IT Auditor: Cybersecurity & Risk Advisory

Sammons Financial Group Companies; West Des Moines (IA); On-site; USD 62,000 - 116,000; Full time

Benefits offered by this job

Health coverage

ESOP

401(k)

Friday afternoons off

Paid time off

Tuition reimbursement

Professional development opportunities

Volunteer time off

Job summary

Sammons Financial Group in West Des Moines, IA seeks an IT Audit professional to independently assess IT controls, security, and data privacy. You will lead engagements from planning to reporting, advise on improvements, and support regulatory compliance. Travel to other offices may be required.

Ideal candidates have 0-2 years in IT audit or IT security and knowledge of NIST/ISO 27001, GDPR/CCPA, and IT general controls. This role emphasizes collaboration, analysis, and continuous learning.

Qualifications

• Bachelor's degree in accounting, finance, MIS or related field preferred.
• 0-2 years' experience in IT audit, IT security, or related field preferred.
• Strong technical skills in network security, operating systems, databases and cloud computing.
• Knowledge of cybersecurity frameworks (NIST, ISO 27001), data privacy regulations (GDPR, CCPA) and IT general controls.
• Knowledge of insurance industry systems, internal controls, policies, procedures, regulations and laws.
• Familiarity with IIA standards and Code of Ethics; travel to other office locations may be required.

Responsibilities

• Lead and execute IT audit engagements from planning to reporting per standards (NIST, ISO 27001).
• Evaluate IT controls related to cybersecurity, data privacy, access and change management.
• Analyze IT systems and data to identify vulnerabilities and risks.
• Collaborate with IT and business stakeholders to suggest improvements and value-added recommendations.
• Contribute to consulting and advisory projects on IT risk management, cybersecurity and data governance.
• Assist with regulatory activities related to IT controls and compliance.
• Prepare written reports for senior leadership and the Board; propose corrective actions.
• Build relationships with IT and business stakeholders at all levels.
• Participate in meetings, training and professional development; stay updated on threats.

Skills

Network security

Operating systems

Databases

Cloud computing

NIST

ISO 27001

GDPR

CCPA

IT general controls

Security terminology

Education

Bachelor's degree in Accounting, Finance, MIS or related field

Job description

Sammons Financial Group in West Des Moines, IA seeks an IT Audit professional to independently assess IT controls, security, and data privacy. You will lead engagements from planning to reporting, advise on improvements, and support regulatory compliance. Travel to other offices may be required.

Ideal candidates have 0-2 years in IT audit or IT security and knowledge of NIST/ISO 27001, GDPR/CCPA, and IT general controls. This role emphasizes collaboration, analysis, and continuous learning.