Sr IT Auditor II

Assurant•Atlanta, GA

3d•$88,000 - $147,000

About The Position

The Sr IT Auditor II understands and evaluates the internal control and risk environment at Assurant, Inc. for assigned business or enterprise functions. The role leads audit teams and projects, ensures audit work complies with established methodology and professional ethical standards, manages relationships with IT process owners, and contributes to professional-practice improvements within Internal Audit. The primary responsibility is to lead risk-based IT audit projects, including business process reviews, system implementations, application reviews, and other IT processes. The role covers audit planning, testing, reporting findings, assessing controls and risks, supporting other audit teams, participating in annual risk assessment and planning, following up on recommendations, and identifying opportunities for analytics and automation. It may also support SOX/MAR compliance and external auditor activities through test execution, documentation review, coordination, and communication with management. The position may develop relationships with business leaders, process owners, and subject matter experts; lead small teams of interns, auditors, or contractors; and coach team members. It may also lead professional-practice initiatives, including methodology and system improvements, learning interventions, quality assurance, talent-management support, communications, SharePoint content, and department metrics and dashboards. The role requires a bachelor's degree or equivalent and broad knowledge of business, IT, internal controls, and audit approaches. Relevant certifications and experience in financial services, insurance, risk management, audit tools, SharePoint, and data analysis are helpful. The posted pay range is $88,000 to $147,000.

Requirements

Bachelor's degree (BS/BA) or equivalent from an accredited college or university; a field such as Information Technology, Business, Management, Accounting, or Finance is preferred.
General business knowledge and knowledge of the IIA IPPF, internal control frameworks such as COSO, IT general controls, risk assessment, and audit methodologies.
IT subject matter expertise in areas such as change management, database systems, logical access, information security, networking, systems development, IT operations, data privacy, application development, or governance.
Knowledge of common IT regulatory compliance, such as SOC or Solvency II.
Ability to analyze data, identify root causes, and propose reasonable risk-management solutions.
Clear writing skills and focus on actionable, reasonable results.
Ability to document work so external parties can re-perform it.
Critical thinking skills, including recognizing assumptions, evaluating arguments, and drawing conclusions.
Ability to maintain composure and deliver results under pressure while managing multiple assignments and priorities.
Ability to learn quickly and apply abstract ideas to achieve measurable results.
Ability to use advanced data-analysis tools such as Excel, Power BI, or Tableau to analyze complex data.
Ability to develop clear, risk-based audit observations that identify control deficiencies, root causes, business impacts, and practical recommendations in accordance with defined methodologies.
Ability to resolve conflict, negotiate, and communicate effectively.
Ability to deliver presentations with presence and adapt to the target audience.
Ability to mentor and set a professional example of quality and behavior.
Ability to influence leaders and lead teams.
Ability to build credibility and trust, analyze problems, make decisions, collaborate, and deliver results.
Ability to apply functional knowledge and subject-matter expertise to influence decisions.
Willingness to accept responsibility and accountability and take initiative to learn, adapt, and grow beyond current responsibilities.

Nice To Haves

One or more relevant professional certifications in auditing, accounting, information systems auditing, information risk management, cybersecurity, or compliance, such as CPA, CIA, CISA, CISSP, CRISC, or CISM.
Ability to facilitate meetings and present to large groups in person and virtually.
Ability to resolve conflict and negotiate solutions that meet the needs of all parties.
Ability to mentor and coach colleagues through influence to achieve team results.
Knowledge of accounting and finance, enterprise risk, compliance, insurance and financial regulations, or supply chain.
Knowledge of business process improvement and design approaches such as BPM, Lean, or Six Sigma.
Knowledge of the impact of culture on business strategy and change management.
Experience applying broad business knowledge and practical experience to manage and control risk.
Experience in the financial services or insurance industry.
Experience managing project plans, issues logs, risk and mitigation strategies, automated testing tools, or cost-benefit analysis tools.
Experience using and supporting the Optro audit management system.
Experience creating content in Microsoft SharePoint.
Experience with data analysis and visualization tools such as Power BI or Tableau.

Responsibilities

Lead risk-based IT audit projects, including business process reviews, system implementations, application reviews, and other IT processes through planning, testing, and written reporting.
Provide IT support to other audit teams as assigned.
Assess opportunities to improve the company's internal control environment.
Recognize and communicate business performance drivers, trends, and emerging financial, technical, and industry developments.
Identify and realize efficiencies through data analytics and automation.
Participate in annual risk assessment and audit planning, and follow up on recommendations.
Apply professional standards, IAAS methodologies, policies, procedures, and best practices to ensure quality audit work.
Communicate audit results and other information to management and staff through written reports and oral presentations.
Maintain awareness of business, industry, and regulatory changes and their potential effects on controls.
Pursue professional development and share lessons with colleagues.
Support or coordinate SOX/MAR compliance and external auditor assistance, including testing and communications with management.
Participate in developing, reviewing, and implementing test documentation, control narratives, procedures, and control testing.
Execute the business test strategy in accordance with the SOX/MAR plan and review documentation for quality, consistency, and relevance.
Participate in periodic scoping and account mapping of significant processes.
Coordinate with and support external auditors, Enterprise Risk, Compliance, and IT functions.
Develop and maintain relationships with control and process owners, business managers, and subject matter experts.
Serve as an objective and independent partner providing assurance and advice on management of critical risks.
Lead small teams of interns, auditors, or external contractors; ensure project documentation supports conclusions and meets professional standards.
Oversee team learning and development, and provide coaching, review, and constructive feedback.
Participate in initiatives and centers of excellence that improve department quality, methodology, and processes.
Create and implement technology solutions and learning interventions that support Risk-Based Audit and SOX/MAR methodologies aligned with the IIA IPPF.
Monitor and improve adoption and use of departmental systems, and assist leaders with talent-management activities.
Manage Internal Audit Quality Assurance & Improvement Process activities aligned with the IIA IPPF.
Create and edit professional communications for executive or high-profile audiences.
Create, maintain, and communicate department policies and information through SharePoint sites.
Create, maintain, and report department metrics through dashboards and reports, monitoring and communicating department performance.