Information Technology Auditor

MassMutual • Boston, MA

2d • Remote

About The Position

The Information Technology Auditor is part of MassMutual’s Corporate Audit Team and delivers audits and assessments across the company. The role evaluates controls over corporate-wide systems infrastructure and application environments, with a focus on technology risks and controls, including cybersecurity and cloud technologies. The auditor plans and conducts audits, sets scope and testing procedures, and assesses the design and effectiveness of internal controls. The position also provides advice and mentoring to audit associates and technology or business-area management, collaborates with clients and peers, and makes value-added recommendations to improve controls and mitigate risks.

The role supports a technology-led audit plan and reviews enterprise IT audit projects involving areas such as AI, cybersecurity, cloud computing, and digital infrastructure. The auditor is expected to stay current with technology processes and industry best practices, complete assignments within defined scope and timelines, and demonstrate accountability, agility, inclusion, business acumen, integrity, and professional skepticism.

The position is described as remote, but employees residing within 50 miles of the Springfield office or 30 miles of the Boston office must accommodate a hybrid model of three days per week in the office. The posted salary range is $99,800–$131,000, with incentive and bonus opportunities noted as part of compensation.

Requirements

• At least 4 years of audit work experience, preferably in relevant technology audit or risk work.
• At least 4 years of information technology experience, primarily involving cybersecurity and cloud tools and processes.
• Bachelor’s degree or at least 8 years of work experience in an information technology audit role, primarily involving cybersecurity and cloud tools and processes.
• Ability to pass a non-registered fingerprint background check to qualify as a fingerprint person for FINRA.
• Knowledge of risk concepts, including inherent and residual risk, and how to assess the design and effectiveness of internal controls.
• Ability to apply technology risk and control knowledge in audit fieldwork.
• Strong communication and collaboration skills, including communicating with different levels of management.
• Ability to work independently and complete assignments within defined scopes and timelines.
• High integrity, professional skepticism, and strong business sense.
• Responsiveness and flexibility when business priorities change or deadlines are tight.

Nice To Haves

• At least 4 years of technology and audit experience, preferably in the financial services industry.
• Experience reviewing cybersecurity and cloud technologies.
• Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and/or a cybersecurity audit certification.
• Experience at a Big 4 or equivalent firm.

Responsibilities

• Deliver audits and assessments across MassMutual.
• Assess and evaluate controls over corporate-wide systems infrastructure and application environments.
• Plan and conduct audits of the information technology environment, focusing on technology risks and controls.
• Set audit scope and testing procedures to evaluate the design and effectiveness of controls.
• Apply technology controls and concepts in audit fieldwork, primarily in cybersecurity and cloud technologies.
• Stay informed about technology processes, programs, and industry best practices.
• Provide advice and mentoring to audit associates and information technology or business-area management.
• Collaborate with clients and peers to complete value-added assignments within defined project scopes and timelines.
• Make recommendations to improve internal controls and ensure risks are appropriately mitigated.
• Champion compliance with standards for audit practices and procedures.

Benefits

• Industry-leading pay and benefits.
• Incentive and bonus opportunities; total compensation includes a bonus target or, for sales-focused roles, a Variable Incentive Compensation component.
• Access to learning content on Degreed and other informational platforms.
• Networking opportunities through Business Resource Groups.
• Accommodation support for applicants who need assistance completing the application process.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level