Compliance Analyst, Audit Assurance

Integrity•Dallas, TX

About The Position

The Audit & Assurance Analyst supports the Enterprise Compliance and Risk team in executing risk-based assurance activities across the organization's control environment. The role executes the external audit program for the certified business units, covering System and Organization Controls and HITRUST engagements and agreed-upon procedures, and supports internal assurance over the risk framework without assuming direct management responsibility for the processes reviewed. The function is consolidating a fragmented external audit estate onto a single firm and a single platform, so this role participates in a genuine transformation rather than maintaining a steady state. The ideal candidate brings a foundational understanding of insurance operations, risk management principles, and audit methodology, with strong analytical and communication skills. It suits someone detail-oriented, comfortable working across functions, and looking to grow within a maturing and high-visibility program.

Requirements

Bachelor's degree in Accounting, Finance, Information Systems, Business, or a related field
1 to 3 years of experience in information technology audit, internal audit, assurance, or control testing; internship experience will be considered
Working knowledge of control frameworks such as System and Organization Controls 2, HITRUST, NIST, or COSO
Demonstrated experience with evidence collection, control documentation, or walkthrough procedures
Familiarity with risk and control concepts sufficient to evaluate whether a control operates as described
High attention to detail and strong documentation discipline
Strong written and verbal communication, including the ability to write a clear finding
Analytical mindset with the ability to interpret information and identify key themes
Ability to manage multiple concurrent requests and meet deadlines
Collaborative approach with a willingness to learn in a dynamic, high-growth environment
Proficiency in Microsoft Office Suite (Excel, PowerPoint, Word)

Nice To Haves

CISA or CIA certification, or demonstrable progress toward either
Experience in insurance, financial services, or other regulated industries
Hands-on experience with an enterprise GRC platform
Exposure to HITRUST Common Security Framework or System and Organization Controls 2 Type II engagements
Familiarity with data visualization tools such as Power BI or Tableau
Understanding of life, annuity, or health insurance operations

Responsibilities

Execute System and Organization Controls and HITRUST readiness activities, including evidence collection, control walkthroughs, and gap identification
Support external audit fieldwork and manage auditor requests through to closure within agreed timeframes
Maintain audit-ready control evidence within the enterprise GRC platform to support ongoing assurance activity
Conduct independent assessments to determine whether major business risks are accurately identified, evaluated, and reported by management
Support consistent application of risk appetite and tolerance policies across the organization as those standards are established
Track and validate closure of issues and corrective actions taken by management to address identified risk or control gaps
Support the findings process, including tracking, validation, and reporting of finding status and remediation progress
Identify trends and systemic issues emerging from findings data to inform risk prioritization
Support information technology general control testing in coordination with Finance and Internal Audit
Assist in preparing documentation for audits, regulatory reviews, and internal assessments
Support the consolidation of external audit engagements onto a single firm, including transition of evidence and working papers
Partner with compliance, risk, legal, technology, and business unit teams to drive process standardization
Support communication of assurance findings to stakeholders with varying levels of risk expertise