Senior IT Auditor

The Senior IT Auditor’s primary focus is to provide an independent, objective assurance and consulting activity to add value to the company. The Senior IT Auditor will evaluate and assess information technology systems, processes, and controls to identify control gaps and make recommendations to improve the organization’s operations. In addition, the Senior IT Auditor will determine if the Company’s network of risk management, control, technology, and governance processes are satisfactory and meet the needs of the business as well as regulatory authorities. The Senior IT Auditor will also be responsible for undertaking a range of internal audit activities from initial planning through the audit report.

The role will follow a hybrid work schedule of 4 days in the office, 1 days remote.

Essential Functions:

Percentage of Time:

• Perform, under supervision of management, technology risk-based audits including analyses of solutions to complex problems
• Ensure compliance with established internal control procedures within the IT related functions by examining records, reports, operating practices, and documentation.
• Identify gaps in internal controls and recommend risk mitigation measures and cost savings to strengthen internal controls and improve IT processes, infrastructure, and systems.
• Prepares audit work papers which includes planning memos, risk assessment matrices and conclusions on test work, etc.
• Prepare and present reports that reflect IT process, system or infrastructure description, process flows, key internal controls, as well as, issues, root cause, and remediation.
• Ensure audit findings are discussed with management and appropriately tracked through remediation.
• Maintain effective relationships with IT management to enhance the audit process.
• Effectively monitors own performance to manage work requirements and budget to meet assigned initiatives.
• Function as an objective source of independent advice to ensure validity and risk mitigation.
• Engage in continuous knowledge development regarding regulations, best practices, tools, techniques, performance standards and the Institute of Internal Auditors’ International Professional Practices Framework (IPPF).

Information Technology/Systems Audit, Insurance, Microsoft Active Directory, Consulting, Information Technology & Information Systems, Regulations, Risk Management, Information Technology/Systems Audit, Internal Audit, Organizational Development/Management, Qualifications: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions., * Bachelor’s degree from an accredited institution is required.

• CISA, CISM or CISSP is preferred.
• Minimum of 3-5 years of IT audit related experience.
• Experience in the Property &Casualty (P&C) insurance industry is a plus.
• Applying IT and Cybersecurity control frameworks including COBIT and NIST.
• Understanding of finance and operation internal controls and internal audit methodology as well as SOX/MARSOX compliance requirements.
• Ability to utilize critical thinking by applying process analysis, business intelligence, and problem-solving techniques.

Salary: The base pay range is $100-112K . Salary determinations are based on various factors, including but not limited to, relevant work experience, skills, certifications and location.

Additional Benefits: Healthcare and Retirement Benefits Comprehensive medical, dental, and vision coverage 401(k) with a generous employer match and profit-sharing contribution Wellness incentive program Life and accidental death and dismemberment (AD&D) insurance Flexible spending programs Short-term and long-term disability plans

Additional Benefit Programs Paid time off program Paid charitable leave Paid parental leave Tuition reimbursement program Personal insurance (auto/homeowners) discounts

MSIG USA is the US-based subsidiary of MS&AD Insurance Group Holdings, Inc., one of the world’s top P&C carriers and a global Class 15 insurer, with A+ ratings and a reach that spans 40+ countries and regions. Leveraging our 350-year heritage, MSIG USA brings the financial strength, expertise, and global footprint to offer commercial insurance solutions that address your business’s unique risks.