IT Senior Internal Auditor

Munich Re; Toronto; Hybrid; CAD 100,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Munich Re seeks a Senior IT Auditor to provide independent IT audit services to North America entities and Group IT, supporting senior management in achieving strategic objectives. You will lead engagements from planning through reporting, build strong client relationships, and apply data analytics to enhance audit testing and risk analysis.

You will partner with management to set milestones, ensure timely delivery, and communicate findings clearly to both technical and non-technical

Qualifications

• Five to seven plus years of IT audit experience.
• Strong knowledge of IT auditing standards and control frameworks (IIA, COBIT, NIST, ISO2700x).
• CISA and/or CISSP certification required; other IT security certs are a plus.
• Experience with data analytics, automation or AI-enabled audit tools preferred.
• Insurance industry experience preferred.

Responsibilities

• Lead engagements from planning to reporting, including scoping risks and controls and writing audit reports.
• Set engagement milestones and ensure timely delivery with staff; manage fieldwork and reporting.
• Communicate effectively with IT and operational management; justify audit findings and rankings.
• Apply data analytics to facilitate scoping and testing; guide staff in analytics usage.

Skills

IT audit

Data analytics

Project management

Communication

Governance & risk

IT controls

Education

Bachelor’s degree in information systems / computer science / engineering / business/finance

Tools

Data analytics software

Job description

As part of Group Information Technology Audit (GITA) you provide IT audit services to Munich Re's North America entities as well as Group IT to assist Senior Management in the achievement of the Company's strategic objectives.

As a trusted advisor, The Senior IT Auditor:

• Builds effective relationships while providing independent value added internal audit services
• Provides reasonable assurance regarding the effectiveness of governance, compliance, risk management, and internal controls systems
• Independently or through leading engagement teams conducts independent assessments of Munich Re's information systems and IT internal control environment through the execution of risk analysis, control evaluation, and innovative audit testing procedures and techniques

Major Duties and Responsibilities:

• Has a lead role in all phases of assigned projects from planning to reporting, including understanding the technologies under review, how IT enables business operations, scoping the audit, identifying risks and controls, design and execution of testing procedures and writing audit reports
• Demonstrates and applies a thorough understanding of project management skills ensuring assigned audits meet department requirements. In coordination with management, sets overall engagement milestones (planning, fieldwork & reporting) for assigned projects. Ensures work is completed by self and assigned staff to consistently meet agreed upon milestone dates.
• Effectively communicates orally and written in both technical IT and non-technical terms to Operational and IT management. Makes sound recommendations for audit finding rankings and effectively supports conclusions during discussions with audit clients.
• Demonstrates proficiency in data analysis concepts and practices. Effectively uses the department's data analysis software to facilitate audit scoping and testing. Guides staff in the effective use of data analytics.

Qualifications:

• Has sound knowledge of core IT processes (e.g. application development, change management, logical & information security, networking, vulnerability & patch management, computer operations and business continuity) to provide credible specialist advice on technology controls to Internal Audit and Management at large.
• A Bachelor's degree in information systems, computer science, engineering, business/finance or equivalent training along with relevant technology experience are required. Insurance industry experience preferred.
• Five to seven plus years plus of IT audit or information technology experience with demonstrated IT subject matter expertise.
• Strong knowledge of IT auditing standards and control frameworks such as IIA, COBIT, NIST Cyber, CSC, and ISO2700x.
• Understanding of artificial intelligence, generative AI, machine learning, and related technologies, including associated governance, security, privacy, compliance, and operational risks.
• Experience applying data analytics, automation, or AI-enabled tools within audit, risk management, cybersecurity, or technology operations environments is preferred.
• CISA and / or CISSP Certification is required for those with an audit background. Other technical / IT security certifications are a plus.

At Munich Re, we see Diversity and Inclusion as a solution to the challenges and opportunities all around us. Our goal is to foster an inclusive culture and build a workforce that reflects the communities in which we live and work. We strive to provide a workplace where all of our colleagues feel respected, valued and empowered to achieve their very best every day. We recruit and develop talent with a focus on providing our customers the most innovative products and services.

Our base salary range for this role is between $100,000 and $120,000 CDN per year, plus an opportunity for an annual company bonus based upon a percentage of eligible pay. The salary estimate displayed represents the typical salary range for candidates hired in this position. Factors that may be used to determine your actual salary include your specific skills, how many years of experience you have and comparison to internal equity.

This role is located in our Toronto office on 390 Bay St, and we operate in a hybrid work model. This job posting is for a new vacancy.

We do not use AI in our recruitment process - applications are reviewed by our team to ensure a fair and personalized experience.

We are an equal opportunity employer. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.