Internal IT Audit Consultant (hybrid)

Grange Insurance; Columbus (OH); Hybride; USD 126 000 - 165 000; Plein temps

Avantages offerts par ce poste

Hybrid/remote options

Résumé du poste

Grange Insurance is seeking an experienced Internal IT Audit Consultant to independently assess and improve the organization’s IT risk, controls and governance. You will work with senior leaders to develop IT audit programs, validate management actions, and craft clear, impactful recommendations.

The role requires 5+ years IT audit experience, professional certifications (CPA/CISA/CIA encouraged), and strong communication skills to relay findings to the Audit Committee and Executive leadership.

Qualifications

• Bachelor’s degree and professional IT audit knowledge; CPA/CISA/CIA encouraged.
• 5+ years IT audit or related control experience; insurance industry desired.
• Familiarity with COSO, MAR, SOX and related audit methodologies.

Responsabilités

• Update enterprise audit universe and develop annual internal audit priorities.
• Lead IT audit program scope, objectives, criteria and procedures.
• Assess IT risk, controls and regulatory compliance across finance and operations.
• Present findings to senior management and Audit Committee with actionable recommendations.
• Prepare clear reports and track management action plans for remediation.
• Develop MAR validations and perform data analytics for security reviews.
• Coach audit staff and support ongoing professional development.

Connaissances

IT risk assessment

Audit controls

Regulatory compliance

Reporting

Communication

Project management

Formation

Undergraduate degree in business area

MBA acceptable

CPA

CISA

CIA

Outils

COSO framework

MAR

SOX

NIST

ITIL

COBIT

Description du poste

At Grange, we value growth and are committed to supporting continuous learning and skill development as you advance in your career with us.

Summary

This position is responsible for providing an independent, objective assurance and consulting activity desired to add value and improve the organization’s IT environment. Evaluating and improving the effectiveness of risk management, control and governance processes. Position reports to Chief Audit Executive (CAE reports to Audit Committee Chair).

What You’ll Be Doing

• Assists in updating the enterprise audit universe and annual internal audit priority development by analyzing risk throughout the enterprise, conducting interviews with key business and IT leadership, and collaborating with enterprise risk management.
• Leads the development of IT audit programs, including scope, audit objectives, audit criteria, and procedures.
• Assesses IT risk and controls on legal and regulatory compliance, financial reporting and operations for the organization.
• Presents positions, findings and recommendations in verbal and written format to a variety of stakeholders, including senior management and the Audit Committee of the Board.
• Prepare clear, succinct, balanced and persuasive reports including constructive and practical recommendations designed to improve the economy, efficiency and effectiveness of operations.
• Monitors and reports on management actions undertaken to address audit concerns identified.
• Keep well informed of significant changes to IT activities, organizational structure, systems and policies.
• Works with business unit management to ensure management actions plans are documented and implemented for identified internal audit observations or internal control deficiencies.
• Perform internal IT audit validation of management action plans and/or retesting of observations following management’s remediation.
• Coaches and mentors audit team members for performance and development, including providing training to new employees and other staff on IT audit policies, procedures, and programs.
• Performs planning, execution and reporting over Model Audit Rule (MAR) requirements related to validating control assessments and management testing.
• Develops and performs data analytics to include extraction, analytical testing and security reviews that utilize Artificial Intelligence and other analytical tools.
• Monitors IT best practices and recent developments in audit, risk management, and corporate governance.
• Pursues professional development through continuing education and training and participation within professional associations.

What You’ll Bring To The Company

Education/Knowledge

• Undergraduate degree in business related area, preferably in accounting, finance, management information systems or related field. Non-business degree is acceptable with MBA. Professional certification of CPA, CISA, and/or CIA, strongly encouraged. Proven knowledge in applying IT risk assessment and audit skills including financial, operational, and compliance control objectives, as well as knowledge in information systems. Working knowledge of audit and control frameworks including: COSO, MAR and/or SOX methodologies, and Internal Audit Methodologies (e.g., Institute of Internal Audit’s Standards for Professional Practice of Internal Auditing). Familiarity with IT security and governance frameworks (e.g., NIST, ITIL, COBIT, CIS Controls, SOC reports, etc.).

Experience

• At least five years of professional experience in IT audit or related control environment. Prior audit, compliance, and/or governance experience within the insurance industry is desired.

Skills

• Project management skills to lead a project team and drive a project to successful completion.
• Decision-making skills to evaluate alternatives and recommend alternate courses of action.
• Analytical skills to research and evaluate highly complex processes and systems.
• Documentation and report writing skills, as well as strong communication skills.
• Interviewing skills to support root cause analysis.
• Organization and planning skills to set priorities, and to plan, prioritize and execute workload.
• Excellent oral and written communication skills to prepare and present audit plans, procedures and findings to senior management as well as have the ability to interact effectively with team members.
• Good coaching and consulting skills.

The national salary range for Internal Audit Consultant : $107,157-$184,426

The expected starting salary range at Grange Insurance for Internal Audit Consultant: $126,474-$165,108

About Us

Grange Insurance Company, with $3.4 billion in assets and more than $1.61 billion in annual revenue, is an insurance provider founded in 1935 and based in Columbus, Ohio. Through its network of independent agents, Grange offers auto, home and business insurance protection. Grange Insurance Company and its affiliates serve policyholders in Georgia, Illinois, Indiana, Iowa, Kentucky, Michigan, Minnesota, Ohio, Pennsylvania, South Carolina, Tennessee, Virginia and Wisconsin and holds an A.M. Best rating of "A" (Excellent).

Grange understands that life requires flexibility. We promote geographical diversity, allowing hybrid and remote options and flexibility in work hours (role dependent). In addition to competitive traditional benefits, Grange has also created unique benefits based on associate feedback, including a cultural appreciation holiday, family formation benefits, compassionate care leave and expanded categories of bereavement leave.

Who We Are

Grange values all the things that make us unique as human beings. We are committed to creating and supporting a workforce that reflects the richness of our differences by welcoming all backgrounds, viewpoints and lived experiences. To foster an inclusive environment, we are intentional in bringing those differences together for the good of our enterprise, associates, agents, customers and community.

Our Associate Resource Groups help cultivate an inclusive workplace while providing professional and personal growth opportunities. Open to all associates, these voluntary groups celebrate shared experiences and perspectives across ethnicity and race, nationality, generation, gender identity and sexual orientation. Our groups include the Multicultural Professional Network, Pride Partnership & Allies, Women's Group and Young Professionals.

Established in 2016, our Inclusive Culture Council advances professional development, networking, business value and community outreach.Together, we create opportunities to learn from one another, encourage innovation and build a culture where everyone can contribute and grow.

Our commitment to inclusion is grounded in our core values: Be One Team, Deliver Excellence, Communicate Openly, Do the Right Thing and Solve Creatively for Tomorrow.

Equal Opportunity Employer

We are committed to maintaining a discrimination-free workplace in all aspects, terms and conditions of employment and welcome the unique contributions that you bring from education, opinions, culture, beliefs, race, color, religion, age, sex, national origin, handicap, disability, sexual orientation, gender identity or expression, ancestry, pregnancy, veteran status, and citizenship.