Internal IT Auditor - SOX

Company:

NICO National Indemnity Company Want to work for a company with unparalleled financial strength and stability that offers “large company” benefits with an exciting, friendly, and “small company” atmosphere? Our companies, as members of the Berkshire Hathaway group of Insurance Companies, provides opportunities for professionals interested in just that.

The IT Internal Auditor - SOX supports the evaluation and testing of Information Technology (IT) controls that help ensure reliable financial reporting, regulatory compliance, and effective IT governance across the National Indemnity (NICO) Group. This role partners with Internal Audit, Enterprise Risk Management, Information Technology, and business stakeholders to assess IT risks, perform Sarbanes-Oxley (SOX) compliance testing, monitor remediation activities, and recommend control and process improvements that strengthen the organization's overall control environment.

This position will be with National Indemnity Company in Omaha, NE and is eligible for Hybrid work after a period of in-office training. This position is NOT eligible for employer visa sponsorship.

What Will You Do?

Support ongoing IT audit and SOX compliance initiatives across multiple business units and legal entities within the NICO Group Perform risk-based testing of IT General Controls (ITGCs), automated controls, and key reports that support financial reporting objectives

Execute SOX testing activities, including walkthroughs, control evaluations, evidence reviews, and documentation of testing results

Partner with management and control owners to maintain compliance with SOX requirements and support audit activities

Monitor and validate remediation efforts resulting from internal audits, external audits, SOX testing, risk assessments, and management self-assessments

Prepare clear, concise, and professional audit documentation, reports, and recommendations

Assist with IT risk assessments, evaluation of key risk indicators, and reporting on the effectiveness of the IT control environment

Identify opportunities to improve IT processes, internal controls, and governance practices, and recommend practical solutions

Support the development of risk-based audit plans by identifying, scoping, and prioritizing IT systems, applications, processes, and controls for review

Stay current on emerging technologies, cybersecurity risks, regulatory requirements, audit practices, and industry frameworks relevant to IT governance and compliance

What Are We Looking For?

Bachelor's degree in a related field or equivalent work experience

Two or more years of work experience

Knowledge of Sarbanes-Oxley (SOX) requirements and objectives

Knowledge of Information Technology General Controls (ITGCs)
Personal computer proficiency and experience with basic applications such as Excel and Word Preferred Knowledge:

National Institute of Standards and Technology (NIST) frameworks

Committee of Sponsoring Organizations of the Treadway Commission (COSO) Internal Control Framework New York Department of Financial Services (NYDFS) 23 NYCRR Part 500 Regulation Experience supporting IT audits, SOX compliance, risk management, or internal controls initiatives

Professional certifications such as CISA, CIA, or CPAWho Would Excel in This Role?

Someone who communicates clearly and professionally and can effectively explain technical, risk, and control concepts to both technical and non-technical audiencesA detail-oriented professional who takes pride in producing accurate, high-quality audit documentation and work products

An organized self-starter who can manage multiple audit engagements, competing priorities, and deadlines simultaneouslyA collaborative teammate who builds strong relationships with management, business…