Internal Controls Associate- MSI

baldwin; United States; On-site; USD 70,000 - 100,000; Full time

Job summary

MSI in the United States seeks an Internal Controls Associate to strengthen the organization's control environment, support audits, and coordinate with business and technology teams to assess risks. You will help design control frameworks, document policies, perform risk assessments, and lead testing efforts to ensure compliance with SOX, privacy regs, and industry standards.

This role requires collaboration with internal and external auditors, delivering clear findings and remediation plans to

Responsibilities

• Assist in design and maintenance of internal control framework.
• Document policies, procedures, RCMS, and narratives per COSO.
• Ensure controls mitigate identified business and regulatory risks.
• Perform periodic risk assessments across business and tech.
• Identify control gaps and emerging risks.
• Develop risk mitigation strategies and control enhancements.
• Support enterprise risk management and compliance.
• Develop and execute control testing procedures.
• Analyze results, identify deficiencies, track remediation.
• Maintain evidence of control execution and effectiveness.
• Monitor controls via continuous auditing and data analytics.
• Support SOX, privacy, and cybersecurity compliance.
• Comply with state insurance regulations.
• Adhere to privacy regs (CCPA, CPRA, GDPR).
• Address cybersecurity and information security requirements.
• Assist with SOC reporting and PCI DSS where applicable.
• Prepare regulatory examinations, audits, and assessments.
• Liaise with Internal Audit and external auditors.
• Coordinate audit requests and walkthroughs.
• Respond to inquiries and track remediation.
• Track findings and ensure timely corrective actions.
• Evaluate processes to identify risks and weak controls.
• Conduct special reviews and investigations.
• Participate in fraud prevention and business continuity reviews.
• Prepare audit-ready reports and recommendations.
• Communicate findings to leadership and escalate issues.

Job description

Why MSI? We thrive on solving challenges.

As a leading MGA, MSI combines deep underwriting expertise with insurer and reinsurer risk capacity to create specialized insurance solutions that empower distribution partners to meet customers' unique needs.

We have a passion for crafting solutions for the important risks facing individuals and businesses. We offer an expanding suite of products - from fully-digital embedded renters coverage to high-value homeowners insurance to sophisticated commercial coverages, such as cyber liability and habitational property - delivered through agents, brokers, wholesalers and other brand partners.

Our partners and customers count on us to deliver exceptional service through a dedicated team that makes rapid resolutions a priority. We simplify the insurance experience through our advanced technology platform that supports every phase of the policy lifecycle.

Bring on your challenges and let us show you how we build insurance better.

The Internal Controls Associat e is responsible for supporting and enhancing the organization's overall internal control environment across business operations, technology platforms, financial reporting, information security, regulatory compliance, and risk management activities. This role evaluates the design and effectiveness of controls, documents key processes and procedures, maintains evidence to demonstrate control performance, and collaborates with business and technology teams to identify, assess, and mitigate risks.

The Internal Controls Associate assists with internal audits, operational reviews, control testing and/or execution, remediation efforts, and compliance initiatives related to applicable laws, regulations, industry standards, and contractual obligations. Responsibilities extend beyond any single regulatory framework and may include supporting compliance with Sarbanes-Oxley (SOX), privacy regulations, cybersecurity requirements, insurance industry regulations, and other governance, risk, and compliance obligations as applicable to the organization.

This position plays a key role in promoting a strong control culture by continuously assessing organizational risks, identifying control gaps, recommending improvements, and helping ensure that the company's overall control environment remains effective, sustainable, and aligned with business objectives, regulatory requirements, and industry best practices.

Key Responsibilities

Internal Control Program Administration

• Assist in the design, implementation, maintenance, and continuous improvement of the organization's internal control framework.
• Document and maintain policies, procedures, process flows, risk and control matrices (RCMs), and control narratives in alignment with COSO principles.
• Ensure controls are appropriately designed to mitigate identified business, operational, financial, compliance, and technology risks.

Risk Assessment and Control Design

• Perform periodic risk assessments across business and technology functions.
• Identify control gaps, emerging risks, and process inefficiencies.
• Develop and recommend risk mitigation strategies and control enhancements.
• Support enterprise risk management and compliance initiatives.

Control Testing and Monitoring

• Develop and execute control testing procedures to evaluate control design and operating effectiveness.
• Analyze testing results, identify deficiencies, and track remediation activities.
• Maintain evidence supporting control execution and effectiveness.
• Monitor key controls through continuous auditing and data analytics techniques where applicable.

Regulatory and Compliance Support

• Support compliance with applicable regulations, standards, and contractual obligations, including: Sarbanes-Oxley (SOX)
• State insurance regulations
• Privacy regulations (CCPA, CPRA, GDPR, etc.)
• Cybersecurity and information security requirements
• SOC reporting, PCI DSS, and other industry-specific frameworks as applicable

Assist in preparing regulatory examinations, audits, and compliance assessments.

Audit Coordination and Management

• Serve as a primary liaison for Internal Audit and external auditors.
• Coordinate audit requests and facilitate walkthroughs, interviews, and evidence collection.
• Respond to audit inquiries and support remediation efforts.
• Track audit findings and ensure corrective actions are implemented timely.

Operational and Business Process Reviews

• Evaluate operational processes to identify risks, inefficiencies, and control weaknesses.
• Conduct special reviews and investigations relating to control failures, incidents, or identified concerns.
• Participate in assessments related to fraud prevention, business continuity, vendor management, and cybersecurity.

Reporting and Stakeholder Engagement

• Prepare clear, concise, and audit-ready reports summarizing risks, control effectiveness, and recommendations.
• Communicate findings and corrective action plans to business and technology leadership.
• Escalate significant issues and emerging