Internal IT Auditor - SOX

Berkshire Hathaway Homestate Companies•Omaha, NE

9d•Hybrid

About The Position

The Internal IT Auditor – SOX supports the evaluation and testing of Information Technology controls that help ensure reliable financial reporting, regulatory compliance, and effective IT governance across the National Indemnity (NICO) Group. The role partners with Internal Audit, Enterprise Risk Management, Information Technology, and business stakeholders to assess IT risks, perform Sarbanes-Oxley (SOX) compliance testing, monitor remediation activities, and recommend control and process improvements that strengthen the control environment. The position is with National Indemnity Company in Omaha, Nebraska, and is eligible for hybrid work after a period of in-office training. The position is not eligible for employer visa sponsorship.

Requirements

Bachelor’s degree in a related field or equivalent work experience.
Two or more years of work experience.
Knowledge of Sarbanes-Oxley (SOX) requirements and objectives.
Knowledge of Information Technology General Controls (ITGCs).
Personal computer proficiency and experience with basic applications such as Excel and Word.
Clear, professional communication skills and ability to explain technical, risk, and control concepts to technical and non-technical audiences.
Attention to detail and ability to produce accurate, high-quality audit documentation and work products.
Organization and ability to manage multiple audit engagements, competing priorities, and deadlines.
Ability to build collaborative relationships with management, business partners, auditors, regulators, vendors, and other stakeholders.
Analytical thinking and ability to identify risks, evaluate controls, and solve business and technology challenges.
Ability to assess control deficiencies, determine root causes, evaluate impacts, and recommend remediation strategies.
Interviewing and facilitation skills to gather information, evaluate processes, and assess control effectiveness.
Ability to handle sensitive business, financial, and cybersecurity information with discretion and confidentiality.
Willingness to stay informed about emerging technologies, cybersecurity threats, regulatory developments, and industry best practices.

Nice To Haves

Knowledge of National Institute of Standards and Technology (NIST) frameworks.
Knowledge of the Committee of Sponsoring Organizations of the Treadway Commission (COSO) Internal Control Framework.
Knowledge of New York Department of Financial Services (NYDFS) 23 NYCRR Part 500 Regulation.
Experience supporting IT audits, SOX compliance, risk management, or internal controls initiatives.
Professional certifications such as CISA, CIA, or CPA.

Responsibilities

Support IT audit and SOX compliance initiatives across multiple business units and legal entities within the NICO Group.
Perform risk-based testing of IT General Controls (ITGCs), automated controls, and key reports that support financial reporting objectives.
Execute SOX testing, including walkthroughs, control evaluations, evidence reviews, and documentation of testing results.
Partner with management and control owners to maintain SOX compliance and support audit activities.
Monitor and validate remediation efforts resulting from internal audits, external audits, SOX testing, risk assessments, and management self-assessments.
Prepare clear, concise, and professional audit documentation, reports, and recommendations.
Assist with IT risk assessments, evaluate key risk indicators, and report on the effectiveness of the IT control environment.
Identify opportunities to improve IT processes, internal controls, and governance practices, and recommend practical solutions.
Support risk-based audit plan development by identifying, scoping, and prioritizing IT systems, applications, processes, and controls for review.
Stay current on emerging technologies, cybersecurity risks, regulatory requirements, audit practices, and industry frameworks relevant to IT governance and compliance.

Benefits

Retirement and savings plan with immediate enrollment and 100% employer match up to 5%.
Medical, dental, and vision coverage for regular, full-time employees and eligible dependents.
Learning and Development program.
100% upfront educational reimbursement program.
Subsidized downtown parking.
Competitive time-off policies, including parental leave.
Employee Assistance program.
Wellness program with an online wellness portal.
Complimentary state-of-the-art onsite fitness center at the Omaha office.
Employee Resource Groups for volunteering, connecting, social gatherings, and professional development.