Senior Internal IT Auditor

ICW Group•San Diego, CA

7d•$90,560 - $152,723•Hybrid

About The Position

The purpose of this job is to provide comprehensive reviews of the Company’s IT processes, internal controls, and risk management practices to ensure: the effectiveness and efficiency of operations; reliability and integrity of financial and operational information; safeguarding of assets; compliance with laws, regulations, and contracts. This position exists to perform audits that generate recommendations to improve controls and processes, and ensures implementation of said processes, which will support the company’s goals of revenue growth.

Requirements

Bachelor’s degree from a four-year college or university required with a major or emphasis in Computer Science, Finance, Accounting, Business, Insurance, or related field.
Minimum 3-5 years of relevant training and progressive experience in internal auditing, or equivalent combination of education and experience required.
Minimum 3 years of experience in IT auditing required.
Knowledge of IT control frameworks, cybersecurity frameworks, and internal audit standards required.
Ability to work independently and in a team environment.
Must possess excellent written and oral communication skills and interpersonal skills.
Excellent analytical ability and organizational skills required.
Computer proficiency required (Excel, Outlook, Word).
Ability to read, analyze, and interpret technical journals, financial reports, or legal documents.
Ability to respond to common inquiries or complaints from customers, regulatory agencies, or members of the business community.
Ability to effectively present information to top management, public groups, and/or boards of directors.
Knowledge of accounting principles (GAAP) and internal audit standards required.

Nice To Haves

Certified Information Services Auditor (CISA) desired.
Certified Internal Auditor or Certified Information Systems Security Professional (CISSP) is a plus.

Responsibilities

Conducts and leads IT related audits of Company departments, programs, or processes designed to ensure that an adequate internal control structure exists, risks are properly identified and managed, and process efficiency is improved.
Prioritizes and schedules audits based on the audit plan and the needs of the Company.
Evaluates and appraises the functions and processes of each area or program with an emphasis on risk exposure, internal controls, and process improvement.
Designs and executes appropriate objectives, scope, and work programs for audits based upon review of documented procedures and discussions with departmental management and supervisory executives.
Evaluates and appraises processes, policies, and procedures of each department or program to ensure they are comprehensive and appropriate.
Prepares written reports on the findings of each audit with recommendations for new or changed policies, procedures, internal controls, and/or process improvements.
Provides expertise, project management, and guidance both inside and outside the Internal Audit function.
Ensures utilization of documented procedures within each department, assisting departments in development of written procedures, as necessary.
Engages in mediation process with audited department as to implementation.
Refers irreconcilable recommendations to departmental management.
Follows up on approved recommendations within scheduled time frames.
Participates in process and internal control improvement initiatives.
Functions as internal audit’s primary contact for the IT department.
Reviews existing as well as new IT projects to ensure adequate risk management, internal controls, and compliance with regulatory authority.
Consults with external auditors where appropriate.
Assists with discrete risk evaluation and internal control functions as assigned.
Identifies and assesses strategic risks.
Participates in the development of the annual audit plan and internal audit risk assessment.
Assists with the department’s analytics and automation efforts.
Maintains current professional practice knowledge and educates constituencies.
Provides compliance support for Company departments in the areas of IT risk and exposure, internal controls, and process improvements.
Participates in professional organizations relevant to the internal audit field.
Stays abreast of new technology related regulations and standards affecting the company and the insurance industry.
Provides regular education about audit requirements, regulatory compliance, and process efficiency to customers and other constituencies as requested.
Serves as the IT audit specialist for integrated business audits.