> Markdown version of [/jobs/ext/1507362-it-auditor-ii](https://www.wearedevelopers.com/jobs/ext/1507362-it-auditor-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Auditor II - **Company:** Brotherhood Mutual Insurance Company - **Location:** Fort Wayne, IN, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Systems, Data Security, Information Technology Audit, IT Management, Information Technology - **Published:** July 30, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=23e8d1158439bae9 ## About the Role * Must possess strong written, verbal, and presentation skills. * Self-motivated with strong interpersonal, communication and analytical skills. * Strong project management capabilities. * Understanding of financial audit principles and the Sarbanes-Oxley Act or Model Audit Rule Act. * Familiarity with NAIC Insurance Data Security Model Law. * Familiarity with New York DFS Cyber Security Regulations (23 NYCRR 500 and related). * Familiarity with NIST Cyber Security Framework (NIST CSF). * Familiarity with Service Delivery and Controls Frameworks (COBIT, NIST, ITIL). * Familiarity with privacy regulations (e.g. GDPR, CCPA). * Effectively interface with external contacts, Brotherhood employees, managers, and department staff members., List Degree Requirement, Years' Experience, and Certifications * Bachelor's degree, preferably in IT, Business Administration, or Accounting required. * Must have two to three years of external and/or internal information technology, auditing or GRC experience. * Certified Information Systems Auditor (CISA) and/or Chartered Property and Casualty Underwriter (CPCU) designation is desired. * An insurance background is highly desired. Terms and Conditions This description is intended to describe the general content of and requirements for the performance of this position. It is not to be construed as an exhaustive statement of duties, responsibilities, or requirements. Because the company's niche is the church and related ministries market, and because effective service requires a thorough understanding of this market, persons in this position must be familiar with church operations and must conduct themselves in a manner that will neither alienate nor offend persons within this target niche. ## Description Independently execute governance, risk, and compliance activities, including internal IT audits. Assist in reviewing IT policies and standards, collaborating with stakeholders to ensure effective controls and regulatory compliance., To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. * Assist the team lead and management with risk and control consulting for IT and business departments with understanding and fulfilling their responsibilities related to IT governance, risk, and compliance. * Execute IT Audit Plan items assigned by the team lead and management. Prepare or review assigned reports of audit findings and opportunities for improvement and communicate these to appropriate company leadership. * Review and update assigned policies to ensure they comply with industry standards and corporate needs. * Assist with maintaining the controls framework for measuring the organization's controls and risk, assist with the collection of metrics to be reported to Senior Management that display policy compliance, finding remediation, and security posture. * Follow/support the communication mechanisms to report results of audits, risk/controls consulting projects, and investigations to management and the Audit Committee. * Work with compliance to ensure legal and regulatory obligations for cybersecurity and privacy are being met as directed by the team lead and management. * Perform assigned vendor risk management activities. * Assist the team lead and management in maintaining a risk register for cyber risks affecting the business, providing reasonable assurance that risk management, control, and governance systems are functioning as intended. * Follow the company's ERM approach to evaluating risks and ensure the organization's risk posture is within the risk tolerance limits. * Assist with the coordination of external audits/reviews and gather/document assigned artifacts for external requests for attestation of security and privacy practices. * Complete other duties as assigned. ## Related Videos - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Web-based Information Visualization](https://www.wearedevelopers.com/videos/84-web-based-information-visualization) - [Engineering/Manager Pendulum: Generating compound interest on your career](https://www.wearedevelopers.com/videos/100348-engineering-manager-pendulum-generating-compound-interest-on-your-career) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [How should you format your IT resume?](https://www.wearedevelopers.com/magazine/68-how-should-you-format-your-it-resume) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)