Internal IT Audit Consultant (hybrid)

Grange Insurance•Columbus, OH

3d•$126,474 - $165,108•Hybrid

About The Position

This position is responsible for providing an independent, objective assurance and consulting activity desired to add value and improve the organization’s IT environment. It involves evaluating and improving the effectiveness of risk management, control, and governance processes. The position reports to the Chief Audit Executive (CAE), who reports to the Audit Committee Chair.

Requirements

Undergraduate degree in a business-related area, preferably in accounting, finance, management information systems, or a related field. Non-business degree is acceptable with an MBA.
Professional certification of CPA, CISA, and/or CIA, strongly encouraged.
Proven knowledge in applying IT risk assessment and audit skills including financial, operational, and compliance control objectives, as well as knowledge in information systems.
Working knowledge of audit and control frameworks including: COSO, MAR and/or SOX methodologies, and Internal Audit Methodologies (e.g., Institute of Internal Audit’s Standards for Professional Practice of Internal Auditing).
Familiarity with IT security and governance frameworks (e.g., NIST, ITIL, COBIT, CIS Controls, SOC reports, etc.).
At least five years of professional experience in IT audit or a related control environment.
Project management skills to lead a project team and drive a project to successful completion.
Decision-making skills to evaluate alternatives and recommend alternate courses of action.
Analytical skills to research and evaluate highly complex processes and systems.
Documentation and report writing skills, as well as strong communication skills.
Interviewing skills to support root cause analysis.
Organization and planning skills to set priorities, and to plan, prioritize, and execute workload.
Excellent oral and written communication skills to prepare and present audit plans, procedures, and findings to senior management as well as have the ability to interact effectively with team members.
Good coaching and consulting skills.

Nice To Haves

Prior audit, compliance, and/or governance experience within the insurance industry is desired.

Responsibilities

Assists in updating the enterprise audit universe and annual internal audit priority development by analyzing risk throughout the enterprise, conducting interviews with key business and IT leadership, and collaborating with enterprise risk management.
Leads the development of IT audit programs, including scope, audit objectives, audit criteria, and procedures.
Assesses IT risk and controls on legal and regulatory compliance, financial reporting, and operations for the organization.
Presents positions, findings, and recommendations in verbal and written format to a variety of stakeholders, including senior management and the Audit Committee of the Board.
Prepares clear, succinct, balanced, and persuasive reports including constructive and practical recommendations designed to improve the economy, efficiency, and effectiveness of operations.
Monitors and reports on management actions undertaken to address audit concerns identified.
Keeps well informed of significant changes to IT activities, organizational structure, systems, and policies.
Works with business unit management to ensure management action plans are documented and implemented for identified internal audit observations or internal control deficiencies.
Performs internal IT audit validation of management action plans and/or retesting of observations following management’s remediation.
Coaches and mentors audit team members for performance and development, including providing training to new employees and other staff on IT audit policies, procedures, and programs.
Performs planning, execution, and reporting over Model Audit Rule (MAR) requirements related to validating control assessments and management testing.
Develops and performs data analytics to include extraction, analytical testing, and security reviews that utilize Artificial Intelligence and other analytical tools.
Monitors IT best practices and recent developments in audit, risk management, and corporate governance.
Pursues professional development through continuing education and training and participation within professional associations.