Internal IT Auditor - SOX

Berkshire Hathaway Homestate Companies; Omaha (NE); Hybrid; USD 75,000 - 110,000; Full time

Benefits offered by this job

Wellness program

Onsite fitness center

Educational reimbursement

Employer 401(k) matching up to 5%

Job summary

NICO National Indemnity Company in Omaha, NE is seeking an IT Internal Auditor - SOX to assess IT controls that support reliable financial reporting and regulatory compliance. The role collaborates with Internal Audit, ERM, IT, and business units to test ITGCs and SOX controls.

After a period of in-office training, the position offers hybrid work. The candidate will prepare audit documentation, monitor remediation, and help strengthen the IT control environment.

Qualifications

• Bachelor's degree in a related field or equivalent work experience
• Two or more years of work experience
• Knowledge of Sarbanes-Oxley (SOX) requirements and objectives
• Knowledge of IT General Controls (ITGCs)
• Excel and Word proficiency
• Preferred certifications: CISA, CIA, or CPA
• Awareness of NIST, COSO, NYDFS Part 500 is a plus

Responsibilities

• Support ongoing IT audit and SOX compliance initiatives across multiple units
• Perform risk-based testing of ITGCs, automated controls, and key reports
• Execute SOX testing activities including walkthroughs and documentation
• Collaborate with management to maintain SOX compliance and remediation
• Monitor remediation efforts from audits and risk assessments
• Prepare clear audit documentation, reports, and recommendations
• Assist with IT risk assessments and reporting on control effectiveness

Skills

SOX knowledge

IT audit

Communications

Analytical thinking

Education

Bachelor's degree or equivalent

Tools

Excel

Word

Job description

Company:NICO National Indemnity CompanyWant to work for a company with unparalleled financial strength and stability that offers “large company” benefits with an exciting, friendly, and “small company” atmosphere? Our companies, as members of the Berkshire Hathaway group of Insurance Companies, provides opportunities for professionals interested in just that.The IT Internal Auditor - SOX supports the evaluation and testing of Information Technology (IT) controls that help ensure reliable financial reporting, regulatory compliance, and effective IT governance across the National Indemnity (NICO) Group. This role partners with Internal Audit, Enterprise Risk Management, Information Technology, and business stakeholders to assess IT risks, perform Sarbanes-Oxley (SOX) compliance testing, monitor remediation activities, and recommend control and process improvements that strengthen the organization's overall control environment.This position will be with National Indemnity Company in Omaha, NE and is eligible for Hybrid work after a period of in-office training. This position is NOT eligible for employer visa sponsorship.What Will You Do?Support ongoing IT audit and SOX compliance initiatives across multiple business units and legal entities within the NICO GroupPerform risk-based testing of IT General Controls (ITGCs), automated controls, and key reports that support financial reporting objectivesExecute SOX testing activities, including walkthroughs, control evaluations, evidence reviews, and documentation of testing resultsPartner with management and control owners to maintain compliance with SOX requirements and support audit activitiesMonitor and validate remediation efforts resulting from internal audits, external audits, SOX testing, risk assessments, and management self-assessmentsPrepare clear, concise, and professional audit documentation, reports, and recommendationsAssist with IT risk assessments, evaluation of key risk indicators, and reporting on the effectiveness of the IT control environmentIdentify opportunities to improve IT processes, internal controls, and governance practices, and recommend practical solutionsSupport the development of risk-based audit plans by identifying, scoping, and prioritizing IT systems, applications, processes, and controls for reviewStay current on emerging technologies, cybersecurity risks, regulatory requirements, audit practices, and industry frameworks relevant to IT governance and complianceWhat Are We Looking For?Bachelor's degree in a related field or equivalent work experienceTwo or more years of work experienceKnowledge of Sarbanes-Oxley (SOX) requirements and objectivesKnowledge of Information Technology General Controls (ITGCs)Personal computer proficiency and experience with basic applications such as Excel and WordPreferred Knowledge:National Institute of Standards and Technology (NIST) frameworksCommittee of Sponsoring Organizations of the Treadway Commission (COSO) Internal Control FrameworkNew York Department of Financial Services (NYDFS) 23 NYCRR Part 500 RegulationExperience supporting IT audits, SOX compliance, risk management, or internal controls initiativesProfessional certifications such as CISA, CIA, or CPAWho Would Excel in This Role?Someone who communicates clearly and professionally and can effectively explain technical, risk, and control concepts to both technical and non-technical audiencesA detail-oriented professional who takes pride in producing accurate, high-quality audit documentation and work productsAn organized self-starter who can manage multiple audit engagements, competing priorities, and deadlines simultaneouslyA collaborative teammate who builds strong relationships with management, business partners, auditors, regulators, vendors, and other stakeholdersA curious and analytical thinker who enjoys identifying risks, evaluating controls, and solving complex business and technology challengesA professional who can assess control deficiencies, determine root causes, evaluate impacts, and recommend practical remediation strategiesAn effective interviewer and facilitator who can gather information, evaluate processes, and assess control effectivenessA trusted team member who handles sensitive business, financial, and cybersecurity information with discretion and confidentialityA continuous learner who stays informed on emerging technologies, cybersecurity threats, regulatory developments, and evolving industry best practicesA positive contributor who promotes a strong team culture through collaboration, respect, accountability, and a willingness to support others' successWe want you to be involved! We offer Employee Resource Groups for volunteering, connecting with others, social gatherings, and professional development. We also regularly seek employees input through companywide surveys.We care about your health and wellbeing! Our Wellness program is integrated into the Company culture with an online wellness portal that offers a year-round, one-stop-shop to manage and track all areas of health, our Omaha office boasts a complimentary state-of-the-art onsite fitness center, and a robust wellness program.Benefits, Perks and more! We offer retirement and savings plan with immediate enrollment with 100% employer match up to 5%, Medical, Dental and Vision for regular, full-time employees and eligible dependents, a dedicated Learning & Development program for employees to grow personally and professionally, 100% upfront Educational Reimbursement program, subsidized downtown parking, competitive time off policies including parental leave, an Employee Assistance program and much more!