IT Auditor at East West Bank in US-CA-Pasadena

Summary: East West Bank is a premier financial bridge between the East and West, serving as a top-performing commercial bank. The IT Auditor will assist in auditing cybersecurity and infrastructure controls, participate in evaluations of IT general controls, and document findings in accordance with professional standards. Responsibilities: - Assist in performing audit testing over cybersecurity and infrastructure controls, including identity and access management, network security, logging and monitoring, vulnerability management, and disaster recovery - Participate in walkthroughs with technology teams to gain an understanding of system architecture, processes, and control environments - Support the evaluation of IT general controls (ITGCs) across operating systems, databases, networks, and cloud platforms - Help identify control gaps, process inefficiencies, and potential security risks - Document audit procedures, test results, and observations in accordance with internal audit methodology and professional standards - Assist in drafting audit findings and recommendations that are clear, evidence‑based, and aligned to risk - Contribute to continuous monitoring activities and periodic risk assessments of cybersecurity and infrastructure domains - Stay informed on emerging threats, regulatory expectations, and industry best practices in information security and technology risk - May perform other duties as assigned Required Qualifications: - Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting Information Systems, or related field - Strong passion for developing skills in cybersecurity and infrastructure technical audits - Foundational understanding of IT concepts (e.g., operating systems, networks, databases, cloud, security principles) - Strong analytical, problem‑solving, and communication skills - Ability to work collaboratively in a team environment Preferred Qualifications: - Experience in financial services is a plus Required Skills: Cybersecurity, Infrastructure technical audits, IT general controls, Operating systems, Networks, Databases, Cloud platforms, Security principles, Analytical thinking