AI-Business Audit Consultant

CNA; Chicago (IL); Hybrid; USD 72,000 - 141,000; Full time

Job summary

CNA is seeking an Internal Audit professional to evaluate the use of AI across business processes and strengthen IA’s assurance capabilities. The role will assess AI-related risks and controls, serving as a resource to audit teams while delivering high-quality audit services through all phases of the audit lifecycle.

Typically reporting to AVP or above, the position requires strong auditing knowledge, AI concepts, and the ability to guide junior staff.

Qualifications

• Bachelor's degree in information systems, cybersecurity, business or equivalent.
• Typically 5–8 years of risk, governance, cybersecurity or IT auditing experience.

Responsibilities

• Evaluates AI governance frameworks and lifecycle.
• Monitors AI technologies, regulatory developments and industry practices.
• Provides analysis, interpretation and advice to management.
• Participates on concurrent projects to expedite issue resolution and delivery of quality audit services.
• Serves as a subject matter resource to audit teams regarding AI technologies, risks, governance and control considerations.
• Structures and writes major sections of audit reports and other outputs intended for customers.
• Contributes to the development and execution of AI and business audit procedures based on risk to the business.
• Participates in all phases of audits and supports external SOX testing.

Skills

Auditing practices

AI governance

AI risk assessment

Communication skills

Mentoring

Analytical skills

Education

Bachelor's degree in information systems, cybersecurity, business or related

CPA / CIA / CISA or advanced degree preferred

Job description

You have a clear vision of where your career can go. And we have the leadership to help you get there. At CNA, we strive to create a culture in which people know they matter and are part of something important, ensuring the abilities of all employees are used to their fullest potential.

About Internal Audit

The Global Internal Audit Team strengthens CNA’s ability to create, protect and sustain value by providing the Audit Committee and management with independent, risk-based and objective assurance, advice and insight. We are analysts, problem-solvers, explorers as well as trusted advisors and catalysts. We strive to maintain an agile and responsive audit program that focuses on our company’s highest risks and builds trust with all of our stakeholders. We invest in our people and are committed to inclusion. As the third line of defense for CNA, the scope of our work spans across all types of risk: financial, compliance, technology and operational.

Job Profile Summary

The newly created position will focus on evaluating the use of Artificial Intelligence (AI) within business processes and operations while also strengthening IA’s assurance capabilities over AI. The role will assess AI-related risks and controls across the company while also serving as an AI subject matter resource to audit teams. The position will also participate in all types of risk-based engagements, delivering high-quality internal audit services throughout all phases of the audit lifecycle while acting as a point of guidance for less experienced staff.

JOB DESCRIPTION:

Essential Duties & Responsibilities

Performs a combination of duties in accordance with departmental guidelines:

• Participates in evaluating AI governance frameworks and lifecycle, model oversight processes, data quality controls, responsible AI practices and compliance with internal policies and regulatory expectations.
• Monitors emerging AI technologies, regulatory developments and industry practices to help identify evolving risks and opportunities.
• Provides analysis, interpretation and advice to management.
• Participates on concurrent projects to expedite issue resolution and delivery of quality audit services advising management of project status.
• Serves as a subject matter resource to audit teams regarding AI technologies, risks, governance and control considerations.
• Structures and writes major sections of audit reports and other outputs intended for customers. Participates in discussions and presents audit results with management responsible for the audited area.
• Contributes to the development and execution of AI and business audit procedures based on risk to the business and in collaboration with internal and external partners and ensures completion of planned actions.
• Participates in the effective execution of all phases of audits. Contributes to the creation of audit scope through an assessment of risks, evaluating the design of existing controls, developing and executing test programs to assess adherence with established controls and documenting test results.
• Coordinates and actively participates in Internal Audit’s direct assistance responsibilities in support of the external auditor's SOX testing
• Support in the management of various IA department strategic initiatives to further enhance the current IA practices.
• May perform additional duties as assigned.

Reporting Relationship

Typically AVP or above

Skills, Knowledge & Abilities

• Strong knowledge of corporate auditing practices, procedures and principles Knowledge of insurance industry preferred.
• Working knowledge of financial reporting, operational, technology and regulatory risk concepts.
• Provide coaching for more junior audit staff.
• Ability to achieve results by taking a proactive long-term view of business goals and objectives.
• Excellent analytical and problem solving skills, with the ability to effectively plan and direct multiple projects and project work teams.
• Working knowledge of Artificial Intelligence concepts, technologies, governance frameworks and associated risks, including the ability to assess AI-enabled processes and controls.
• Excellent interpersonal, presentation, verbal and written communication skills, with the ability to effectively interact with internal and external business partners.
• Ability to exercise professional judgement and assume responsibility for decisions which have an impact on people and quality of service.

Education & Experience

• Bachelor's Degree in information systems, cybersecurity, business or equivalent. Advanced degree or professional designation (CPA, CIA, CISA, etc.) preferred.
• Typically a minimum of five to eight years of relevant work experience (e.g., risk and governance, cybersecurity and/or information technology auditing experience).

#LI-MR1

#LI-Hybrid

I n certain jurisdictions, CNA is legally required to include a reasonable estimate of the compensation for this role. In District of Columbia , California, Colorado, Connecticut, Illinois , Maryland , Massachusetts , New York and Washington, the national base pay range for this job level is $72,000 to $141,000 annually.Salary determinations are based on various factors, including but not limited to, relevant work experience, skills, certifications and location. CNA offers a comprehensive and competitive benefits package to help our employees – and their family members – achieve their physical, financial, emotional and social wellbeing goals. For a detailed look at CNA’s benefits, please visit cnabenefits.com .

CNAutilizesAI-enabled technology during the recruiting process. For more information, please visitour careers page .

CNA is committed to providing reasonable accommodations to qualified individuals with disabilities in the recruitment process. To request an accommodation, please contact [e-mail]