IT Audit Director

CNA Financial; Chicago (IL); On-site; USD 140,000 - 210,000; Full time

Job summary

CNA Financial in Chicago is seeking an IT Audit Director to join the Global Internal Audit Division. You will lead audit projects across functions, mentor junior staff, and partner with business leaders to provide value through risk-based assurance.

The role requires strong knowledge of internal audit principles, cybersecurity regulations, and the ability to direct testing, evaluate controls, and present findings to management and the Audit Committee.

Qualifications

• Strong knowledge of internal audit principles and practices.
• Knowledge of cybersecurity regulations and industry frameworks.
• Experience leading audit projects and teams.
• Ability to mentor junior staff and communicate findings.

Responsibilities

• Lead audit projects across functions and locations.
• Develop annual audit plans and manage budgets.
• Execute audit tests and assess controls.
• Present results to management and Audit Committee.
• Support remediation and monitor issues.

Skills

Internal audit

Cybersecurity regs

Project leadership

Communication skills

Job description

You have a clear vision of where your career can go. And we have the leadership to help you get there. At CNA, we strive to create a culture in which people know they matter and are part of something important, ensuring the abilities of all employees are used to their fullest potential.

About CNA

At CNA, we focus on what we do best - providing insurance solutions that allow our customers to better manage their risks and grow profitably. We use our expertise to continually evolve our products and services to anticipate and address our customers' needs. Our broad portfolio enables us to respond to a wide range of business risks while focusing on the specialized needs of our insureds in construction, manufacturing, technology, healthcare, professional services, financial institutions and small business.

About Internal Audit

The Global Internal Audit Division supports CNA's corporate strategy of maintaining top quartile underwriting company by enhancing and protecting organizational value through risk-based and objective assurance and advisory engagements. We are analysts, problem-solvers, reporters, explorers as well as trusted advisors and catalysts. We strive to maintain an agile and responsive audit program that focuses on our company's highest risks and builds trust with all of our stakeholders. We invest in our people, are strengthened by diversity and are committed to inclusion. As the third line of defense for CNA, the scope of our work spans across all types of risk: financial, compliance, reputational and operational.

Position Description

We are searching for an IT Audit Director to join our team who thrives in a collaborative environment and shares our commitment to providing valuable risk management, governance and control insights to our business partners. The role will interact with leaders throughout the Company and determine internal audit scope and testing plans, reviewing audit workpapers and preparing communications reflecting the results of the work performed for management and the Audit Committee. This role will also mentor, coach and direct the work of junior team members.

Job Description

Essential Duties & Responsibilities

• Leads audit projects involving functions, product areas or locations, which may encompass complex financial, compliance and operational processes. Acts as a resource for less experienced staff.
• Directs the work activities and has day-to-day responsibility for the performance and development of junior staff in accordance with corporate strategic direction.
• Plans, schedules, and assigns resources to audit projects and manages activities by audit teams in timely and effective completion of reviews on multiple, concurrent projects.
• Takes a lead role in the preparation and maintenance of annual audit plans for assigned areas, including determination of budgets for projects.
• Directs the effective execution of all phases of audits, including creation of audit scope through an assessment of risks, evaluating the design of existing controls, developing and executing test programs to assess adherence with established controls and documenting test results.
• Reviews the thoroughness of work papers and updates team and management on progress.
• Structures and writes major sections of audit reports and other outputs intended for customers. Participates in discussions and presents audit results to management responsible for the audited area.
• Monitors business unit efforts to resolve identified control issues and assesses the effectiveness of remediation efforts through follow-up reviews. Candidly discusses open control issues with management and escalates unresolved exposures to senior management as needed.
• Remains aware of and proactive regarding developments, trends and challenges within assigned business units / functions and within the insurance industry.
• Models the appropriate use of 'partner/challenger' relationship with audited entities - know when to pivot and when to persist. Takes an active role in delivering valuable services to assigned areas, enhancing operations, identifying gaps and sharing best practices.
• Review control testing performed in conjunction with our external auditors in support of the annual financial statement audit and other assurance engagements.
• Support in the management of various IA department strategic initiatives to further enhance the current IA practices.
• May perform additional duties as assigned. Reporting Relationship AVP or above.

Reporting Relationship

AVP or above

Skills, Knowledge & Abilities

• Strong knowledge of internal audit principles, practices and procedures or specialized technical understanding of key technology activities (e.g., Change Management, Security Operations, Network Operations).
• Strong knowledge of relevant technology and cybersecurity regulations (e.g., NYDFS, OSFI, HIPAA) and industry standard frameworks (e.g., SSAE 18/SOC, SOX, COSO, COBIT, ITIL, ISO27001, NIST).
• Strong Knowledge of multiple technology