AI Governance & Risk Auditor

CNA; Chicago (IL); Hybrid; USD 72,000 - 141,000; Full time

Job summary

CNA is seeking an Internal Audit professional to evaluate the use of AI across business processes and strengthen IA’s assurance capabilities. The role will assess AI-related risks and controls, serving as a resource to audit teams while delivering high-quality audit services through all phases of the audit lifecycle.

Typically reporting to AVP or above, the position requires strong auditing knowledge, AI concepts, and the ability to guide junior staff.

Qualifications

• Bachelor's degree in information systems, cybersecurity, business or equivalent.
• Typically 5–8 years of risk, governance, cybersecurity or IT auditing experience.

Responsibilities

• Evaluates AI governance frameworks and lifecycle.
• Monitors AI technologies, regulatory developments and industry practices.
• Provides analysis, interpretation and advice to management.
• Participates on concurrent projects to expedite issue resolution and delivery of quality audit services.
• Serves as a subject matter resource to audit teams regarding AI technologies, risks, governance and control considerations.
• Structures and writes major sections of audit reports and other outputs intended for customers.
• Contributes to the development and execution of AI and business audit procedures based on risk to the business.
• Participates in all phases of audits and supports external SOX testing.

Skills

Auditing practices

AI governance

AI risk assessment

Communication skills

Mentoring

Analytical skills

Education

Bachelor's degree in information systems, cybersecurity, business or related

CPA / CIA / CISA or advanced degree preferred

Job description

CNA is seeking an Internal Audit professional to evaluate the use of AI across business processes and strengthen IA’s assurance capabilities. The role will assess AI-related risks and controls, serving as a resource to audit teams while delivering high-quality audit services through all phases of the audit lifecycle.

Typically reporting to AVP or above, the position requires strong auditing knowledge, AI concepts, and the ability to guide junior staff.