Senior IT Auditor

Job Title:

Senior IT Auditor

Location:

Houston, TX (Hybrid 4:1)

Reports To:

IT Internal Audit Director

Employment Type:

Full time

About Us Help us insure it. Tokio Marine HCC is a leading global specialty insurance group, backed by the strength and stability of the Tokio Marine Group. With more than 50 years of sustained growth and profitability, and offices across the United States, the United Kingdom, Europe, and other international locations, we offer more than 100 classes of specialty insurance-covering everything from the crops that feed us and the concerts that entertain us to rescuing travelers abroad.

Guided by our Mind Over Risk philosophy, we empower clients to pursue opportunities with confidence while fostering a culture rooted in innovation, collaboration, and trust. Always Advancing, we embrace an entrepreneurial spirit; as Experts in Tomorrow, we anticipate what's next; and by Reaching Out, we build genuine connections that enable our people and our business to thrive.

Under general supervision, performs and leads complex information technology audits that add value and improve the company's operations. Evaluates and improves the information technology infrastructure using a systematic, disciplined approach for risk management effectiveness and for control and governance processes.

• Perform and lead all aspects of a full IT Audit with limited managerial guidance. Essential elements of an IT audit will include audit planning, walkthroughs, audit program development, risk and control identification, status reporting, work paper production, decision-making, and time budget management. These audits are related to cybersecurity, application reviews, IT infrastructure reviews, cloud security, API controls, Dev Ops platform reviews, databases reviews, operating system reviews, IT Governance, AI, and integrated business audits.
• Assist in the development and execution of comprehensive audit programs for the departments and businesses within the organization.
• Conduct an efficient and effective risk assessment with high complexity.
• Participate in system implementation projects with the goal of working with the customer on risk identification, life cycle compliance, and controls development.
• Develop accurate, meaningful, and complete audit work papers that adequately support the audit findings and the risk identified in the audit planning process. Audit work papers must meet IIA requirements.
• Develop issue based reports based on audit points, summarize findings and recommendations, and discuss with the audited business or department.
• Utilize security tools, data analytics, and AI to increase efficiencies in audit planning and testing.
• Validate and lead communication of audit issues with IT Audit and client management.
• Suggest recommendations on ways to improve audit work processes.

• Education
  • Bachelor's degree in Accounting, Management Information Systems, Computer Science, a related field, or the equivalent education and/or experience.
• Preferred certifications, licenses, and designations:
  Certified Information Systems Auditor (CISA) from ISACA;
  Certified Internal Auditor from the IIA;
  Certified Information Systems Security Professional from ISC2;
  Certified Public Accountant from the AICPA.
• Experience
  • 5 years of relevant and progressive professional experience.
• Experience
  • 2 years of relevant IT internal audit experience.
• Insurance or financial services experience preferred.
• Experience in leading projects and proven ability to drive results.
• Experience working with audit management system software, particularly Optro (formerly Audit Board).

• Planning:
  Follow work plans, established timelines, and predefined goals for assigned work; meet commitments on deadlines.
• Communication:
  Communicate activities, results, and observations with employees and management as appropriate.
• Cost Management:
  Identify areas for improvement in existing business practices; perform work thoroughly in a cost-efficient manner and at a high productivity level.
• Business Controls and Policies:
  Comply with all corporate policies and procedures; report any breakdowns in controls…