Senior IT Internal Auditor

Morningstar, Inc.

Chicago (IL)

Hybrid

USD 95,275 - 139,741

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

100% 401(k) match up to 6% of salary

Comprehensive health benefits including premiums discounts

Paid Sabbatical Program

Educational stipends

Charitable Matching Gifts program

Job summary

Morningstar, Inc. in Chicago is looking for a Senior IT Internal Auditor to assess IT and security processes. This role involves planning and executing audits, testing internal controls, and providing consultancy to management.

Candidates should possess strong communication skills, a degree in accounting or IT, and at least four years of audit experience. The position follows a hybrid work schedule of four days per week in the office.

Qualifications

Action-oriented, self-starter with strong communication skills.
Comfortable working independently or in teams.
Strong understanding of IT technologies and security controls.
Proven ability to manage projects and develop team members.

Responsibilities

Assist with planning and execution of audits.
Perform walkthroughs and test internal controls.
Document work and prepare recommendations.
Supervise audit staff and provide feedback.
Consult with management on business practices.

Skills

Strong verbal and written communication skills

Information technology general computer controls

IT auditing techniques

Problem-solving abilities

Ability to manage people and projects

Education

Undergraduate degree in accounting or IT

Tools

COSO internal control framework

COBIT IT governance framework

NIST Cyber Security Framework

Job description

The Group

Reporting to the Board of Directors, Morningstar's Global Audit and Assurance is an independent, objective assurance and consulting activity designed to add value and improve the company’s operations. Global Audit and Assurance helps the company accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes.

Role

Morningstar's Global Audit and Assurance seeks a highly motivated Senior IT Internal Auditor who thrives on new experiences and challenges. As a Senior IT Internal Auditor, you will play an integral role in evaluating the company’s information technology and information security processes and the effectiveness of internal controls. You will work on a variety of operational, information technology, and compliance reviews and evaluate the effectiveness of internal controls over external financial reporting as part of the company’s Sarbanes-Oxley Section 404 compliance activities. The position is based at the company’s headquarters in Chicago and follows a hybrid schedule of 4 days per week in office.

Job responsibilities

Assist with the planning, management, and execution of operational, information technology, and compliance-related reviews.
Perform walkthroughs of complex information technology and information security processes and test the design and effectiveness of internal controls.
Document work and assist in the preparation of observations and recommendations for corrective action.
Supervise audit staff and external consultants, review workpapers, and provide appropriate coaching and feedback.
Effectively apply the COSO internal control framework, COBIT IT governance framework, NIST Cyber Security Framework and IIA International Professional Practices Framework.
Serve as a consultant and business partner with management.

Qualifications

Action-oriented, self-starter with strong verbal and written communication skills.
Comfortable working both independently or in teams within a complex environment.
Ability to diagnose problems, determine root causes, and recommend solutions to complex challenges.
Strong understanding of information technology general computer controls, system development life cycle, and IT auditing techniques; including a broad knowledge of IT technologies, operating systems, databases, and application platforms.
Knowledge of recognized IT audit and governance frameworks such as COBIT, ITIL, NIST, ISO, etc.
Undergraduate degree in accounting, information technology, management information systems, or a related field.
Four or more years of internal or external audit experience assessing information technology/security controls and/or internal controls over financial reporting.
Proven ability to manage people and projects, and actively develop team members.
Willingness to travel to domestic and international offices.

Nice to have

Experience in working for a Big 4 or Tier‑Two public accounting firm preferred.
Knowledge of General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) is a plus.
Experience performing data analytics and using data analysis or automated audit software is a plus.
Professional accreditation (e.g., CISA, CISM) is a plus.

Compensation and Benefits

Financial Health
- 100% 401(k) match up to 6% of salary
Stock Ownership Potential
Company provided life insurance – 1x salary + commission
Physical Health
- Comprehensive health benefits (medical/dental/vision) including potential premium discounts and company‑provided HSA contributions (up to $500‑$2,000 annually) for specific plans and coverages
- Additional medical wellness incentives – up to $300‑$600 annually
- Company‑provided long‑ and short‑term disability insurance
Emotional Health
- Trust‑Based Time Off
- 6‑week Paid Sabbatical Program
- 6‑Week Paid Family Caregiving Leave
- Competitive 8‑24 Week Paid Parental Leave
- Adoption Assistance
- Leadership Coaching & Formal Mentorship Opportunities
- Annual Flex Stipend – $1,000 annually to cover personal education & well‑being expenses
- Tuition Reimbursement
Social Health
- Charitable Matching Gifts program
- Dollars for Doers volunteer program
- Paid volunteering days
- 15+ Employee Resource & Affinity Groups