Senior IT Internal Auditor

Sompo International•Purchase, NY

6d•$115,000 - $140,000•Onsite

About The Position

Sompo is hiring a Senior IT Internal Auditor for its Global IT Internal Audit team. Based in the Purchase, New York office, the role works with the US Senior IT Audit Manager to perform and oversee IT internal audits and IT SOX work across North America, the UK, and Europe, with potential work in South America and Asia. The auditor assesses IT governance, IT general controls, cybersecurity, and IT infrastructure using standard Institute of Internal Auditors (IIA) methodology. The role also supports alignment of IT controls with regulatory requirements, industry frameworks, and standards, and collaborates with IT management and external audit teams. Onsite work at the Purchase office and travel to other Sompo International offices for audit fieldwork may be required. The position includes performing audit fieldwork, evaluating control design and operating effectiveness, documenting work in Team Mate, preparing reports and agreed management action plans, and tracking audit issues and control deficiencies through remediation. It also involves rolling SOX testing of IT Entity Level Controls, IT General Controls, and IT Application Controls for key financial applications and supporting tools. The salary range is $115,000–$140,000. Actual compensation depends on factors including work location, qualifications, skills, competencies, and relevant experience. Sompo provides eligible employees with compensation and benefit programs, including incentives as part of total compensation. The company describes its culture as grounded in ethics and integrity and committed to inclusion, diversity, and equal opportunity.

Requirements

Bachelor’s degree in Computer Science, Accounting, Finance, Economics, or a related IT Audit subject.
At least 4 years of relevant IT Audit experience at a Big Four professional services firm or a similar firm.
Certified Information Systems Auditor (CISA) certification from ISACA.
Foundational knowledge, skills, and experience in technology principles and practices, IT industry trends, IT governance controls, IT general controls (including IT service management), cybersecurity controls (including network security), and IT infrastructure controls (including cloud).
Ability to build long-term collaborative working relationships with IT management.
Strong written and verbal English communication and presentation skills.
Proactive, delivery-focused approach and accountability for completing IT audit work in accordance with the IT audit plan.
Experience with standard IIA audit methodology, including audit planning, fieldwork, and reporting, and ability to meet methodology requirements with minimal review.
Working knowledge of IT frameworks such as COBIT, NIST, and ITIL, and industry standards such as ISO 27001 and ISO 27017.
Understanding of key IT regulatory requirements, including SOX, J-SOX, New York State DFS Part 500, GDPR, and DORA.
Willingness to work onsite at the Purchase office and travel to other Sompo International offices for onsite audit fieldwork when required.

Nice To Haves

Certified Information Systems Security Professional (CISSP) certification.
Certified Internal Auditor (CIA) certification.
Experience with Team Mate or similar audit systems.

Responsibilities

Perform and oversee third-line IT internal audits, including audit fieldwork to assess the design and operating effectiveness of IT processes and controls within agreed timelines.
Document audit work in Team Mate in accordance with standard Internal Audit methodology.
Draft clear IT audit reports that include issues and agreed management action plans.
Track open IT audit issues through remediation and closure.
Perform rolling IT SOX testing of the design and operating effectiveness of IT Entity Level Controls, IT General Controls, and IT Application Controls across key financial applications and supporting tools.
Document SOX control design and operating effectiveness in Team Mate using standard Financial Controls / ICoFR methodology.
Draft IT control deficiencies and agreed management action plans, and track open deficiencies through remediation and closure.
Collaborate with IT external audit teams, including EY and Mazars, across Sompo International entities.
Promote alignment of Sompo International IT controls with regulatory requirements, industry frameworks, and standards.
Assist with IT internal audits and IT SOX work across other global regions when required.
Promote a positive work environment through work ethic, office presence, accountability, agility, and self-improvement.

Benefits

Two medical plans, including a Traditional PPO and a Consumer Driven Health Plan with a Health Savings Account and employer contribution.
Pharmacy benefits with mail-order options.
Dental benefits, including orthodontia coverage for adults and children.
Vision benefits.
Health Care and Dependent Care Flexible Spending Accounts.
Company-paid life and AD&D benefits, with optional supplemental coverage for employees, spouses, and children.
Company-paid disability benefits with salary continuation payments.
401(k) Retirement Savings Plan with employer contributions.
Paid time off and company-paid holidays.
Parental leave benefits and adoption assistance.
Employee Assistance Program.
Tax-free commuter benefit.
Tuition reimbursement and professional qualification benefits.
Incentive awards as part of total compensation.