Director Internal Audit - Nationwide Technology

Nationwide Mutual Insurance•Columbus, OH

3d•Hybrid

About The Position

This position is part of Internal Audit’s Nationwide Technology (NT) team, providing risk-based assurance and advisory services over technology-enabled processes, systems, and controls across the enterprise. This is a people-leader role focused on IT general controls (ITGCs), IT application controls (ITACs), and technology risks affecting operations, financial reporting, cybersecurity, resilience, data, and customer outcomes. The role also provides flexibility to address the organization’s most significant emerging technology risks as strategies, platforms, delivery models, and regulatory expectations evolve. Reporting to the AVP, Internal Audit – Technology Assurance & Advisory, the position leads the NT engagement portfolio alongside one peer leader. Together, they determine which assurance and advisory work to pursue, how to prioritize it based on risk, and how to align resources to deliver the greatest value. The role offers the opportunity to broaden risk and control expertise while leading a team through diverse technology audit and advisory work. To enable Nationwide to serve its members with extraordinary care and to see risks around the corner, Internal Audit uses cutting edge audit practices, leverages deep and trusting relationships with business partners and advanced data & analytics to get insights from big data – all to provide meaningful audit and advisory results that help leaders meet their objectives, minimize risk and improve business effectiveness and efficiency. No two audits are ever the same, and the variety of work assignments provides you with visibility and exposure throughout the entire enterprise. If you have the desire to learn continuously, think critically and can see the big picture, we want to know more about you! As a Director, you'll develop the risk-based audit plan and provide insights based on deep knowledge of the strategic direction of the business, internal auditing practices and the use of digitization. You'll be a recognized risk and control leader, where you will evaluate the soundness, adequacy, compliance, efficiency, effectiveness and customer impacts of operational, financial, technological and governance frameworks within Nationwide. We'll count on you to lead the development, implementation and management of all internal and information systems audit programs throughout Nationwide. As a member of the Audit Leadership Team, you’ll have the opportunity to shape our collective audit strategies and carry those messages back to both your teams and clients. You will interact and drive meaningful dialogue with senior business and technology leaders across the enterprise, where you will have conversations about risks and improvement opportunities, thereby honing your skills in relationship building, listening, advocating for and defending positions, and negotiation.

Requirements

Typically, 10 or more years of progressive experience in technology audit, technology risk, cybersecurity, IT operations or related fields, ideally within insurance or financial services.
Proven ability to plan and execute risk-based audits, assess risks, test controls, and identify issues.
Strong ability to evaluate controls, interpret risks, and recommend process improvements.
Strong understanding of technology architectures, cloud, DevSecOps, Software Development Life Cycle, cybersecurity, data management and emerging technologies.
Proven communication skills that are clear and constructive.
Skilled at relationship-building and political savvy.
Ability to use data analytics, process mining, automation, and visualization to improve audit work.
Experience leading high-performing teams, providing mentorship, and building accountability.
Bachelor’s degree in business, technical, or related field preferred.
Typically, ten or more years of dynamic experience in audit, risk management or a related field.
Management experience preferred.
Knowledge of internal audit principles and practices; with knowledge of the Institute of Internal Auditors (IIA) International Professional Practices Framework (IPPF) preferred.
Thorough understanding of risks inherent in customer business environments as well as technology environments.
Proven knowledge in project management, people leadership (i.e., managing, training, coaching, and developing individuals and teams).
Well-developed oral and written communication skills and ability to communicate and coach upwards and downwards.
Ability to make decisions on day-to-day operations as well as to think strategically to execute on long term objectives.

Nice To Haves

Knowledge of property & casualty insurance and/or financial services a plus.
Advanced degree preferred.
Relevant certifications (e.g., CPA, CIA, CISA, CFE, CPCU, PMP) desired.
Experience in the insurance and financial services industry is preferred.
Knowledge and leadership of continuous improvement, digitization, automation, visualization and data/analytic techniques preferred.
Other criteria, including leadership skills, competencies and experiences may take precedence.

Responsibilities

Lead, coach, and develop 4–5 direct reports, including performance management, talent development, engagement, and resource planning.
Manage the NT engagement portfolio by identifying, prioritizing, and sequencing assurance and advisory work based on risk, strategic importance, emerging threats, available resources, and expected value.
Lead or oversee engagements involving technology processes, systems, applications, data, and controls.
Evaluate ITGCs, including access, change, technology operations, system development, cybersecurity, data governance, and resilience, as applicable.
Assess ITACs and other automated controls supporting business processes, financial reporting, regulatory requirements, and customer outcomes.
Use professional judgment to define scope, control objectives, procedures, and evidence appropriate to each engagement.
Help Internal Audit respond to emerging risks involving artificial intelligence, cloud and digital platforms, third-party technology, cyber, data, privacy, resilience, and other evolving themes.
Use analytics, automation, process analysis, continuous auditing, and other digital techniques to improve risk assessment, testing, evidence gathering, and monitoring.
Build trusted relationships and translate complex technology and control matters into practical insights for leaders while maintaining Internal Audit’s independence and objectivity.
Oversee audit execution, reporting, findings, and remediation follow-up, and contribute to consistent practices, integrated assurance, knowledge sharing, and continuous improvement across Internal Audit.
Understands the strategic plan and key initiatives of the assigned business unit. Based on this understanding, provides valuable input into the audit and advisory planning process by assessing both the business and the technology environment surrounding the audit entity, ensuring a holistic perspective for risks and controls.
Partners with key second line Risk Partners in the design and execution of the audit for increased risk coverage and reduced impact to the organization.
Coordinates and schedules individual audits or advisory projects to efficiently use team/office resources and budget.
Ensures leaders of the area being reviewed are advised of timing, scope and nature of audit.
Works with senior leaders to obtain their input and confirm what they find most valuable.
Identifies new ways to audit through data analytics, continuous auditing, technology, agile concepts, innovation, design thinking and collaboration using various tools and techniques.
Identifies key control objectives, risks and controls.
Develops high-level audit strategy and oversees the development of effective and efficient audit and advisory programs.
Uses all tools available to drive the highest value audit, including designing tests of control design and effectiveness, as well as tests of detail.
Contributes to the leadership team by providing a deep level of business acumen, driving the office to become trusted partners, helping Nationwide see around the corner and achieve key performance metrics.
Attracts and retains top talent to deliver effective and efficient projects through strong leadership and talent development.
Leads a team of audit professionals to include performance management, talent management, salary management, associate engagement and workforce resource demand management.
Operates effectively in a hybrid working environment.
Coordinates accomplishment of tasks required to complete audits.
Matches the difficulty of tasks with the appropriate skill sets (including handling vendors in co-sourcing arrangements).
Performs tasks of the highest complexity.
Plays an active hands-on role in the audit.
Runs multiple assignments simultaneously with a high degree of independence.
Ensures audit procedures performed are adequately detailed to support conclusions and work papers are accurately maintained in accordance with record retention policy, policy, and procedures.
Drafts findings and recommendations to help Nationwide mitigate risks, strengthen controls, reduce costs, improve efficiency and enhance the customer experience.
In addition, provides ongoing oversight of Management’s remediation efforts.
Summarizes audit findings, recommendations and conclusions in our Audit and Advisory Reports, which are communicated to Office of the Chief Executive Officer members and the Audit Committee.
Completes post-audit performance evaluations of all assigned staff on a timely basis.
Seeks feedback from staff to enable continuous self-improvement.
May perform other responsibilities as assigned.