Carex is partnering with a company in the insurance industry to identify an IT Audit Manager / Senior Manager who will serve as a tactical leader within the Internal Audit function. This role is responsible for coordinating the development and execution of the internal audit plan in partnership with executive audit leadership while ensuring adequate staffing and resources to complete audit objectives. The position performs complex IT and cybersecurity audits, evaluates the effectiveness of internal controls, and helps strengthen enterprise risk management practices related to technology and information security. This hybrid role requires a minimum of 10 days per month working onsite. The position also provides leadership to the internal audit team and works closely with business stakeholders, regulatory bodies, and external auditors.
What You’ll Do
-
Provide leadership and direction for the Internal Audit team, including coaching, professional development, performance management, and hiring decisions.
-
Coordinate and execute the internal audit plan in collaboration with executive audit leadership to evaluate company policies, regulatory compliance, financial controls, and operational processes.
-
Plan and perform complex IT and cybersecurity audits focused on systems, networks, and information security controls.
-
Develop recommendations for control improvements and collaborate with management to establish remediation plans addressing identified risks and gaps.
-
Monitor and validate remediation efforts related to audit findings and ensure corrective actions are implemented effectively.
-
Guide and support audit staff in planning audit engagements, preparing workpapers, and coordinating with business stakeholders and regulatory agencies.
-
Promote awareness and understanding of internal controls throughout the organization.
-
Coordinate responses to audit-related requests from external auditors, regulators, third-party auditors, and other stakeholders.
-
Manage and coordinate external security assessments such as penetration testing and related evaluations.
-
Conduct third-party due diligence reviews and participate in special projects requested by executive leadership or governing committees.
-
Implement process improvements that strengthen the internal audit function and increase operational efficiency.
-
Encourage collaboration across teams and support initiatives that improve organizational processes and controls.
What You’ll Bring
-
Bachelor’s degree in Information Systems, Accounting, or a related field or equivalent experience.
-
Minimum of 5 years of IT audit experience with demonstrated expertise in evaluating IT and cybersecurity controls.
-
Must have at least 2 years of direct leadership or management experience guiding teams and developing talent.
-
Certified Internal Auditor (CIA) and Certified Information Systems Auditor (CISA) certifications preferred.
-
Certified Public Accountant (CPA) certification preferred.
-
Technical certifications such as AWS, Microsoft, Cisco, or similar credentials preferred.
-
Experience planning and executing audits of IT infrastructure, security controls, and technology processes.
-
Knowledge of internal control frameworks and regulatory environments, including GAAP, statutory accounting principles, and regulatory compliance expectations.
-
Familiarity with SOC 2 reports and security frameworks such as NIST 800-53, HIPAA Security and Privacy Rules, and PCI standards.
-
Technical understanding of enterprise infrastructure including AWS environments, Cisco networking equipment, Microsoft server operating systems, Active Directory, Exchange, Windows operating systems, and common office applications.
-
Strong written and verbal communication skills with the ability to collaborate effectively across diverse teams.
-
Excellent organizational, analytical, and problem-solving skills with the ability to manage multiple audit priorities.
-
Experience with audit tools such as AuditBoard or ACL Analytics or similar.
-
Insurance industry experience preferred.
Carex Consulting Group is an equal opportunity employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender identity or Veteran status.
#LI-WR1