IT Audit Manager - Insurance

Our Client, a large Insurance Company has an opening for an IT Audit Manager in its SOX Division. Full job description to follow. Ideal candidates will have 5-7 years experience with the Big 4 and be self-driven and motivated.

IT Infrastructure Auditor (CISA/CISSP)

Key Responsibilities:

• Comprehensive risk assessment and engagement planning.  This entails obtaining an in-depth understanding of each business and/or function being audited, identification and assessment of risks (including understanding the manner in which such risks are controlled and the audit approach required to ensure controls are appropriately designed and operating effectively) and preparing documentation (Workpapers, Planning Memorandum and Audit Program) that reflects the aforementioned information and assessments.
• Executing audit work. This encompasses execution of the planned approach for the audit in a team-based environment, interacting closely with various levels of staff and management throughout the Bank.  For IT infrastructure audits, work encompasses a review of processes and procedures performed by various departments within the Bank to control and/or support the IT environment.  This includes both general and application IT control reviews, and typically involves reviews of system architecture and configuration settings, underlying system administration and support processes, and data analysis techniques. Responsibilities also include performing integrated business and application audits.
• Developing, presenting and finalizing audit reports.  This process entails initial drafting of the report, discussion with management to ensure factual accuracy and concurrence and coordination with Management to obtain written responses to Audit’s recommendations.

In addition to his/her primary responsibilities, each Senior IT Infrastructure Auditor is expected to assume additional responsibilities upon progression in the Department.  These responsibilities can include:

 Mentoring new hires to aid in their acclimation to the Bank and the manner in which the Department operates;

 Participating in the recruitment of other IT Auditors;

 Supervising less experienced Auditors on multiple auditor assignments;

 Performing administrative duties as it relates to key responsibilities and participating in special projects as delegated by Department Management;

 Developing and maintaining relationships with Bank Staff and Management to facilitate proactive assessment of the Bank’s risk profile and career development; and,

 Assessing personal development needs (e.g., training) in conjunction with Department Management.

Experience and Skills Required/Desired:

• Undergraduate degree in Information Technology, Accounting, Business Administration or related areas (MBA or equivalent a plus).
• 6-10 years work experience in information systems and technology auditing in a multi-platform environment (preferably with knowledge of at least four of the following technologies: Solaris, Linux, Windows, Oracle, MS-SQL, Sybase, routers/switches, storage technologies, firewalls, web technologies, E-Mail systems, messaging technologies, IBM mainframe, etc.).; financial services experience preferred, but not required.

Principal IT Auditor

This position is the global lead auditor for equities technology. Our client is one of the major european investment banks and is based here in NYC.

Key Responsibilities
• Plans audit engagements based upon a risk-based approach using Group Audit methodology and works closely on this with the Finance and Infrastructure audit teams. Drives execution of audits escalating issues/problems as necessary. Prepares draft reports including issues, recommendation and obtains management responses.
• Maintains relationships to key Finance & GTO staff members in your region.
• Develops and maintains expertise in Finance, HR and GLS processes and IT system landscapes.
• Develops a good understanding of the Finance, HR and Infrastructure business functions.
• Facilitates audit tracking and prepare the validation information for proper closure of issues (GATS).
• Participates in departmental initiatives, internal projects and potentially in Special Investigations.
• Partner with other groups during audit engagement to ensure an integrated approach.
• Assists in the scheduling and staffing of audit jobs.
• The job will involve approximately 15% travel within the region

Key Performance Indicators
• Understanding of Finance,Infrastructure & GTO and the supported business areas and their processes translating into:
• Quality of work undertaken, particularly risk analysis, work prioritisation and audit assurance; and
• Effective client relationships and feedback.
• Clarity of communication internally and externally, particularly effective report writing skills.
• Sharing of information within the audit staff.

Professional Attributes
• Deep technical knowledge about application architecture and implementation of application controls.
• Knowledge of Financial Reporting controls
• Expert knowledge about design of IT general controls and their implementation in GTO.
• Ability to identify and evaluate risks within the control environment.
• Superior communications skills both verbal and written.
• Confidence to speak with management about issues, controls failures, etc.
• Team player and be able to work well with the Audit team.
• Ability to work under minimal supervision.
• Strong communication skills - oral and written.
• Ability to work in different environments and with diverse set of clients.