IT Auditor: Cybersecurity & Controls Specialist

Sammons Financial Group Inc.; Sioux Falls (SD); On-site; USD 62,000 - 116,000; Full time

Benefits offered by this job

Comprehensive health coverage

Employee Stock Ownership Plan (ESOP)

401(k) plan

Fridays off

Paid time off

Paid holidays

Tuition reimbursement

Professional development opportunities

Volunteer time off

Nonprofit matching gifts

Job summary

Sammons Financial Group Inc. is seeking an IT Auditor to help safeguard the company's information systems and data assets. You will lead IT audit engagements, assess controls, and provide risk-based recommendations aligned with standards such as NIST and ISO 27001.

You will collaborate with IT and business stakeholders, contribute to advisory projects, and support regulatory activities including NAIC model laws. A commitment to continuous improvement and professional growth is essential.

Qualifications

• Bachelor's degree in Accounting, Finance, MIS or related field preferred.
• 0-2 years' IT audit, IT security, or related field preferred.
• Strong knowledge of cybersecurity frameworks (NIST, ISO 27001) and data privacy regulations.

Responsibilities

• Lead and execute IT audit engagements from planning to reporting.
• Evaluate IT controls related to cybersecurity, data privacy, access, and change management.
• Identify vulnerabilities and risks using diverse tools and techniques.
• Collaborate with stakeholders to implement value-added recommendations.
• Assist with regulatory activities and prepare written reports for leadership.

Skills

Network security

Operating systems

Databases

Cloud computing

Cybersecurity frameworks

Data privacy regulations

IT general controls

Communication skills

Analytical thinking

Independent work

Education

Bachelor's degree in Accounting, Finance, MIS or related field

Job description

Sammons Financial Group Inc. is seeking an IT Auditor to help safeguard the company's information systems and data assets. You will lead IT audit engagements, assess controls, and provide risk-based recommendations aligned with standards such as NIST and ISO 27001.

You will collaborate with IT and business stakeholders, contribute to advisory projects, and support regulatory activities including NAIC model laws. A commitment to continuous improvement and professional growth is essential.