SOX IT Auditor - Hybrid Role + Growth

Berkshire Hathaway Homestate Companies; United States; Hybrid; USD 85,000 - 110,000; Full time

Benefits offered by this job

401(k) with company match

Educational reimbursement

Wellness program

On-site gym

Parking subsidies

Job summary

NICO National Indemnity Company in Omaha, NE seeks an IT Internal Auditor - SOX to evaluate IT controls, test SOX compliance, and strengthen the financial reporting control environment across the group. You will partner with Internal Audit, ERM, IT and business stakeholders to perform risk-based ITGC testing, document results, monitor remediation, and advise on control improvements.

Hybrid work available after in‑office training.

Qualifications

• Bachelor's degree or equivalent work experience
• Two or more years of IT/audit experience
• Knowledge of SOX requirements and objectives
• Knowledge of IT General Controls (ITGCs)
• Proficiency with Excel and Word
• Professional certifications such as CISA, CIA, or CPA preferred

Responsibilities

• Support IT audit and SOX compliance initiatives across the NICO Group
• Perform risk-based testing of ITGCs, automated controls, and key reports that support financial reporting
• Execute SOX testing activities, including walkthroughs, control evaluations, evidence reviews, and documentation
• Partner with management and control owners to maintain SOX compliance and support audit activities
• Monitor and validate remediation efforts resulting from internal audits and risk assessments
• Prepare clear, concise audit documentation, reports, and recommendations

Skills

SOX knowledge

ITGC knowledge

Audit experience

Communication

Risk assessment

Regulatory compliance

Education

Bachelor's degree or equivalent

Tools

Excel

Word

CISA/CIA/CPA certifications

Job description

NICO National Indemnity Company in Omaha, NE seeks an IT Internal Auditor - SOX to evaluate IT controls, test SOX compliance, and strengthen the financial reporting control environment across the group. You will partner with Internal Audit, ERM, IT and business stakeholders to perform risk-based ITGC testing, document results, monitor remediation, and advise on control improvements.

Hybrid work available after in‑office training.