IT Audit Director

01460 Continental Casualty Company; Chicago (IL); Hybrid; USD 97,000 - 189,000; Full time

Job summary

CNA is seeking an IT Audit Director in a hybrid environment to lead risk-based internal audit engagements across our technology and business functions. The role focuses on governance, controls, and assurance to protect CNA's assets and reputation.

As a senior leader in Global Internal Audit, you will mentor staff, direct complex audits, and collaborate with business partners and external auditors to deliver insightful findings and remediation plans that support CNA's strategic objectives.

Qualifications

• Bachelor's degree in accounting preferred or equivalent.
• Advanced degree or professional designation (CPA, CIA) preferred.
• Typically, eight to twelve years of relevant experience in the Property & Casualty insurance or related industry.

Responsibilities

• Leads audit projects across functions, product areas or locations.
• Directs work activities and mentors junior staff.
• Plans, schedules, and assigns resources for audits.
• Develops audit plans and budgets for projects.
• Executes audit phases and documents results.
• Presents audit results to management and Audit Committee.
• Monitors remediation efforts and escalation.
• Collaborates with management and external auditors.

Skills

Internal audit principles

Technology and cybersecurity regs

Risk-based auditing

Project management

Data analytics

Communication skills

Leadership coaching

Education

Bachelor's degree in accounting

CPA/CIA preferred

Job description

You have a clear vision of where your career can go. And we have the leadership to help you get there. At CNA, we strive to create a culture in which people know they matter and are part of something important, ensuring the abilities of all employees are used to their fullest potential.

About CNA

At CNA, we focus on what we do best - providing insurance solutions that allow our customers to better manage their risks and grow profitably. We use our expertise to continually evolve our products and services to anticipate and address our customers' needs. Our broad portfolio enables us to respond to a wide range of business risks while focusing on the specialized needs of our insureds in construction, manufacturing, technology, healthcare, professional services, financial institutions and small business.

About Internal Audit

The Global Internal Audit Division supports CNA's corporate strategy of maintaining top quartile underwriting company by enhancing and protecting organizational value through risk-based and objective assurance and advisory engagements. We are analysts, problem-solvers, reporters, explorers as well as trusted advisors and catalysts. We strive to maintain an agile and responsive audit program that focuses on our company's highest risks and builds trust with all of our stakeholders. We invest in our people, are strengthened by diversity and are committed to inclusion. As the third line of defense for CNA, the scope of our work spans across all types of risk: financial, compliance, reputational and operational.

Position Description

We are searching for an IT Audit Director to join our team who thrives in a collaborative environment and shares our commitment to providing valuable risk management, governance and control insights to our business partners. The role will interact with leaders throughout the Company and determine internal audit scope and testing plans, reviewing audit workpapers and preparing communications reflecting the results of the work performed for management and the Audit Committee. This role will also mentor, coach and direct the work of junior team members.

Essential Duties & Responsibilities

• Leads audit projects involving functions, product areas or locations, which may encompass complex financial, compliance and operational processes.
• Acts as a resource for less experienced staff.
• Directs the work activities and has day-to-day responsibility for the performance and development of junior staff in accordance with corporate strategic direction.
• Plans, schedules, and assigns resources to audit projects and manages activities by audit teams in timely and effective completion of reviews on multiple, concurrent projects.
• Takes a lead role in the preparation and maintenance of annual audit plans for assigned areas, including determination of budgets for projects.
• Directs the effective execution of all phases of audits, including creation of audit scope through an assessment of risks, evaluating the design of existing controls, developing and executing test programs to assess adherence with established controls and documenting test results.
• Reviews the thoroughness of work papers and updates team and management on progress.
• Structures and writes major sections of audit reports and other outputs intended for customers.
• Participates in discussions and presents audit results to management responsible for the audited area.
• Monitors business unit efforts to resolve identified control issues and assesses the effectiveness of remediation efforts through follow-up reviews.
• Candidly discusses open control issues with management and escalates unresolved exposures to senior management as needed.
• Remains aware of and proactive regarding developments, trends and challenges within assigned business units / functions and within the insurance industry.
• Models the appropriate use of 'partner/challenger' relationship with audited entities - know when to pivot and when to persist.
• Takes an active role in delivering valuable services to assigned areas, enhancing operations, identifying gaps and sharing best practices.
• Review control testing performed in conjunction with our external auditors in support of the annual financial statement audit and other assurance engagements.
• Support in the management of various IA department strategic initiatives to further enhance the current IA practices.
• May perform additional duties as assigned.

