Internal IT Auditor - SOX
Berkshire Hathaway Homestate Companies - Property & Casualty
A complete application in a minute
Tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
National Indemnity Company in Omaha, NE is seeking an IT Internal Auditor - SOX to evaluate IT controls supporting reliable financial reporting and regulatory compliance. The role partners with Internal Audit, ERM, IT, and business stakeholders to assess IT risks and strengthen the control environment.
The position offers a hybrid work arrangement after in-office training and is not eligible for employer visa sponsorship.
Qualifications
- Bachelor's degree in a related field or equivalent work experience.
- Two or more years of work experience.
- Knowledge of Sarbanes-Oxley (SOX) requirements and objectives.
- Knowledge of Information Technology General Controls (ITGCs).
- Proficiency with Excel and Word.
Responsibilities
- Support ongoing IT audit and SOX compliance initiatives across multiple business units and legal entities within the NICO Group.
- Perform risk-based testing of IT General Controls (ITGCs), automated controls, and key reports supporting financial reporting objectives.
- Execute SOX testing activities, including walkthroughs, control evaluations, evidence reviews, and documentation of testing results.
- Partner with management and control owners to maintain SOX compliance and support audit activities.
- Monitor and validate remediation efforts resulting from internal and external audits, SOX testing, risk assessments, and management self-assessments.
- Prepare clear, concise, and professional audit documentation, reports, and recommendations.
- Assist with IT risk assessments, evaluation of key risk indicators, and reporting on IT control effectiveness.
- Identify opportunities to improve IT processes, internal controls, and governance practices; recommend practical solutions.
- Support development of risk-based audit plans by identifying, scoping, and prioritizing IT systems, applications, processes, and controls for review.
Job description
NICO National Indemnity Company
supports the evaluation and testing of Information Technology (IT) controls that help ensure reliable financial reporting, regulatory compliance, and effective IT governance across the National Indemnity (NICO) Group. This role partners with Internal Audit, Enterprise Risk Management, Information Technology, and business stakeholders to assess IT risks, perform Sarbanes-Oxley (SOX) compliance testing, monitor remediation activities, and recommend control and process improvements that strengthen the organization's overall control environment.
This position will be with National Indemnity Company in Omaha, NE and is eligible for Hybrid work after a period of in-office training. This position is NOT eligible for employer visa sponsorship.
- Support ongoing IT audit and SOX compliance initiatives across multiple business units and legal entities within the NICO Group
- Perform risk-based testing of IT General Controls (ITGCs), automated controls, and key reports that support financial reporting objectives
- Execute SOX testing activities, including walkthroughs, control evaluations, evidence reviews, and documentation of testing results
- Partner with management and control owners to maintain compliance with SOX requirements and support audit activities
- Monitor and validate remediation efforts resulting from internal audits, external audits, SOX testing, risk assessments, and management self-assessments
- Prepare clear, concise, and professional audit documentation, reports, and recommendations
- Assist with IT risk assessments, evaluation of key risk indicators, and reporting on the effectiveness of the IT control environment
- Identify opportunities to improve IT processes, internal controls, and governance practices, and recommend practical solutions
- Support the development of risk-based audit plans by identifying, scoping, and prioritizing IT systems, applications, processes, and controls for review
- Stay current on emerging technologies, cybersecurity risks, regulatory requirements, audit practices, and industry frameworks relevant to IT governance and compliance
- Bachelor's degree in a related field or equivalent work experience
- Two or more years of work experience
- Knowledge of Sarbanes-Oxley (SOX) requirements and objectives
- Knowledge of Information Technology General Controls (ITGCs)
- Personal computer proficiency and experience with basic applications such as Excel and Word
- National Institute of Standards and Technology (NIST) frameworks
- Committee of Sponsoring Organizations of the Treadway Commission (COSO) Internal Control Framework
- New York Department of Financial Services (NYDFS) 23 NYCRR Part 500 Regulation
- Experience supporting IT audits, SOX compliance, risk management, or internal controls initiatives
- Professional certifications such as CISA, CIA, or CPA
- Someone who communicates clearly and professionally and can effectively explain technical, risk, and control concepts to both technical and non-technical audiences
- A detail-oriented professional who takes pride in producing accurate, high-quality audit documentation and work products
- An organized self-starter who can manage multiple audit engagements, competing priorities, and deadlines simultaneously
- A collaborative teammate who builds strong relationships with management, business partners, auditors, regulators, vendors, and other stakeholders
- A curious and analytical thinker who enjoys identifying risks, evaluating controls, and solving complex business and technology challenges
- A professional who can assess control deficiencies, determine root causes, evaluate impacts, and recommend practical remediation strategies
- An effective interviewer and facilitator who can gather information, evaluate processes, and assess control effectiveness
- A trusted team member who handles sensitive business, financial, and cybersecurity information with discretion and confidentiality
- A continuous learner who stays informed on emerging technologies, cybersecurity threats, regulatory developments, and evolving industry best practices
- A positive contributor who promotes a strong team culture through collaboration, respect, accountability, and a willingness to support others' success
We offer Employee Resource Groups for volunteering, connecting with others, social gatherings, and professional development. We also regularly seek employees input through companywide surveys.
Our Wellness program is integrated into the Company culture with an online wellness portal that offers a year-round, one-stop-shop to manage and track all areas of health, our Omaha office boasts a complimentary state-of-the-art onsite fitness center, and a robust wellness program.
- We offer retirement and savings plan with immediate enrollment with 100% employer match up to 5%
- Medical, Dental and Vision for regular, full-time employees and eligible dependents
- a dedicated Learning & Development program for employees to grow personally and professionally
- 100% upfront Educational Reimbursement program
- subsidized downtown parking
- competitive time off policies including parental leave
- an Employee Assistance program
- and much more!
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
