Teams at Sallie Mae

Supports third-party vendor oversight through quality reviews, compliance monitoring, risk assessments, transaction testing, reporting, and remediation support. Reviews vendor interactions and operational processes, identifies trends and root causes, validates documentation, maintains monitoring records, and recommends process improvements. Partners with Vendor Management, Compliance, Legal, Risk, Operations, and other stakeholders to improve vendor performance, strengthen controls, and ensure regulatory, contractual, and organizational standards are met.

Plans and executes technology audits covering IT general controls, application controls, SDLC, cybersecurity, governance, and emerging technology risks. Evaluates control effectiveness, identifies deficiencies, recommends remediation, conducts follow-up reviews, and prepares audit reports. The role requires knowledge of SOX, GDPR, ISO 27001, IT risk management, automated controls, and data analytics, along with strong analytical and project management skills.

Manage the annual audit plan and conduct financial, operational, and compliance audits. Evaluate internal controls, policies, procedures, and risks; document findings and recommendations; communicate results to management; and monitor remediation activities. The role also requires staying current on regulatory changes and improving audit methodologies.