Reporting Relationship

AVP or above.

Skills, Knowledge & Abilities

• Strong knowledge of internal audit principles, practices and procedures or specialized technical understanding of key technology activities (e.g., Change Management, Security Operations, Network Operations).
• Strong knowledge of relevant technology and cybersecurity regulations (e.g., NYDFS, OSFI, HIPAA) and industry standard frameworks (e.g., SSAE 18/SOC, SOX, COSO, COBIT, ITIL, ISO27001, NIST).
• Strong Knowledge of multiple technology environments (e.g., Windows, Oracle, Unix/Linux) and cloud environments (e.g., Google Cloud Platform).
• Excellent project management, organizing and planning skills.
• Ability to achieve results by taking a proactive strategic view of business goals and objectives.
• Excellent analytical and problem solving skills, with the ability to effectively plan and direct multiple projects and project work teams.
• Working knowledge of using Artificial Intelligence technologies to support in the efficient completion of assigned tasks.
• Excellent interpersonal, presentation, verbal and written communication skills, with the ability to effectively interact with internal and external business partners.
• Ability to exercise professional judgment and assume responsibility for decisions which have an impact on people and quality of service.
• Strong knowledge with the International Standards for the Professional Practice of Internal Auditing and integrated risk based auditing preferred.
• Ability to perform data analytics is preferred.
• Knowledge of insurance industry, accounting principles (GAAP and STAT), regulatory compliance and related financial services fields highly desirable.

Education & Experience

• Bachelor's degree in accounting preferred or equivalent.
• Advanced degree or professional designation (CPA, CIA) preferred.
• Typically, eight to twelve years of relevant experience in the Property & Casualty insurance or related industry.

#LI-MR1 #LI-Hybrid

In certain jurisdictions, CNA is legally required to include a reasonable estimate of the compensation for this role. In District of Columbia, California, Colorado, Connecticut, Illinois, Maryland, Massachusetts, New York and Washington, the national base pay range for this job level is $97,000 to $189,000 annually. Salary determinations are based on various factors, including but not limited to, relevant work experience, skills, certifications and location.

CNA offers a comprehensive and competitive benefits package to help our employees - and their family members - achieve their physical, financial, emotional and social wellbeing goals.

CNA utilizes AI-enabled technology during the recruiting process. CNA is committed to providing reasonable accommodations to qualified individuals with disabilities in the recruitment process. To request an accommodation, please contact [e-mail]

At CNA, we are focused on success, individually and collectively. We pride ourselves on promoting a culture that challenges and engages people. We strive to connect people, departments and business areas, to function as a team, and to serve our customers and communities with professionalism and respect. Our dedication to employee engagement, continuous learning and the open exchange of ideas is the cornerstone of our business. These ideals, combined with our focus on the customer, enable us to explore new market opportunities and build on our success. Our values, culture and financial strength are what differentiates us from other employers and make CNA the place you want to work. At CNA, we are committed to advancing a culture of inclusion - one that attracts talent from all walks of life, fosters respect and collaboration, and enables all of our colleagues to do their best work. At CNA, we have a long standing commitment to the diverse communities in which we live and work. We actively make a difference for the greater good through partnerships, sustainability, initiatives, and working together for a better tomorrow. Corporate Social Responsibility is not one person, or one department, it's the entire enterprise coming together to make the world a better place.