Internal IT Audit Consultant (hybrid)

Grange Insurance Company; Columbus (OH); Hybrid; USD 107,000 - 184,000; Full time

Job summary

Grange Insurance Company in Columbus, OH is seeking an Internal Audit Consultant to provide independent assurance and advisory services over the IT environment. You will evaluate risk, control and governance, and report findings to the CAE and Audit Committee.

You will develop IT audit programs, assess IT risk and compliance, and lead data analytics initiatives. The role requires strong communication, project management, and mentoring of team members, with hybrid/remote options.

Qualifications

• Five+ years of IT audit or related control experience.
• Experience in insurance industry governance is desired.
• Familiarity with IT risk assessment and audit frameworks including COSO, MAR and SOX.

Responsibilities

• Assist in updating the enterprise audit universe and annual IT priority development by analyzing risk and interviewing leadership.
• Lead development of IT audit programs, including scope, objectives, criteria, and procedures.
• Assess IT risk and controls for regulatory compliance, financial reporting and operations.
• Present findings and recommendations to senior management and Audit Committee.
• Prepare clear, balanced reports with actionable recommendations to improve efficiency and controls.
• Monitor management actions addressing audit observations and follow-ups.
• Stay informed on IT activity changes and organizational policy updates.
• Work with business units to ensure remediation plans are documented and implemented.
• Perform validation and retesting of remediation actions related to IT controls.
• Coach and mentor audit staff and provide training on IT audit policies and programs.
• Perform MAR-related planning, execution and reporting for validation of control assessments.

Skills

Project management

Decision-making

Analytical thinking

Documentation

Interviewing

Organization & planning

Communication skills

Coaching & consulting

Education

Bachelor's degree in business or related field

CPA/CISA/CIA certification

Tools

COSO

MAR

SOX

NIST

ITIL

COBIT

CIS Controls

SOC reports

Job description

Summary:

This position is responsible for providing an independent, objective assurance and consulting activity desired to add value and improve the organization’s IT environment. Evaluating and improving the effectiveness of risk management, control and governance processes. Position reports to Chief Audit Executive (CAE reports to Audit Committee Chair).

What You’ll Be Doing:

• Assists in updating the enterprise audit universe and annual internal audit priority development by analyzing risk throughout the enterprise, conducting interviews with key business and IT leadership, and collaborating with enterprise risk management.
• Leads the development of IT audit programs, including scope, audit objectives, audit criteria, and procedures.
• Assesses IT risk and controls on legal and regulatory compliance, financial reporting and operations for the organization.
• Presents positions, findings and recommendations in verbal and written format to a variety of stakeholders, including senior management and the Audit Committee of the Board.
• Prepare clear, succinct, balanced and persuasive reports including constructive and practical recommendations designed to improve the economy, efficiency and effectiveness of operations.
• Monitors and reports on management actions undertaken to address audit concerns identified.
• Keep well informed of significant changes to IT activities, organizational structure, systems and policies.
• Works with business unit management to ensure management actions plans are documented and implemented for identified internal audit observations or internal control deficiencies.
• Perform internal IT audit validation of management action plans and/or retesting of observations following management’s remediation.
• Coaches and mentors audit team members for performance and development, including providing training to new employees and other staff on IT audit policies, procedures, and programs.
• Performs planning, execution and reporting over Model Audit Rule (MAR) requirements related to validating control assessments and management testing.
• Develops and performs data analytics to include extraction, analytical testing and security reviews that utilize Artificial Intelligence and other analytical tools.
• Monitors IT best practices and recent developments in audit, risk management, and corporate governance.
• Pursues professional development through continuing education and training and participation within professional associations.

What You’ll Bring To The Company:

Education/Knowledge:

• Undergraduate degree in business related area, preferably in accounting, finance, management information systems or related field. Non-business degree is acceptable with MBA. Professional certification of CPA, CISA, and/or CIA, strongly encouraged. Proven knowledge in applying IT risk assessment and audit skills including financial, operational, and compliance control objectives, as well as knowledge in information systems. W orking knowledge of audit and control frameworks including: COSO, MAR and/or SOX methodologies, and Internal Audit Methodologies (e.g., Institute of Internal Audit’s Standards for Professional Practice of Internal Auditing). Familiarity with IT security and governance frameworks (e.g., NIST, ITIL, COBIT, CIS Controls, SOC reports, etc.).

Experience:

• At least five years of professional experience in IT audit or related control environment. Prior audit, compliance, and/or governance experience within the insurance industry is desired.

Skills:

Must have:

• Project management skills to lead a project team and drive a project to successful completion.
• Decision-making skills to evaluate alternatives and recommend alternate courses of action.
• Analytical skills to research and evaluate highly complex processes and systems.
• Documentation and report writing skills, as well as strong communication skills.
• Interviewing skills to support root cause analysis.
• Organization and planning skills to set priorities, and to plan, prioritize and execute workload.
• Excellent oral and written communication skills to prepare and present audit plans, procedures and findings to senior management as well as have the ability to interact effectively with team members.
• Good coaching and consulting skills.

The national salary range for Internal Audit Consultant : $107,157-$184,426

The expected starting salary range at Grange Insurance for Internal Audit Consultant: $126,474-$165,108

About Us:

Grange Insurance Company, with $3.4 billion in assets and more than $1.61 billion in annual revenue, is an insurance provider founded in 1935 and based in Columbus, Ohio. Through its network of independent agents, Grange offers auto, home and business insurance protection. Grange Insurance Company and its affiliates serve policyholders in Georgia, Illinois, Indiana, Iowa, Kentucky, Michigan, Minnesota, Ohio, Pennsylvania, South Carolina, Tennessee, Virginia and Wisconsin and holds an A.M. Best rating of "A" (Excellent).

Grange understands that life requires flexibility. We promote geographical diversity, allowing hybrid and remote options and flexibility in work hours (role dependent). In addition to competitive traditional benefits, Grange has also created unique benefits based on associate feedback, including a cultural appreciation holiday, family formation benefits, compassionate care leave and expanded categories of bereavement leave.

Who We Are:

Grange values all the things that make us unique as human beings. We are committed to creating and supporting a workforce that reflects the richness of our differences by welcoming all backgrounds, viewpoints and lived experiences. To foster an inclusive environment, we are intentional in bringing those differences together for the good of our enterprise, associates, agents, customers and community.

Our Associate Resource Groups help cultivate an inclusive workplace while providing professional and personal growth opportunities. Open to all associates, these voluntary groups celebrate shared experiences and perspectives across ethnicity and race, nationality, generation, gender identity and sexual orientation. Our groups include the Multicultural Professional Network, Pride Partnership & Allies, Women's Group and Young Professionals.

Established in 2016, our Inclusive Culture Council advances professional development, networking, business value and community outreach.Together, we create opportunities to learn from one another, encourage innovation and build a culture where everyone can contribute and grow.

Our commitment to inclusion is grounded in our core values: Be One Team, Deliver Excellence, Communicate Openly, Do the Right Thing and Solve Creatively for Tomorrow.

Equal Opportunity Employer

We are committed to maintaining a discrimination-free workplace in all aspects, terms and conditions of employment and welcome the unique contributions that you bring from education, opinions, culture, beliefs, race, color, religion, age, sex, national origin, handicap, disability, sexual orientation, gender identity or expression, ancestry, pregnancy, veteran status, and citizenship.

Equal Opportunity Employer

This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.