Overview of PositionThe Sr IT Auditor I is responsible for the understanding and evaluation of the IT control and risk environment within Assurant, Inc. as assigned and includes (but not limited to) the following objectives:
- Participate in audit teams and ensure that audit work performed is in compliance with established audit methodology while meeting all organizational and professional ethical standards.
- Participate in Internal Audit professional practice activities to improve the department's ability to fulfill its charter.
What will my duties and responsibilities be in this job? Participate in Audit Projects (up to 80%)The primary function of this role is to participate on audit projects that identify risk, evaluate IT controls and report key findings for assigned business areas and assess their impact to Assurant's mission, strategy, and related business objectives. Specific tasks include, but are not limited to the following:
- Use knowledge of IT and general business to design and execute risk-based IT audit programs for business process reviews, system implementations, and application reviews and other IT processes through all phases of the audit including planning, testing, and providing written reports of key findings.
- Provide IT support to other audit teams as assigned.
- Assess opportunities to improve the internal control environment across within the assigned business area.
- Understand, recognize, and communicate key performance drivers, business trends, and emerging financial, technical and industry developments.
- Participate in Assurant's annual risk assessment and audit planning.
- Follow up on recommendations that help Assurant's business leaders manage risk.
- Follow professional standards and IAAS methodologies, policies, procedures, and best practices to ensure product quality, that all supporting documentation is sufficient, adequate and meets professional standards to re-perform conclusions reached.
- Communicate effectively with all levels of management and staff through written reports and oral presentations.
- Develop an understanding of Assurant Businesses and maintain awareness of significant industry, regulatory and business changes across the organization and their potential impact on the established control environment.
- Become a trusted, objective, and independent partner that is sought after to provide cost-effective, independent assurance and advice on the effectiveness of the company's management of critical risks.
- Pursue professional development opportunities and share lessons with colleagues.
SOX / MAR / External Auditor Assistance
The role may require the individual to support and/or coordinate SOX/MAR compliance or External Auditor Assistance activities through the execution of testing and communication to management. Specific tasks include, but are not limited to the following:
- Participate in the development, review and implementation of test documentation, control narratives, procedures, and control testing.
- Execute business test strategy to ensure the activities are performed in accordance with the SOX/MAR plan.
- Review documentation for quality, consistency, and relevance.
- Work with and support external auditors as required.
- Participate in periodic scoping and account process mapping.
Participate in Professional Practice Activities (up to 20%)The role may require the individual to participate in professional practice activities to support department development and help ensure that department processes, systems and methodologies effectively and efficiently enable the department to meet its chartered objectives. Specific tasks may include, but are not limited to the following:
- Participate on initiatives, centers of excellence and other teams that enhance the quality, methodology and processes of the department.
- Create and deliver learning interventions that support RBA and SOX/MAR methodologies aligned to the IIA IPPF.
- Respond to information requests from legal entities and regulatory agencies.
- Assist IAAS Leaders in talent management activities aligned with the IIA IPPF.
- Participate in Internal Audit Quality Assurance & Improvement Process activities aligned with the IIA IPPF.
- Create, maintain, and communicate internal department policies and information using the department SharePoint sites.
Responsibility for the work of others- This role may be required to manage the work of interns, other auditors, and external contractors.
What are the requirements needed for this position?Education - BS/BA degree (or equivalent) from an accredited college or university (preferably in Information Technology, Business, Management, Accounting, Finance, or related field)
Knowledge and Skills - General business knowledge, knowledge of the IIA IPPF, internal control frameworks (COSO, etc.), ITGC, risk assessment and audit methodologies
- Subject matter expertise in IT (change management, database systems, logical access, information security, networking, systems development, IT operations, data privacy, app development, governance, etc.)
- Ability to analyze data, identify root causes and propose reasonable solutions that manage risk
- Ability to write clearly and be focused on actionable and reasonable results
- Ability to document work performed to enable external re-performance
- Ability to think critically through recognizing assumptions, evaluating arguments, and drawing conclusions
- Ability to maintain composure and deliver results while under pressure managing multiple assignments and priorities
- Ability to learn quickly and apply abstract ideas to achieve measurable results
- Ability to use data analytical tools (Excel, etc.) to analyze data
- The ability to formally assess risk, plan and execute tests of the control environment and write reports of key findings following defined methodologies
Leadership Skills- Ability to resolve conflict, negotiate and communicate effectively
- Ability to deliver presentations with presence and focus on the target audience
- Ability to build credibility and trust
- Ability to analyze problems and make decisions
- Ability to apply functional knowledge and subject matter expertise to influence decisions
- Ability to collaborate with others and deliver results
- Ability, desire and take the initiative to learn, adapt and grow beyond current responsibility
Previous Experience- Minimum of 2 years of experience in internal or external audit or information technology related roles
- Experience in formal communications (written reports and oral) with multiple levels of staff and management
- Experience in collecting and analyzing complex data, recognizing assumptions, evaluating information, and drawing logical conclusions
What other skills/experience would be helpful to have?Education One or more relevant professional certifications in auditing, accounting, information systems auditing, information risk management, cybersecurity, or compliance (e.g., CPA, CIA, CISA, CISSP, CRISC, CISM, etc.)
Knowledge and Skills - The ability to facilitate meetings and present to groups virtually and in person
- The ability to resolve conflict and negotiate solutions meeting best needs of all parties
- Knowledge of accounting & finance (GL, AP, AR, payroll systems, ratios, valuations, etc.), enterprise risk, compliance, insurance and financial regulations, supply chain, etc.
- Business process improvement and design (BPM, Lean, Six Sigma, etc.)
- Impact of culture on business strategy, change management
Previous Experience - Experience applying broad business knowledge and practical experience to manage and control risk
- Experience with financial services or insurance industry
- Experience managing project plans, issues logs, risk/mitigation strategies, automated testing tools, cost/benefit analysis tools
- Experience using and supporting the Optro audit management system
- Experience creating content in the Microsoft SharePoint environment
- Experience with data analysis and visualization tools such as PowerBI, Tableau, etc.
#AssurantProudMS
Pay Range:
$74,600.00 - $124,700.00
Any posted pay range considers a wide range of compensation factors, including candidate background, experience and work location, while also allowing for salary growth within the position.
If there is no posting end date listed then this is a pipeline requisition, and we will continue to collect applications on an ongoing basis.
