AI-Business Audit Consultant

CNA Insurance; Chicago (IL); On-site; USD 72,000 - 141,000; Full time

Benefits offered by this job

Competitive benefits package

Job summary

CNA Insurance is seeking a seasoned Internal Audit professional to lead evaluations of AI usage across business processes and strengthen assurance over AI. You will assess AI-related risks and controls, serve as an AI SME to audit teams, and contribute to all audit lifecycle phases while guiding less experienced staff.

The role reports to AVP or above and requires broad auditing knowledge with a focus on AI governance, data quality, and regulatory alignment.

Qualifications

• Bachelor's Degree in information systems, cybersecurity, business or equivalent.
• Advanced degree or professional designation (CPA, CIA, CISA, etc.) preferred.
• Typically a minimum of five to eight years of relevant work experience (risk and governance, cybersecurity and/or information technology auditing).

Responsibilities

• Evaluates AI governance frameworks and lifecycle, model oversight processes, data quality controls, responsible AI practices and compliance with internal policies and regulatory expectations.
• Monitors emerging AI technologies, regulatory developments and industry practices to identify evolving risks and opportunities.
• Provides analysis, interpretation and advice to management.
• Participates on concurrent projects to expedite issue resolution and delivery of quality audit services.
• Serves as a subject matter resource to audit teams regarding AI technologies, risks, governance and control considerations.
• Structures and writes major sections of audit reports and other outputs intended for customers.
• Participates in the development and execution of AI and business audit procedures based on risk to the business and in collaboration with internal and external partners.

Job description

You have a clear vision of where your career can go. And we have the leadership to help you get there. At CNA, we strive to create a culture in which people know they matter and are part of something important, ensuring the abilities of all employees are used to their fullest potential.

About Internal Audit

The Global Internal Audit Team strengthens CNA's ability to create, protect and sustain value by providing the Audit Committee and management with independent, risk-based and objective assurance, advice and insight. We are analysts, problem-solvers, explorers as well as trusted advisors and catalysts. We strive to maintain an agile and responsive audit program that focuses on our company's highest risks and builds trust with all of our stakeholders. We invest in our people and are committed to inclusion. As the third line of defense for CNA, the scope of our work spans across all types of risk: financial, compliance, technology and operational.

Job Profile Summary

The newly created position will focus on evaluating the use of Artificial Intelligence (AI) within business processes and operations while also strengthening IA's assurance capabilities over AI. The role will assess AI-related risks and controls across the company while also serving as an AI subject matter resource to audit teams. The position will also participate in all types of risk-based engagements, delivering high-quality internal audit services throughout all phases of the audit lifecycle while acting as a point of guidance for less experienced staff.

Essential Duties & Responsibilities

Performs a combination of duties in accordance with departmental guidelines:

• Participates in evaluating AI governance frameworks and lifecycle, model oversight processes, data quality controls, responsible AI practices and compliance with internal policies and regulatory expectations.
• Monitors emerging AI technologies, regulatory developments and industry practices to help identify evolving risks and opportunities.
• Provides analysis, interpretation and advice to management.
• Participates on concurrent projects to expedite issue resolution and delivery of quality audit services advising management of project status.
• Serves as a subject matter resource to audit teams regarding AI technologies, risks, governance and control considerations.
• Structures and writes major sections of audit reports and other outputs intended for customers.
• Participates in discussions and presents audit results with management responsible for the audited area.
• Contributes to the development and execution of AI and business audit procedures based on risk to the business and in collaboration with internal and external partners and ensures completion of planned actions.
• Participates in the effective execution of all phases of audits.
• Contributes to the creation of audit scope through an assessment of risks, evaluating the design of existing controls, developing and executing test programs to assess adherence with established controls and documenting test results.
• Coordinates and actively participates in Internal Audit's direct assistance responsibilities in support of the external auditor's SOX testing.
• Support in the management of various IA department strategic initiatives to further enhance the current IA practices.
• May perform additional duties as assigned.
• Reporting Relationship Typically AVP or above.

Skills, Knowledge & Abilities

• Strong knowledge of corporate auditing practices, procedures and principles.
• Knowledge of insurance industry preferred.
• Working knowledge of financial reporting, operational, technology and regulatory risk concepts.
• Provide coaching for more junior audit staff.
• Ability to achieve results by taking a proactive long-term view of business goals and objectives.
• Excellent analytical and problem solving skills, with the ability to effectively plan and direct multiple projects and project work teams.
• Working knowledge of Artificial Intelligence concepts, technologies, governance frameworks and associated risks, including the ability to assess AI-enabled processes and controls.
• Excellent interpersonal, presentation, verbal and written communication skills, with the ability to effectively interact with internal and external business partners.
• Ability to exercise professional judgement and assume responsibility for decisions which have an impact on people and quality of service.

Education & Experience

• Bachelor's Degree in information systems, cybersecurity, business or equivalent.
• Advanced degree or professional designation (CPA, CIA, CISA, etc.) preferred.
• Typically a minimum of five to eight years of relevant work experience (e.g., risk and governance, cybersecurity and/or information technology auditing experience).

Compensation

In certain jurisdictions, CNA is legally required to include a reasonable estimate of the compensation for this role. In District of Columbia, California, Colorado, Connecticut, Illinois, Maryland, Massachusetts, New York and Washington, the national base pay range for this job level is $72,000 to $141,000 annually. Salary determinations are based on various factors, including but not limited to, relevant work experience, skills, certifications and location.

Benefits

CNA offers a comprehensive and competitive benefits package to help our employees – and their family members – achieve their physical, financial, emotional and social wellbeing goals.

Additional Information

CNA is committed to providing reasonable accommodations to qualified individuals with disabilities in the recruitment process. To request an accommodation, please contact [e-mail].

At CNA, we are focused on success, individually and collectively. We pride ourselves on promoting a culture that challenges and engages people. We strive to connect people, departments and business areas, to function as a team, and to serve our customers and communities with professionalism and respect. Our dedication to employee engagement, continuous learning and the open exchange of ideas is the cornerstone of our business. These ideals, combined with our focus on the customer, enable us to explore new market opportunities and build on our success. Our values, culture and financial strength are what differentiates us from other employers and make CNA the place you want to work. At CNA, we are committed to advancing a culture of inclusion - one that attracts talent from all walks of life, fosters respect and collaboration, and enables all of our colleagues to do their best work. At CNA, we have a long standing commitment to the diverse communities in which we live and work. We actively make a difference for the greater good through partnerships, sustainability, initiatives, and working together for a better tomorrow. Corporate Social Responsibility is not one person, or one department, it's the entire enterprise coming together to make the world a better place.