IT Audit Supervisor

Welcome to Gallagher - a global community of people who bring bold ideas, deep expertise, and a shared commitment to doing what’s right. We help clients navigate complexity with confidence by empowering businesses, communities, and individuals to thrive. At Gallagher, you’ll find more than a job; you’ll find a culture built on trust, driven by collaboration, and sustained by the belief that we’re better together.

Whether you join us in a client-facing role or as part of our brokerage division, our benefits and HR consulting division, or our corporate team, you’ll have the opportunity to grow your career, make an impact, and be part of something bigger. Experience a workplace where you’re encouraged to be yourself, supported to succeed, and inspired to keep learning. That’s what it means to live The Gallagher Way.

The incumbent will perform and direct audits of highly complex information technology risks, systems, and controls. In addition, this individual will be expected to mentor, coach, and provide direction to audit staff while leading IT audit engagements across a broad range of technology domains, including IT General Controls (ITGCs), IT Application Controls (ITACs), cybersecurity, infrastructure, cloud environments, application controls, system implementations, data governance, and regulatory compliance.

Perform and coordinate IT audit engagements of the highest level of complexity. Plan, execute, and oversee risk-based audits to evaluate the design and operating effectiveness of technology controls and identify opportunities to strengthen the organization's control environment. Prepare audit work papers, analyses, and supporting documentation to ensure compliance with departmental standards and professional auditing requirements. Maintain complete, accurate, and logically organized audit documentation that clearly supports audit conclusions.

Apply advanced IT audit knowledge and professional judgment to resolve complex technical audit matters, including issues escalated by staff. Design audit programs and testing strategies to achieve audit objectives established by Internal Audit management. Use sound judgment, critical thinking, and creativity when partnering with management and stakeholders to develop practical, risk-based recommendations that address control deficiencies and process improvement opportunities.

Evaluate risks associated with information systems, cybersecurity practices, application development, technology operations, third-party service providers, and emerging technologies. Coordinate and draft audit observations, recommendations, and management action plans, including recommendations related to technology policies, procedures, governance practices, and system controls. Prepare audit reports and communicate results to senior management and key stakeholders.

Exercise independent judgment in determining audit scope, risk coverage, testing approaches, and areas of emphasis. Perform remediation follow-up activities to assess the adequacy and timely implementation of corrective action plans. Monitor the status of open audit issues and validate the effectiveness of remediation efforts.

Contribute to the development of the IT audit team through coaching, mentoring, on-the-job training, and performance feedback. Participate in developing departmental training materials to ensure team members remain current on IT audit methodologies, cybersecurity risks, technology trends, regulatory requirements, and industry best practices.

Identify opportunities to improve audit methodologies, data analytics capabilities, automation, and departmental processes. Assist in the development and maintenance of Internal Audit policies, procedures,…