Internal IT Auditor - SOX

Berkshire Hathaway Homestate Insurance•Omaha, NE

10d•Hybrid

About The Position

The IT Internal Auditor - SOX supports the evaluation and testing of Information Technology (IT) controls that help ensure reliable financial reporting, regulatory compliance, and effective IT governance across the National Indemnity (NICO) Group. The role partners with Internal Audit, Enterprise Risk Management, Information Technology, and business stakeholders to assess IT risks, perform Sarbanes-Oxley (SOX) compliance testing, monitor remediation activities, and recommend control and process improvements that strengthen the organization's overall control environment. The position is with National Indemnity Company in Omaha, Nebraska, and is eligible for hybrid work after a period of in-office training. It is not eligible for employer visa sponsorship.

Requirements

Bachelor's degree in a related field or equivalent work experience.
Two or more years of work experience.
Knowledge of Sarbanes-Oxley (SOX) requirements and objectives.
Knowledge of Information Technology General Controls (ITGCs).
Personal computer proficiency and experience with basic applications such as Excel and Word.
Clear, professional communication and ability to explain technical, risk, and control concepts to technical and non-technical audiences.
Attention to detail and ability to produce accurate, high-quality audit documentation and work products.
Organization and ability to manage multiple audit engagements, competing priorities, and deadlines.
Ability to build collaborative relationships with management, business partners, auditors, regulators, vendors, and other stakeholders.
Analytical thinking and ability to identify risks, evaluate controls, and solve business and technology challenges.
Ability to assess control deficiencies, determine root causes, evaluate impacts, and recommend practical remediation strategies.
Interviewing and facilitation skills to gather information, evaluate processes, and assess control effectiveness.
Ability to handle sensitive business, financial, and cybersecurity information with discretion and confidentiality.

Nice To Haves

Knowledge of National Institute of Standards and Technology (NIST) frameworks.
Knowledge of the Committee of Sponsoring Organizations of the Treadway Commission (COSO) Internal Control Framework.
Knowledge of New York Department of Financial Services (NYDFS) 23 NYCRR Part 500 Regulation.
Experience supporting IT audits, SOX compliance, risk management, or internal controls initiatives.
Professional certifications such as CISA, CIA, or CPA.
Continuous learning and awareness of emerging technologies, cybersecurity threats, regulatory developments, and evolving industry best practices.

Responsibilities

Support ongoing IT audit and SOX compliance initiatives across multiple business units and legal entities within the NICO Group.
Perform risk-based testing of IT General Controls (ITGCs), automated controls, and key reports that support financial reporting objectives.
Execute SOX testing activities, including walkthroughs, control evaluations, evidence reviews, and documentation of testing results.
Partner with management and control owners to maintain SOX compliance and support audit activities.
Monitor and validate remediation efforts resulting from internal audits, external audits, SOX testing, risk assessments, and management self-assessments.
Prepare clear, concise, and professional audit documentation, reports, and recommendations.
Assist with IT risk assessments, evaluation of key risk indicators, and reporting on the effectiveness of the IT control environment.
Identify opportunities to improve IT processes, internal controls, and governance practices, and recommend practical solutions.
Support development of risk-based audit plans by identifying, scoping, and prioritizing IT systems, applications, processes, and controls for review.
Stay current on emerging technologies, cybersecurity risks, regulatory requirements, audit practices, and industry frameworks relevant to IT governance and compliance.

Benefits

Employee Resource Groups for volunteering, connecting with others, social gatherings, and professional development.
Wellness program with an online wellness portal.
Complimentary state-of-the-art onsite fitness center at the Omaha office.
Retirement and savings plan with immediate enrollment and 100% employer match up to 5%.
Medical, dental, and vision coverage for regular, full-time employees and eligible dependents.
Dedicated Learning & Development program.
100% upfront educational reimbursement program.
Subsidized downtown parking.
Competitive time-off policies, including parental leave.
Employee Assistance program.