Senior IT Audit Lead: Tech Risk & Assurance Leader

Fred Loya Insurance Agency; San Antonio (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

Loya Insurance is seeking an experienced IT Audit Lead to build and scale a technology audit and assurance capability. This role will provide independent, risk-based assurance over IT controls supporting financial reporting, cybersecurity, data privacy, regulatory compliance, and critical business operations.

The successful candidate will blend strong audit judgment with technical depth to engage with engineers, security leaders, data teams, and executives.

Qualifications

• Bachelor’s degree or equivalent experience in a related field.
• 8+ years of progressive experience in IT audit, technology risk, or cybersecurity assurance.
• Experience leading complex technology audits from assessment to reporting and follow-up.
• Strong knowledge of IT general controls and technology risk across IAM, PAM, change management, cloud, and third-party risk.
• Ability to translate technical risk into business terms and actionable remediation.

Responsibilities

• Develop and maintain a risk-based technology audit universe and annual assurance plan.
• Lead technology audits from planning through testing, reporting, and remediation follow-up.
• Assess IT general controls across identity management, privileged access, change management, and infrastructure.
• Evaluate controls supporting SOX 404, GLBA, and NAIC cybersecurity expectations.
• Communicate audit findings and risk implications to senior leadership.

Skills

Audit leadership

IT risk assessment

Communication skills

Problem solving

Independent judgment

Education

Bachelor's degree in information systems or related field

Equivalent relevant experience

Tools

SQL

Python

PowerShell

APIs

BI tools

GRC platforms

Job description

Loya Insurance is seeking an experienced IT Audit Lead to build and scale a technology audit and assurance capability. This role will provide independent, risk-based assurance over IT controls supporting financial reporting, cybersecurity, data privacy, regulatory compliance, and critical business operations.

The successful candidate will blend strong audit judgment with technical depth to engage with engineers, security leaders, data teams, and executives.