IT Auditor I

Brotherhood Mutual; Fort Wayne (IN); On-site; USD 60,000 - 80,000; Full time

Job summary

Brotherhood Mutual in Fort Wayne, Indiana is seeking an IT Auditor I (GRC Analyst I) to assist in executing governance, risk, and compliance activities. The ideal candidate will help conduct internal audits and policy reviews, ensuring effective controls and regulatory compliance.

The position requires a Bachelor's degree, with at least one year experience in IT auditing or related fields being preferred. Strong communication skills and a desire for continuous learning are essential for this role.

Qualifications

• At least one year of external and/or internal information technology, auditing or GRC experience is desired.
• Understanding of the Sarbanes‑Oxley Act or Model Audit Rule Act.
• Desire for continuous learning regarding privacy and security regulations.

Responsibilities

• Assist in governance, risk, and compliance activities.
• Participate in risk and control consulting for IT and business departments.
• Support the policy update and review process.
• Gather risk metrics for controls framework reporting.
• Perform compliance activities as directed.
• Assist with vendor risk management activities.
• Learn to use the risk register for cyber risks.
• Assist with external audit activities.

Skills

Strong written, verbal and presentation skills

Interpersonal skills

Analytical skills

Project management capabilities

Understanding of financial audit principles

Continuous learning about privacy and security regulations

Education

Bachelor's degree in IT, business administration, or accounting

Experience in information technology, auditing or GRC

Progression towards CISA and/or CPCU designation

Job description

Job Title: IT Auditor I (GRC Analyst I)

FLSA Status: Exempt

Job Family: Information Technology

Department: IT - Information Security

Location: Corporate Office (Fort Wayne IN)

JOB SUMMARY

Assist in executing governance, risk, and compliance activities, including internal IT audits, policy reviews, and collaboration with IT Management to ensure effective controls and regulatory compliance.

POSITION ESSENTIAL FUNCTIONS AND RESPONSIBILITIES

• Learn and participate in the risk and control consulting for IT and business departments with understanding and fulfilling their responsibilities related to IT governance, risk, and compliance.
• Assist with assigned tasks from the IT Audit Plan as directed by team lead and management.
• Assist with the policy update and review process to ensure policies comply with industry standards and corporate needs.
• Gather assigned risk metrics for the controls framework to be reported to Senior Management, create necessary documentation.
• Perform compliance activities with Legal and Compliance departments as directed by the team lead and management.
• Perform assigned vendor risk management activities.
• Learn the process for using the risk register for cyber risks affecting the business and participate in the analysis and documentation processes.
• Follow the company’s ERM approach to evaluating risks and ensure the organization’s risk posture is within the risk tolerance limits.
• Assist with external audit activities assigned by team lead and management.
• Complete other projects as assigned.

KNOWLEDGE, SKILLS, AND ABILITIES

• Must possess strong written, verbal, and presentation skills.
• Self‑motivated with strong interpersonal, communication and analytical skills.
• Must have effective project management capabilities.
• Understanding of financial audit principles and the Sarbanes‑Oxley Act or Model Audit Rule Act.
• Strong desire for continuous learning regarding privacy and security regulations and frameworks.
• Effectively interface with external contacts, Brotherhood employees, managers, and department staff members.

EDUCATION AND/OR EXPERIENCE

• Bachelor's degree, preferably in IT, business administration, or accounting desired.
• At least one year of external and/or internal information technology, auditing or GRC experience is desired.
• Progression towards Certified Information Systems Auditor (CISA) and/or Chartered Property and Casualty Underwriter (CPCU) designation is desired.