IT Audit Manager

Acrisure•Grand Rapids, MI

4d•Onsite

About The Position

Acrisure (the Company) is seeking an IT Internal Audit Manager to join our Internal Audit team. Reporting to the IT Internal Audit Director, the IT Internal Audit Manager is part of a global/multi-national team that works as an independent function providing assurance to management and the Audit Committee over Acrisure’s internal controls. This role will be based in Grand Rapids, Michigan.

Requirements

Must be highly organized, self-starter, detail oriented and have strong project management skills and excellent written & oral communication
Must exhibit skeptical thinking with ability to get into the details
Occasional travel required to Acrisure International entities (<20%)
Bachelor’s degree in Computer Science, Management Information Systems, Accounting, or related field.
6+ years of progressive IT audit, IT risk, or information security experience.
Strong knowledge of IT controls, security frameworks (NIST, COBIT, ISO) and regulatory standards (SOX, GDPR, etc.).
3+ years of experience leading and coaching/developing junior auditors.
Experience auditing complex IT environments including cloud platforms (AWS, Azure), ERP systems (Workday, Oracle), Agency/Policy management systems (Applied Epic), and cybersecurity controls.
Experience with Microsoft 365 including office and power BI.
Exceptional problem solving, organizational, and analytical skills.

Nice To Haves

Professional certification preferred: CISA, CISSP, CRISC, CISM, CPA or CIA
Prior Big 4 accounting firm experience a plus.

Responsibilities

Plan and execute risk-based IT audits including but not limited to, infrastructure, applications, cloud environments, cyber security, and third party/vendor risks.
Manage multiple audits with competing deliverables while balancing the needs of the business.
Evaluate IT general controls (ITGCs), application controls, and technology-related processes aligned with SOX, GDPR, NIST, ISO 27001, and other compliance requirements.
Assist in the execution of SOX testing during peak season and act with high sense of urgency prioritizing time sensitive deliverables.
Partners with business units and technology teams to identify and assess IT risks, develop audit scopes, and execute testing procedures.
Support integrated audits and special projects in coordination with other internal audit team members.
Conduct risk assessment of assigned areas and systems in established/required timeline.
Deliver audit reports with clear and actionable recommendations to senior management and stakeholders across different regions.
Monitor the remediation of audit findings and perform follow-up reviews to assess the effectiveness of corrective actions.
Stay informed on evolving regulations and emerging technologies to provide timely guidance to internal stakeholders.
Collaborate with external auditors, regulatory bodies, and internal risk and compliance teams as needed.
Ensure compliance with IA’s internal KPIs/SLAs (e.g. MAPs follow up, closing of wp’s, etc.)
Help develop and maintain the internal audit methodology and assist in training or mentoring junior auditors.