IT Internal Controls Analyst

UFG Insurance•,

About The Position

UFG Insurance is seeking an IT Internal Controls Analyst to assist in the design and oversight of a robust IT control framework and providing risk and control advisory support for the SOX framework and occasional support for operational internal audits. The ideal candidate has a background in IT risk identification, control design, and process optimization within the P&C insurance or financial services industries. This individual will assist in fostering a culture of strong governance, IT risk management, and continuous improvement across the organization.

Requirements

Bachelor's degree in management information systems, computer science, accounting or a related field.
1-3 years of experience in IT audit, IT internal controls, or public accounting with a focus on technology, preferably within the insurance or financial services industry.
Experience supporting a SOX compliance program, including participation in IT risk assessments, control design, and documentation.
Strong knowledge of the Sarbanes-Oxley Act, COSO framework, and US GAAP as they relate to IT controls.
Exceptional analytical skills with the ability to identify, analyze, and interpret complex IT and business processes and risks.
Proven ability to drive IT process improvements and implement automated control solutions.
Excellent communication skills, both written and oral, with the ability to effectively present complex IT risk information to all levels of the organization.
Strong leadership, interpersonal, and collaborative skills to influence change across IT and business teams.
Strong understanding of cyber security and information security frameworks (e.g., NIST, COBIT).

Nice To Haves

Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), or Certified Internal Auditor (CIA) is strongly preferred.
Experience with testing automated controls and key reports is a plus.
Experience in a public company environment is a plus.

Responsibilities

Serve as a subject matter expert on IT internal controls, providing guidance and education to IT and business partners
Assist in the testing of the IT SOX controls, including IT general controls (ITGCs), automated controls (ITACs), and key report testing
Lead walkthroughs of key business processes and underlying technology, collaborating with IT and business process owners to design effective and efficient controls
Create and maintain detailed IT SOX documentation, including IT process flowcharts, risk and control matrices, and testing workpapers
Conduct IT risk assessments to identify, evaluate, and prioritize technology-related risks to financial reporting and business operations
Evaluate IT control deficiencies to understand root cause and impact and work with process and control owners to develop and track effective remediation plans
Evaluate controls and processes for opportunities to leverage automation and new technologies, reducing manual effort and improving control effectiveness
Assist in the execution of the audit plan, including the performance of risk assessments and coordination of internal audit testing
Serve as a liaison for external auditors and support documentation requests