IT Audit Manager, Internal Audit & Internal Controls

Root was founded on the belief that car insurance is broken, and we set out to change it. We’re harnessing the power of technology to revolutionize this archaic, complicated industry. Using machine learning and mobile telematic platforms, we’ve built one of the most innovative insurtech companies in the world.

The Opportunity

The IT Audit Manager, Internal Audit and Internal Controls exists to lead the ongoing maintenance, evaluation, and testing of the organization’s IT general controls (ITGCs), application controls, and IT security controls for the SOX, Model Audit Rule (MAR), and Internal Audit programs. This role is expected to play a critical part in the continuing evolution of the internal technology control framework while managing audit projects across cloud infrastructure, engineering, data platforms, and core business systems as part of the Internal Audit function.

Success is achieved by providing strong project management over technology audits, reviewing technical work papers for external and audit report readiness, leveraging AI to perform data analytics and visualization, and educating cross-functional business and engineering partners on maintaining a robust, scalable control environment. The ideal candidate combines hands‑on IT audit expertise, strong supervisory skills, and a deep understanding of information security, modern technology architecture, and risk management.

Salary Range : $134,100 - $167,600 (Eligible for competitive bonus and equity offering)
Root is a "work where it works best" company. Meaning we will support you working in whatever location that works best for you across the US. We will continue to have our headquarters in Columbus, Ohio.

How You Will Make an Impact

• Lead IT Audit & Compliance Project Management:
  Drive project management efforts for the implementation, testing, and continuous monitoring of Root's IT General Controls (ITGCs), automated application controls, SOC 1 reviews, and IT-dependent reporting to support SOX and Model Audit Rule (MAR) compliance.
• Supervise & Guide Audit Execution:
  Lead and mentor IT auditors and cross-functional team members through complex technology processes, system implementations, and automated & manual controls.
• Review Work papers & External Audit Liaison:
  Review IT audit work papers to ensure alignment with professional standards, audit readiness, and seamless coordination with external auditors and regulatory examiners.
• Critical Technology Projects & System Launches:
  Partner proactively with engineering, product, and IT operations to ensure risk and control perspectives are assessed, designed, and implemented during critical business and technology initiatives.
• Stakeholder Collaboration &
  
  Education:
  
  Work collaboratively with the Head of Internal Audit and Internal Controls and technology process owners (including engineering, Info Sec, and IT) to effectively communicate the value of proactive risk management and strong internal controls.
• Issue Evaluation & Remediation:
  Collaborate with control owners to identify root causes, vet IT findings, evaluate year-end issue severity, and verify that effective, sustainable technical remediation is implemented.
• Reporting & Data-Driven Insights:
  Develop clear, concise audit reports and executive updates utilizing data analytics and visualization concepts to communicate audit results and IT risk exposures to leadership.
• Policy & Control Framework Evolution:
  Partner with the team to maintain and update IT internal audit standards, methodologies, testing procedures, risk and control matrices (RCMs), and process flowcharts.
• GRC System Utilization:
  Utilize the organization’s governance, risk, and compliance (GRC) tool (Optro) to…