Sr IT Auditor II

Assurant•Atlanta, GA

About The Position

The Sr IT Auditor II understands and evaluates the internal control and risk environment within assigned Assurant business areas or enterprise functions. The role leads audit teams and projects, ensures work complies with established audit methodology and professional ethical standards, manages relationships with IT process owners, and helps improve management’s control environment. It also contributes to Internal Audit professional-practice activities that strengthen the department’s ability to fulfill its charter. The position leads risk-based IT audits across business processes, system implementations, applications, and other IT processes, from planning and testing through written reporting of findings. It assesses risks and controls, identifies opportunities to improve the control environment, supports audit planning and follow-up, and communicates results to management. The role may also support or coordinate SOX/MAR compliance and external-auditor assistance, including test execution, documentation review, scoping, and coordination with internal and external stakeholders. The role develops relationships with business leaders, control and process owners, and subject matter experts, serving as an objective partner on critical risks. It may lead small teams of interns, auditors, or contractors, providing oversight, coaching, feedback, and development support. It may also lead professional-practice initiatives involving audit methodology, technology solutions, learning interventions, quality assurance, department systems, communications, policies, and performance metrics. The position requires a bachelor’s degree or equivalent, preferably in a relevant business, technology, or finance discipline; broad business and IT audit knowledge; strong analytical, communication, documentation, and leadership skills; and the ability to manage multiple assignments and influence stakeholders. Relevant professional certifications and experience in financial services or insurance, audit and risk tools, SharePoint, and data analysis and visualization are helpful.

Requirements

BS/BA degree or equivalent from an accredited college or university; Information Technology, Business, Management, Accounting, Finance, or a related field is preferred.
General business knowledge and knowledge of the IIA IPPF, internal control frameworks such as COSO, ITGC, risk assessment, and audit methodologies.
Subject matter expertise in IT areas such as change management, database systems, logical access, information security, networking, systems development, IT operations, data privacy, application development, and governance.
Knowledge of common IT regulatory compliance, including SOC and Solvency II.
Ability to analyze data, identify root causes, and propose reasonable risk-management solutions.
Ability to write clearly and focus on actionable, reasonable results.
Ability to document work so external reviewers can re-perform it.
Critical-thinking skills, including recognizing assumptions, evaluating arguments, and drawing conclusions.
Ability to remain composed and deliver results under pressure while managing multiple assignments and priorities.
Ability to learn quickly and apply abstract ideas to achieve measurable results.
Ability to use advanced data analytical tools such as Excel, Power BI, and Tableau to analyze complex data.
Ability to develop clear, risk-based audit observations identifying control deficiencies, root causes, business impacts, and practical recommendations in accordance with defined methodologies.
Ability to resolve conflict, negotiate, and communicate effectively.
Ability to deliver presentations with presence and attention to the target audience.
Ability to mentor and set a professional example of quality and behavior.
Ability to influence leaders and lead teams, build credibility and trust, analyze problems, and make decisions.
Ability to apply functional knowledge and subject matter expertise to influence decisions, collaborate, and deliver results.
Ability to accept responsibility and accountability for results, and take initiative to learn, adapt, and grow beyond current responsibilities.

Nice To Haves

One or more relevant certifications in auditing, accounting, information systems auditing, information risk management, cybersecurity, or compliance, such as CPA, CIA, CISA, CISSP, CRISC, or CISM.
Ability to facilitate meetings and present to large groups virtually and in person.
Ability to resolve conflict and negotiate solutions that meet the needs of all parties.
Ability to mentor and coach colleagues through influence to achieve team results.
Knowledge of accounting and finance, enterprise risk, compliance, insurance and financial regulations, or supply chain.
Knowledge of business process improvement and design, such as BPM, Lean, or Six Sigma.
Understanding of the impact of culture on business strategy and change management.
Experience applying broad business knowledge and practical experience to manage and control risk.
Experience in the financial services or insurance industry.
Experience managing project plans, issue logs, risk and mitigation strategies, automated testing tools, or cost/benefit analysis tools.
Experience using and supporting the Optro audit management system.
Experience creating content in the Microsoft SharePoint environment.
Experience with data analysis and visualization tools such as Power BI or Tableau.

Responsibilities

Lead and execute risk-based IT audit projects, including planning, testing, and written reporting of key findings.
Evaluate IT risks and controls across business processes, system implementations, applications, and other IT processes, and assess their impact on Assurant’s objectives.
Provide IT support to other audit teams as assigned.
Identify opportunities to improve the internal control environment and realize efficiencies through data analytics and automation.
Participate in annual risk assessment and audit planning, and follow up on recommendations to help business leaders manage risk.
Apply professional standards, IAAS methodologies, policies, procedures, and best practices to ensure audit quality.
Communicate audit results and other relevant information to all levels of management and staff through reports and presentations.
Maintain awareness of significant industry, regulatory, and business changes and assess potential impacts on controls.
Support or coordinate SOX/MAR compliance and external auditor assistance, including test documentation, control narratives, procedures, testing, scoping, and account mapping.
Review SOX/MAR documentation for quality, consistency, and relevance, and coordinate with external auditors, Enterprise Risk, Compliance, and IT functions.
Develop and maintain relationships with control and process owners, business managers, and subject matter experts.
Serve as a trusted, objective, and independent partner providing assurance and advice on management of critical risks.
Lead small teams of interns, auditors, or external contractors, ensuring project outcomes and supporting documentation meet professional standards.
Coach and provide feedback to team members on audit planning, testing, documentation, and reporting, and support their learning and development.
Participate in initiatives and centers of excellence that enhance the department’s quality, methodology, and processes.
Create and implement technology solutions and learning interventions supporting Risk-Based Audit and SOX/MAR methodologies aligned to the IIA IPPF.
Monitor and improve department systems, assist with talent management, and manage Internal Audit Quality Assurance & Improvement Process activities.
Create and edit professional communications for executive or high-profile audiences, and maintain department policies and information on SharePoint.
Create, maintain, and report department metrics through dashboards and reports, monitoring performance for department leaders.
Pursue professional development and share lessons with colleagues.