It's unbelievable how the bank didn't notice for that long. That goes to show the power of what a sysadmin at a bank can have, take money and cover his/her tracks. Unfortunately for this guy he was in no such position.
The regulation and audit requirements of the banking system mean that you can't cover your tracks forever. The accountants and auditors will catch up eventually.