Senior IT Auditor

HCC Service Company, Inc.; Houston (TX); Hybrid; USD 90,000 - 140,000; Full time

Benefits offered by this job

Competitive salary

401(k) plan with company match

PTO and holidays

Professional development

Job summary

Tokio Marine HCC is seeking a Senior IT Auditor in Houston to lead and perform complex IT audits, including cybersecurity, cloud, and data controls. This hybrid role offers collaboration with IT and business teams to strengthen risk management and governance.

Under general supervision, you will plan and execute audit programs, develop work papers, and communicate findings. A Bachelor's in a related field and advanced certifications are preferred.

Qualifications

• Bachelor's degree required in accounting/IS or related field.
• CISA/IA credentials preferred.
• Experience with audit management systems.

Responsibilities

• Perform and lead all aspects of a full IT Audit with limited managerial guidance.
• Audit planning, walkthroughs, risk and control identification and reporting.
• Develop audit work papers that meet IIA requirements and support findings.
• Lead communication of audit issues with IT and client management.
• Utilize data analytics and security tools to improve audit testing.
• Contribute to risk assessments and control development during system implementations.

Skills

IT audit

Risk assessment

Audit planning

Cybersecurity

Data analytics

Communication

Education

Bachelor's degree in related field

CISA

CIA

CISSP

CPA

Tools

Optro

Job description

Job Title: Senior IT Auditor. Location: Houston, TX (Hybrid 4:1). Reports To: IT Internal Audit Director. Employment Type: Full time.

About Us

Help us insure it. Tokio Marine HCC is a leading global specialty insurance group, backed by the strength and stability of the Tokio Marine Group. With more than 50 years of sustained growth and profitability, and offices across the United States, the United Kingdom, Europe, and other international locations, we offer more than 100 classes of specialty insurance—covering everything from the crops that feed us and the concerts that entertain us to rescuing travelers abroad. Guided by our Mind Over Risk philosophy, we empower clients to pursue opportunities with confidence while fostering a culture rooted in innovation, collaboration, and trust. Always Advancing, we embrace an entrepreneurial spirit; as Experts in Tomorrow, we anticipate what’s next; and by Reaching Out, we build genuine connections that enable our people and our business to thrive.

Role Overview

Under general supervision, performs and leads complex information technology audits that add value and improve the company's operations. Evaluates and improves the information technology infrastructure using a systematic, disciplined approach for risk management effectiveness and for control and governance processes.

Key Responsibilities

• Perform and lead all aspects of a full IT Audit with limited managerial guidance. Essential elements of an IT audit will include audit planning, walkthroughs, audit program development, risk and control identification, status reporting, work paper production, decision-making, and time budget management. These audits are related to cybersecurity, application reviews, IT infrastructure reviews, cloud security, API controls, DevOps platform reviews, databases reviews, operating system reviews, IT Governance, AI, and integrated business audits.
• Assist in the development and execution of comprehensive audit programs for the departments and businesses within the organization.
• Conduct an efficient and effective risk assessment with high complexity.
• Participate in system implementation projects with the goal of working with the customer on risk identification, life cycle compliance, and controls development.
• Develop accurate, meaningful, and complete audit work papers that adequately support the audit findings and the risk identified in the audit planning process. Audit workpapers must meet IIA requirements.
• Develop issue based reports based on audit points, summarize findings and recommendations, and discuss with the audited business or department.
• Utilize security tools, data analytics, and AI to increase efficiencies in audit planning and testing.
• Validate and lead communication of audit issues with IT Audit and client management.
• Suggest recommendations on ways to improve audit work processes.

Education

Bachelor’s degree in Accounting, Management Information Systems, Computer Science, a related field, or the equivalent education and/or experience.

Preferred certifications, licenses, and designations: Certified Information Systems Auditor (CISA) from ISACA; Certified Internal Auditor from the IIA; Certified Information Systems Security Professional from ISC2; Certified Public Accountant from the AICPA.

Experience

• 5 years of relevant and progressive professional experience.
• 2 years of relevant IT internal audit experience.
• Insurance or financial services experience preferred.
• Experience in leading projects and proven ability to drive results.
• Experience working with audit management system software, particularly Optro (formerly AuditBoard).

Key Competencies

• Planning: Follow work plans, established timelines, and predefined goals for assigned work; meet commitments on deadlines.
• Communication: Communicate activities, results, and observations with employees and management as appropriate.
• Cost Management: Identify areas for improvement in existing business practices; perform work thoroughly in a cost-efficient manner and at a high productivity level.
• Business Controls and Policies: Comply with all corporate policies and procedures; report any breakdowns in controls to management; conduct all activities in a safe manner.
• No people management responsibility.
• Working knowledge of the Sarbanes-Oxley Act, internal auditing standards and Control Objectives for Information and Related Technologies (COBIT).
• Possess and have ability to apply broad knowledge of principles, practices, and procedures.
• Excellent written and verbal communications skills with an emphasis on confidentiality, tact, and diplomacy.
• Exceptional organizational and analytical skills; demonstrated ability to manage multiple tasks simultaneously.
• Knowledgeable of industry changes, legal updates, and technical developments related to applicable areas of the Company’s business to proactively respond to changing business environment.
• Proficiency in leveraging security tools to validate vulnerability management compliance, and security related configurations.
• Intermediate proficiency and experience using Microsoft Office package (Excel, Access, PowerPoint, Word).

What We Offer

• Competitive salary and comprehensive medical, vision, and dental benefit package, with eligibility beginning on your date of hire.
• Strong learning culture with ongoing development opportunities.
• Basic life and disability insurance.
• 401(k) plan with 6% company match.
• 20 days of PTO, two floating holidays, approximately 11 paid holidays, and volunteer time off.
• Paid parental leave.
• An opportunity to do meaningful work and love what you do.

Equal Opportunity Employer TMHCC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity, genetic information, marital status, medical condition, national origin, physical or mental disability, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation or any other characteristic protected by applicable local laws, regulations, and ordinances.

Your success is our priority.

In a world that is rapidly changing, TMHCC enables you to take on opportunities with confidence.

At Tokio Marine HCC, we pride ourselves on hiring the smartest, most conscientious people, who want to make a difference no matter their background.

And then we give them the support and trust they need.

We’re always looking for curious, creative transformative thinkers who want to change the status quo and have a passion for doing the right thing.