IT Auditor

American National Insurance • League City, TX

10d • Onsite

About The Position

The Senior IT Control Analyst will join the Corporate Technology Services Governance, Risk, and Compliance team to modernize how technology controls are designed, documented, and operated. The role connects cybersecurity, IT operations, and audit requirements to build practical and efficient controls into everyday processes. The position is onsite at a datacenter in League City, Texas, and is full-time and salaried. Two vacancies are available.

The analyst evaluates and improves IT and cybersecurity processes, maintains control and risk documentation, and helps build the control environment in ServiceNow Integrated Risk Management. The role supports SOX/ICFR and IT General Control requirements, access reviews, SOC 2 activities, regulatory inquiries, and external audits. It also partners with technical teams, control owners, cybersecurity professionals, auditors, and governance groups, while providing compliance guidance and monitoring control performance.

The typical schedule is Monday through Friday, 8:00 a.m.–4:30 p.m. Central Time. Additional hours may occasionally be needed for critical deadlines; there is no on-call rotation. Occasional travel may be required.

Requirements

• Four to six years of relevant experience in cybersecurity, IT governance, technology controls, IT audit, or a related field.
• Strong cybersecurity knowledge and the ability to understand how technology processes operate.
• Experience evaluating or auditing IT controls and working with frameworks and regulations such as SOX, NIST CSF, COBIT, GDPR, CCPA, or SOC 2.
• Ability to work independently, collaborate across a matrixed organization, and communicate effectively with technical and nontechnical stakeholders.

Nice To Haves

• A bachelor's degree in Cybersecurity, Management Information Systems, or Accounting is preferred; a combination of relevant designations or certifications and work experience may be considered.
• Experience with ServiceNow IRM or a comparable GRC platform is highly valued.
• Background as an IT auditor, cybersecurity professional, programmer, engineer, or risk professional with experience applying controls to technology processes.
• Credentials such as CISA, CRISC, CRMP, CISM, or CIA.
• Insurance experience is helpful but not required.

Responsibilities

• Evaluate current IT and cybersecurity processes, identify control gaps, and help redesign controls for greater efficiency and automation.
• Document and maintain risk control matrices, risk assessments, minimum control standards, and the cybersecurity control framework.
• Help design, build, and organize the control environment within ServiceNow Integrated Risk Management, including workflow automation.
• Support SOX/ICFR and IT General Control requirements, user access reviews, SOC 2 activities, regulatory inquiries, and external audits.
• Partner with technical teams, control owners, cybersecurity, auditors, and governance groups to translate requirements into sustainable operating processes.
• Provide compliance guidance, training, and support while monitoring ongoing control performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior