Senior IT Assurance & Risk Auditor

Northwestern Mutual; Milwaukee (WI); On-site; USD 70,000 - 105,000; Full time

Benefits offered by this job

Flexible work schedules

Concierge service

Comprehensive benefits

Employee resource groups

Job summary

Northwestern Mutual is seeking an IT Audit Senior Specialist to support planning, execution, and reporting of IT and cybersecurity audits. You will evaluate controls, document results, and communicate observations clearly to stakeholders across the organization.

The role requires 3+ years in IT audit or related fields and a bachelor's degree in a relevant discipline. Candidates should demonstrate knowledge of IT controls, risk assessment, and audit frameworks, with a view toward professional

Qualifications

• Bachelor's degree in MIS/IT/Cybersecurity/Accounting/Finance or related field.
• Three+ years of IT audit, cybersecurity audit, internal audit, compliance, technology risk, or related field experience.
• Strong written and verbal communication, able to document work clearly for technical and non-technical stakeholders.
• Knowledge of IT audit concepts, risk and control principles, and common frameworks such as COBIT, NIST, ISO, ITIL, IIA Standards.
• Solid understanding of general IT control topics: access, change, system development, data integrity, backup and recovery, etc.
• Ability to analyze information, identify control gaps, and communicate risk pragmatically.
• Willingness to pursue relevant professional certification (e.g., CISA, CISSP, CIA, CRISC, CISM, CPA).
• Experience in a large corporate internal audit function or financial services environment preferred.

Responsibilities

• Support planning by understanding business and technology processes and developing audit objectives.
• Evaluate design and operating effectiveness of controls across IT, cybersecurity, regulatory, and financial reporting risks.
• Perform audit testing in areas like access, change, system development, and cloud-related controls.
• Prepare workpapers documenting procedures, evidence, conclusions, and exceptions.
• Draft observations with root cause and corrective actions following guidelines.
• Communicate audit status and results to stakeholders in technical and non-technical terms.
• Demonstrate interviewing and note-taking skills to validate evidence and conclusions.
• Manage audit work across concurrent projects, meeting deadlines and adapting to priorities.

Skills

IT audit

Cybersecurity audit

Communication

IT controls

Audit frameworks

Project management

Team collaboration

Certification pursuit

Risk assessment

Regulatory knowledge

Education

Bachelor's degree in relevant field

Tools

COBIT

NIST

ISO/IEC

ITIL

IIA Standards

Job description

Northwestern Mutual is seeking an IT Audit Senior Specialist to support planning, execution, and reporting of IT and cybersecurity audits. You will evaluate controls, document results, and communicate observations clearly to stakeholders across the organization.

The role requires 3+ years in IT audit or related fields and a bachelor's degree in a relevant discipline. Candidates should demonstrate knowledge of IT controls, risk assessment, and audit frameworks, with a view toward professional