Sr IT Auditor II

American Bankers Insurance Company of Florida•Atlanta, GA

About The Position

The Sr IT Auditor II understands and evaluates the internal control and risk environment within Assurant, Inc. for assigned business or enterprise functions. The role leads audit teams and ensures work complies with established audit methodology and professional ethical standards. It also manages relationships with IT process owners to understand and influence improvements to management’s control environment, and contributes to Internal Audit professional practice activities. The primary responsibility is to lead risk-based IT audit projects, identifying risks, evaluating IT controls, and reporting key findings and their impact on Assurant’s mission, strategy, and business objectives. The role may also support or coordinate SOX/MAR compliance and external auditor assistance, develop relationships with business leaders and process owners, lead small teams, and lead professional practice activities that improve departmental methods, systems, quality, and performance. The role may manage the work of interns, other auditors, and external contractors. The position requires a bachelor’s degree or equivalent and broad IT audit expertise, including knowledge of IT controls, risk assessment, audit methodologies, applicable frameworks, and data analysis tools. The posted pay range is $88,000–$147,000.

Requirements

BS/BA degree or equivalent from an accredited college or university; a degree in Information Technology, Business, Management, Accounting, Finance, or a related field is preferred.
Knowledge of general business, the IIA IPPF, internal control frameworks such as COSO, IT general controls, risk assessment, and audit methodologies.
Subject matter expertise in IT areas such as change management, database systems, logical access, information security, networking, systems development, IT operations, data privacy, application development, and governance.
Knowledge of common IT regulatory compliance, such as SOC and Solvency II.
Ability to analyze data, identify root causes, and propose reasonable risk-management solutions.
Ability to write clearly, focus on actionable results, and document work so it can be reperformed by external reviewers.
Critical-thinking skills, including recognizing assumptions, evaluating arguments, and drawing conclusions.
Ability to maintain composure and deliver results under pressure while managing multiple assignments and priorities.
Ability to learn quickly and apply abstract ideas to achieve measurable results.
Ability to use advanced data analytics tools such as Excel, PowerBI, and Tableau to analyze complex data.
Ability to develop clear, risk-based audit observations identifying control deficiencies, root causes, business impacts, and practical recommendations in accordance with defined methodologies.
Ability to resolve conflict, negotiate, and communicate effectively; deliver audience-focused presentations; mentor and model professional behavior; influence leaders and lead teams; and build credibility and trust.
Ability to analyze problems, make decisions, apply subject-matter expertise to influence decisions, collaborate, deliver results, and take accountability.
Initiative and willingness to learn, adapt, and grow beyond current responsibilities.

Nice To Haves

One or more relevant certifications in auditing, accounting, information systems auditing, information risk management, cybersecurity, or compliance, such as CPA, CIA, CISA, CISSP, CRISC, or CISM.
Ability to facilitate meetings and present to large groups virtually and in person.
Ability to resolve conflict and negotiate solutions that meet the needs of all parties.
Ability to mentor and coach colleagues through influence to achieve team results.
Knowledge of accounting and finance, including general ledger, accounts payable, accounts receivable, payroll systems, ratios, and valuations; enterprise risk; compliance; insurance and financial regulations; and supply chain.
Knowledge of business process improvement and design, such as BPM, Lean, or Six Sigma, and the impact of culture on business strategy and change management.
Experience applying broad business knowledge and practical experience to manage and control risk.
Experience in the financial services or insurance industry.
Experience managing project plans, issues logs, risk and mitigation strategies, automated testing tools, and cost-benefit analysis tools.
Experience using and supporting the Optro audit management system.
Experience creating content in Microsoft SharePoint.
Experience with data analysis and visualization tools such as PowerBI or Tableau.

Responsibilities

Lead risk-based IT audit projects for business process reviews, system implementations, application reviews, and other IT processes, including planning, testing, and written reporting of findings.
Provide IT support to other audit teams as assigned and assess opportunities to improve the company’s internal control environment.
Identify and communicate business performance drivers, trends, and emerging financial, technical, and industry developments and assess their potential effects on controls.
Use data analytics and automation to identify efficiencies within the department and across the company.
Participate in annual risk assessment and audit planning, and follow up on recommendations that help business leaders manage risk.
Follow professional standards, IAAS methodologies, policies, procedures, and best practices to ensure quality; communicate findings effectively through written reports and oral presentations.
Support or coordinate SOX/MAR compliance and external auditor assistance, including developing and reviewing test documentation, control narratives, procedures, and control testing.
Execute business test strategy in accordance with the SOX/MAR plan; review documentation for quality, consistency, and relevance; and participate in periodic scoping and account mapping.
Coordinate with and support external auditors, Assurant Enterprise Risk, Compliance, and IT functions to align activities.
Develop and maintain relationships with control and process owners, business managers, and subject matter experts; serve as a trusted, objective partner providing independent assurance and advice.
Lead small audit teams, potentially including interns, staff auditors, and external contractors; oversee project documentation, team learning and development, coaching, review, and feedback.
Participate in initiatives and centers of excellence that improve departmental quality, methodology, and processes.
Create and implement technology solutions and learning interventions supporting Risk-Based Audit and SOX/MAR methodologies aligned to the IIA IPPF.
Monitor adoption and use of department systems, assist with talent management, and manage Internal Audit Quality Assurance & Improvement Process activities.
Create and edit professional communications; maintain department policies and information on SharePoint; and create, maintain, and report department metrics through dashboards and reports.
Pursue professional development and share lessons with colleagues.