IT Audit Manager

3M HEALTHCARE; Grand Rapids (MI); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

Paid time off

401(k) plan with match

Wellness resources

Job summary

Acrisure is seeking an IT Internal Audit Manager to join our Internal Audit team in Grand Rapids, MI. The role reports to the IT Internal Audit Director and works within a global team to provide assurance over internal controls.

The role focuses on planning and executing risk-based IT audits, evaluating ITGCs and application controls, and supporting SOX testing with cross-functional collaboration. Occasional travel (<20%) may be required.

Qualifications

• 6+ years of IT audit, IT risk, or information security experience.
• Professional certs preferred: CISA, CISSP, CRISC, CISM, CPA, or CIA.

Responsibilities

• Plan and execute risk‑based IT audits across infrastructure, applications, cloud, cyber security, and third‑party risks.
• Manage multiple audits with competing deliverables and tight timelines.
• Evaluate ITGCs and application controls aligned with SOX, GDPR, NIST, ISO27001, and other standards.
• Assist in SOX testing during peak season with time‑sensitive deliverables.
• Partner with business and tech teams to define audit scopes and perform testing procedures.
• Support integrated audits and cross‑functional projects with other audit team members.
• Deliver reports with actionable recommendations to senior management and stakeholders across regions.

Skills

IT audit

Project management

Risk assessment

Communication

Cloud security

Education

Bachelor’s degree in Computer Science/MIS/Accounting/related field

Tools

PowerBI

Microsoft 365

ERP (Workday)

ERP (Oracle)

Job description

Job Summary

We are seeking an IT Internal Audit Manager to join our Internal Audit team based in Grand Rapids, Michigan. The manager reports to the IT Internal Audit Director and works as part of a global/multi‑national team providing assurance over Acrisure’s internal controls.

Responsibilities

• Plan and execute risk‑based IT audits in areas such as infrastructure, applications, cloud environments, cyber security, and third‑party/vendor risks.
• Manage multiple audits with competing deliverables while balancing business needs.
• Evaluate IT general controls (ITGCs), application controls, and technology‑related processes aligned with SOX, GDPR, NIST, ISO27001, and other compliance requirements.
• Assist in SOX testing during peak season, prioritizing time‑sensitive deliverables.
• Partner with business units and technology teams to identify and assess IT risks, develop audit scopes, and execute testing procedures.
• Support integrated audits and special projects in coordination with other audit team members.
• Conduct risk assessments of assigned areas and systems within required timelines.
• Deliver audit reports with clear and actionable recommendations to senior management and stakeholders across regions.
• Monitor remediation of audit findings and perform follow‑up reviews to assess effectiveness of corrective actions.
• Stay informed on evolving regulations and emerging technologies to provide timely guidance to internal stakeholders.
• Collaborate with external auditors, regulatory bodies, and internal risk and compliance teams as needed.
• Ensure compliance with internal KPIs/SLAs (e.g., MAPs follow‑up, closing of work packs).
• Help develop and maintain the internal audit methodology and assist in training or mentoring junior auditors.

Requirements

• Highly organized self‑starter, detail oriented, with strong project management skills and excellent written and oral communication.
• Strong skeptical thinking, with ability to dive into details.
• Occasional travel (less than 20%) to Acrisure international entities.
• Bachelor’s degree in Computer Science, Management Information Systems, Accounting, or a related field.
• Professional certification preferred: CISA, CISSP, CRISC, CISM, CPA, or CIA.
• 6+ years of progressive IT audit, IT risk, or information security experience.
• Strong knowledge of IT controls, security frameworks (NIST, COBIT, ISO), and regulatory standards (SOX, GDPR).
• 3+ years of experience leading and coaching/developing junior auditors.
• Experience auditing complex IT environments including cloud platforms (AWS, Azure), ERP systems (Workday, Oracle), agency‑policy management systems (Applied Epic), and cybersecurity controls.
• Experience with Microsoft365 and PowerBI.
• Exceptional problem‑solving, organizational, and analytical skills.
• Prior Big4 accounting firm experience is a plus.
• Comfortable with an on‑site presence to support collaboration, team leadership, and cross‑functional partnership.

Benefits

• Comprehensive medical, dental, and vision insurance; life and disability insurance; fertility benefits; wellness resources; paid sick time.
• Generous paid time off and holidays; Employee Assistance Program; complimentary Calm app subscription.
• Immediate vesting 401(k) plan; health savings and flexible spending accounts; commuter benefits; employee discount programs.
• Paid maternity and paternity leave, including for adoptive parents; legal plan options; pet insurance coverage.
• Additional benefits as applicable to subsidiary entity and geographic location.

Acrisure is an Equal Opportunity Employer. We consider qualified applicants without regard to race, color, religion, sex, national origin, disability, or protected veteran status. Applicants may request reasonable accommodation by contacting [e-mail].