Senior IT Internal Auditor

Morningstar; Chicago (IL); Hybrid; USD 95,275 - 139,741; Full time

Benefits offered by this job

401(k) match

Stock ownership

Sabbatical leave

Parental leave

Job summary

Morningstar’s Global Audit and Assurance seeks a Senior IT Internal Auditor to evaluate IT and information security processes and controls, including SOX 404 work. The role is based at Morningstar's headquarters in Chicago and follows a hybrid schedule, four days in the office.

You will work with management across the organization, applying COSO, COBIT, NIST, and IIA frameworks, and may supervise staff and external consultants on diverse audits.

Qualifications

• Strong understanding of IT general controls, SDLC, and IT auditing techniques.
• Familiarity with IT governance frameworks (COBIT, ITIL, NIST, ISO).
• Experience auditing IT/security controls and internal controls over financial reporting.

Responsibilities

• Assist with planning, management, and execution of IT, operational, and compliance reviews.
• Perform walkthroughs of IT and information security processes and test control design/effectiveness.
• Document work and prepare observations and corrective-action recommendations.
• Supervise audit staff and external consultants; provide coaching and feedback.
• Apply COSO, COBIT, NIST, and IIA frameworks in audits and assess governance processes.
• Serve as a consultant and business partner to management.

Skills

IT Audit

COSO

COBIT

NIST

ITGCs

SOX

Leadership

Communication

Travel

Auditing

Education

Bachelor's degree in accounting/IT/MIS

Tools

Audit software

Data analytics tools

Job description

Overview

Reporting to the Board of Directors, Morningstar’s Global Audit and Assurance is an independent, objective assurance and consulting activity designed to add value and improve the company’s operations. Global Audit and Assurance helps the company accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes.

The Role

Morningstar’s Global Audit and Assurance seeks a highly motivated Senior IT Internal Auditor who thrives on new experiences and challenges. As a Senior IT Internal Auditor, you will play an integral role in evaluating the company’s information technology and information security processes and the effectiveness of internal controls. You will have the opportunity to work on a variety of operational, information technology, and compliance reviews as well as evaluate the effectiveness of internal controls over external financial reporting as part of the company’s Sarbanes‑Oxley Section 404 compliance activities. The position is based at the company’s headquarters in Chicago. You will work closely with all levels of management across the organization, recommending changes to strengthen controls for increased efficiencies and reduced risks. The Senior IT Internal Auditor will have the opportunity to utilize and reference world‑class audit tools and audit methodologies in the performance of his or her duties. This position is based in the Chicago office and follows a hybrid schedule, four days per week in the office.

Job Responsibilities

• Assist with the planning, management, and execution of operational, information technology, and compliance‑related reviews.
• Perform walkthroughs of complex information technology and information security processes and test the design and effectiveness of internal controls.
• Document work and assist in the preparation of observations and recommendations for corrective action.
• Supervise audit staff and external consultants, review workpapers, and provide appropriate coaching and feedback.
• Effectively apply the COSO internal control framework, COBIT IT governance framework, NIST Cyber Security Framework, and IIA International Professional Practices Framework.
• Serve as a consultant and business partner with management.

Qualifications

• Action‑oriented, self‑starter with strong verbal and written communication skills.
• Comfortable working both independently or in teams and within a complex environment.
• Ability to diagnose problems, determine root causes, and recommend solutions to complex challenges.
• Strong understanding of information technology general computer controls, system development life cycle, and IT auditing techniques; including a broad knowledge of IT technologies, operating systems, databases, and application platforms.
• Knowledge of recognized IT audit and governance frameworks such as COBIT, ITIL, NIST, ISO, etc.
• Undergraduate degree in accounting, information technology, management information systems, or a related field.
• Four or more years of internal or external audit experience assessing information technology/security controls and/or internal controls over financial reporting.
• Proven ability to manage people and projects, and actively develop team members.
• Willingness to travel to domestic and international offices.

Nice To Have

• Experience working for a Big‑4 or Tier‑Two public accounting firm.
• Knowledge of General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).
• Experience performing data analytics and using data analysis or automated audit software.
• Professional accreditation (e.g., CISA, CISM).

Compensation and Benefits

At Morningstar we believe people are at their best when they are at their healthiest. That’s why we champion your wellness through a wide range of programs that support all stages of your personal and professional life.

• Financial Health
  • 100% 401(k) match up to 6% of salary
  • Stock ownership potential
  • Company‑provided life insurance – 1x salary + commission
• Physical Health
  • Comprehensive health benefits (medical, dental, vision) including potential premium discounts and company‑provided HSA contributions (up to $500‑$2,000 annually) for specific plans and coverages
  • Additional medical wellness incentives – up to $300‑$600 annually
  • Company‑provided long‑ and short‑term disability insurance
• Emotional Health
  • Trust‑based time off
  • 6‑week paid sabbatical program
  • 6‑week paid family caregiving leave
  • Competitive 8‑24 week paid parental leave
  • Adoption assistance
  • Leadership coaching & formal mentorship opportunities
  • Annual flex stipend – $1,000 annually to cover personal education & well‑being expenses
  • Tuition reimbursement
• Social Health
  • Charitable matching gifts program
  • Dollars for Doers volunteer program
  • Paid volunteering days
  • 15+ employee resource & affinity groups

Total Cash Compensation Range

$95,275.00 – $139,741.66

Inclusive of annual base salary and target incentive. Morningstar’s hybrid work environment gives you the opportunity to collaborate in‑person each week as we have found that we are at our best when we are purposely together on a regular basis. In most of our locations, our hybrid work model is four days in‑office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you’ll have tools and resources to engage meaningfully with your global colleagues.