IT Auditor

American National • League City, TX

9d • Onsite

About The Position

Join the Corporate Technology Services Governance, Risk, and Compliance team as a Senior IT Control Analyst. The role connects cybersecurity, IT operations, and audit requirements to build practical, efficient controls into everyday technology processes. The analyst evaluates and improves technology controls, supports compliance and audit activities, and helps organize and automate the control environment in ServiceNow Integrated Risk Management. The position is based onsite at a datacenter in League City, Texas, and is full-time and salaried. Two vacancies are available.

The typical schedule is Monday through Friday, 8:00 a.m.–4:30 p.m. Central Time. Additional hours may occasionally be needed for critical deadlines, and there is no on-call rotation. Occasional travel may be required.

Requirements

• Four to six years of relevant experience in cybersecurity, IT governance, technology controls, IT audit, or a related field.
• Strong cybersecurity knowledge and the ability to understand how technology processes operate.
• Experience evaluating or auditing IT controls and working with frameworks and regulations such as SOX, NIST CSF, COBIT, GDPR, CCPA, or SOC 2.
• Ability to work independently, collaborate across a matrixed organization, and communicate effectively with technical and nontechnical stakeholders.
• A bachelor's degree in Cybersecurity, Management Information Systems, or Accounting is preferred; a combination of relevant designations or certifications and work experience may be considered.

Nice To Haves

• Experience with ServiceNow IRM or a comparable GRC platform is highly valued.
• Background as an IT auditor, cybersecurity professional, programmer, engineer, or risk professional with experience applying controls to technology processes.
• Credentials such as CISA, CRISC, CRMP, CISM, or CIA.
• Insurance experience is helpful but not required.

Responsibilities

• Evaluate current IT and cybersecurity processes, identify control gaps, and help redesign controls for greater efficiency and automation.
• Document and maintain risk control matrices, risk assessments, minimum control standards, and the cybersecurity control framework.
• Help design, build, and organize the control environment within ServiceNow Integrated Risk Management, including workflow automation.
• Support SOX/ICFR and IT General Control requirements, user access reviews, SOC 2 activities, regulatory inquiries, and external audits.
• Partner with technical teams, control owners, cybersecurity, auditors, and governance groups to translate requirements into sustainable operating processes.
• Provide compliance guidance, training, and support while monitoring ongoing control performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior