Does anyone have a list of internal controls for IT that they would be willing to share?

Internal controls will be totally designed and based on identified risks in your IT risk assessment. No two IT shops are alike, so someone else's list is worthless. It sounds like you are asking for a cart and you don't even have a horse to pull it. You start with your risk assessment and build proper internal controls from there.

I do realize that, but wanted to see a sample of another bank's so that I could make sure that I was on the right track.

I doubt that any bank is going to share such proprietary and sensitive information. Any individual employee that contemplates sharing such information with a third party, if I was a bank board member, it would be their last action taken at the bank. You would be better to be looking for a consulting firm to assist.

If you have access to a bank audit manual, you can review their internal control checklists. This may give you a starting point, but it is not going to be a complete set of controls for your bank.