass through our doors and a workplace that actively demonstrates mutual respect and trust one of our core values. A truly inclusive culture leads to a sense of belonging and support for all team members and inspires innovation and creativity. We are committed to recruiting and retaining a diverse talent pool increasing team member engagement through professional development and community outreach activities and offering personal growth workshops and team-building opportunities. By embracing diversity equity and inclusion we strengthen our communities and ourselves.

Mascoma Bank is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race ethnicity religion color national origin gender sexual orientation gender identity gender expression age veteran status status as an individual with a disability or other applicable legally protected characteristics. To request reasonable accommodations please contact .

Mascoma Bank is an Affirmative Action and Equal Opportunity Employer M/F/D/V.