Senior IT Auditor

Tokio Marine HCC International; Houston, Northern (TX, KY); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical benefits

401(k) plan

Paid time off & holidays

Job summary

Tokio Marine HCC International in Houston, TX, seeks a Senior IT Auditor to lead complex IT audits, including cybersecurity, cloud security, DevOps and data governance. You will plan, execute, and report on audit programs, leveraging analytics and security tools to strengthen controls and risk management.

The role requires at least 5 years in IT internal audit, a Bachelor's degree in a related field, and relevant certifications (CISA, CIA, CISSP, CPA preferred).

Qualifications

• Bachelor's degree or equivalent in related field (Accounting, MIS, CS) and professional certifications preferred.
• CISA, CIA/IIA, CISSP, CPA are desirable for advanced roles.
• 5+ years of relevant IT audit experience; 2+ years in IT internal audit.

Responsibilities

• Lead all aspects of full IT audits including planning, walkthroughs, risk and control identification, and reporting.
• Develop and execute comprehensive audit programs for departments and business units.
• Conduct high-complexity risk assessments and identify control enhancements.
• Participate in system implementation projects with risk considerations and controls development.
• Develop audit work papers meeting IIA standards and communicate findings to management.
• Leverage security tools, data analytics, and AI to increase audit efficiency.

Skills

Communication skills

IT audit experience

Risk assessment

SOX/COBIT knowledge

Security tools

Education

Bachelor's degree in Accounting / MIS / CS

CISA certification

CIA/IIA

CISSP

CPA

Tools

Audit management software: Optro (AuditBoard)

Job description

Job Title: Senior IT Auditor

Location: Houston, TX (Hybrid 4:1)

Reports To: IT Internal Audit Director

Employment Type: Full time

About Us Help us insure it. Tokio Marine HCC is a leading global specialty insurance group, backed by the strength and stability of the Tokio Marine Group. With more than 50 years of sustained growth and profitability, and offices across the United States, the United Kingdom, Europe, and other international locations, we offer more than 100 classes of specialty insurance-covering everything from the crops that feed us and the concerts that entertain us to rescuing travelers abroad. Guided by our Mind Over Risk philosophy, we empower clients to pursue opportunities with confidence while fostering a culture rooted in innovation, collaboration, and trust. Always Advancing, we embrace an entrepreneurial spirit; as Experts in Tomorrow, we anticipate what's next; and by Reaching Out, we build genuine connections that enable our people and our business to thrive.

Role Overview

Under general supervision, performs and leads complex information technology audits that add value and improve the company's operations. Evaluates and improves the information technology infrastructure using a systematic, disciplined approach for risk management effectiveness and for control and governance processes.

Key Responsibilities

• Perform and lead all aspects of a full IT Audit with limited managerial guidance. Essential elements of an IT audit will include audit planning, walkthroughs, audit program development, risk and control identification, status reporting, work paper production, decision-making, and time budget management. These audits are related to cybersecurity, application reviews, IT infrastructure reviews, cloud security, API controls, DevOps platform reviews, databases reviews, operating system reviews, IT Governance, AI, and integrated business audits.
• Assist in the development and execution of comprehensive audit programs for the departments and businesses within the organization.
• Conduct an efficient and effective risk assessment with high complexity.
• Participate in system implementation projects with the goal of working with the customer on risk identification, life cycle compliance, and controls development.
• Develop accurate, meaningful, and complete audit work papers that adequately support the audit findings and the risk identified in the audit planning process. Audit workpapers must meet IIA requirements.
• Develop issue based reports based on audit points, summarize findings and recommendations, and discuss with the audited business or department.
• Utilize security tools, data analytics, and AI to increase efficiencies in audit planning and testing.
• Validate and lead communication of audit issues with IT Audit and client management.
• Suggest recommendations on ways to improve audit work processes.

What You Bring

• Education • Bachelor's degree in Accounting, Management Information Systems, Computer Science, a related field, or the equivalent education and/or experience.
• Preferred certifications, licenses, and designations: Certified Information Systems Auditor (CISA) from ISACA; Certified Internal Auditor from the IIA; Certified Information Systems Security Professional from ISC2; Certified Public Accountant from the AICPA.
• Experience • 5 years of relevant and progressive professional experience.
• Experience • 2 years of relevant IT internal audit experience.
• Insurance or financial services experience preferred.
• Experience in leading projects and proven ability to drive results.
• Experience working with audit management system software, particularly Optro (formerly AuditBoard).

Key Competencies

• Planning: Follow work plans, established timelines, and predefined goals for assigned work; meet commitments on deadlines.
• Communication: Communicate activities, results, and observations with employees and management as appropriate.
• Cost Management: Identify areas for improvement in existing business practices; perform work thoroughly in a cost-efficient manner and at a high productivity level.
• Business Controls and Policies: Comply with all corporate policies and procedures; report any breakdowns in controls to management; conduct all activities in a safe manner.
• No people management responsibility.
• Working knowledge of the Sarbanes-Oxley Act, internal auditing standards and Control Objectives for Information and Related Technologies (COBIT).
• Possess and have ability to apply broad knowledge of principles, practices, and procedures.
• Excellent written and verbal communications skills with an emphasis on confidentiality, tact, and diplomacy.
• Exceptional organizational and analytical skills; demonstrated ability to manage multiple tasks simultaneously.
• Knowledgeable of industry changes, legal updates, and technical developments related to applicable areas of the Company’s business to proactively respond to changing business environment.
• Proficiency in leveraging security tools to validate vulnerability management compliance, and security related configurations.
• Intermediate proficiency and experience using Microsoft Office package (Excel, Access, PowerPoint, Word).

What We Offer

• Competitive salary and comprehensive medical, vision, and dental benefit package, with eligibility beginning on your date of hire
• Strong learning culture with ongoing development opportunities
• Basic life and disability insurance
• 401(k) plan with 6% company match
• 20 days of PTO, two floating holidays, approximately 11 paid holidays, and volunteer time off
• Paid parental leave
• An opportunity to do meaningful work and love what you do
• Equal Opportunity Employer TMHCC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity, genetic information, marital status, medical condition, national origin, physical or mental disability, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations, and ordinances.

#LI-SD1 Your success is our priority. In a world that is rapidly changing, TMHCC enables you to take on opportunities with confidence. At Tokio Marine HCC, we pride ourselves on hiring the smartest, most conscientious people, who want to make a difference no matter their background. And then we give them the support and trust they need. We’re always looking for curious, creative transformative thinkers who want to change the status quo and have a passion for doing the right thing. If this is you, then we want you on our team.