This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Carex is partnering with a company in the insurance industry to identify an IT Audit Manager / Senior Manager who will serve as a tactical leader within the Internal Audit function. This role is responsible for coordinating the development and execution of the internal audit plan in partnership with executive audit leadership while ensuring adequate staffing and resources to complete audit objectives. The position performs complex IT and cybersecurity audits, evaluates the effectiveness of internal controls, and helps strengthen enterprise risk management practices related to technology and information security. This hybrid role requires a minimum of 10 days per month working onsite. The position also provides leadership to the internal audit team and works closely with business stakeholders, regulatory bodies, and external auditors.
Job Responsibility:
Provide leadership and direction for the Internal Audit team, including coaching, professional development, performance management, and hiring decisions
Coordinate and execute the internal audit plan in collaboration with executive audit leadership to evaluate company policies, regulatory compliance, financial controls, and operational processes
Plan and perform complex IT and cybersecurity audits focused on systems, networks, and information security controls
Develop recommendations for control improvements and collaborate with management to establish remediation plans addressing identified risks and gaps
Monitor and validate remediation efforts related to audit findings and ensure corrective actions are implemented effectively
Guide and support audit staff in planning audit engagements, preparing workpapers, and coordinating with business stakeholders and regulatory agencies
Promote awareness and understanding of internal controls throughout the organization
Coordinate responses to audit-related requests from external auditors, regulators, third-party auditors, and other stakeholders
Manage and coordinate external security assessments such as penetration testing and related evaluations
Conduct third-party due diligence reviews and participate in special projects requested by executive leadership or governing committees
Implement process improvements that strengthen the internal audit function and increase operational efficiency
Encourage collaboration across teams and support initiatives that improve organizational processes and controls
Requirements:
Bachelor’s degree in Information Systems, Accounting, or a related field or equivalent experience
Minimum of 5 years of IT audit experience with demonstrated expertise in evaluating IT and cybersecurity controls
Must have at least 2 years of direct leadership or management experience guiding teams and developing talent
Experience planning and executing audits of IT infrastructure, security controls, and technology processes
Knowledge of internal control frameworks and regulatory environments, including GAAP, statutory accounting principles, and regulatory compliance expectations
Familiarity with SOC 2 reports and security frameworks such as NIST 800-53, HIPAA Security and Privacy Rules, and PCI standards
Technical understanding of enterprise infrastructure including AWS environments, Cisco networking equipment, Microsoft server operating systems, Active Directory, Exchange, Windows operating systems, and common office applications
Strong written and verbal communication skills with the ability to collaborate effectively across diverse teams
Excellent organizational, analytical, and problem-solving skills with the ability to manage multiple audit priorities
Experience with audit tools such as AuditBoard or ACL Analytics or similar
Nice to have:
Certified Internal Auditor (CIA) and Certified Information Systems Auditor (CISA) certifications preferred
Certified Public Accountant (CPA) certification preferred
Technical certifications such as AWS, Microsoft, Cisco, or similar credentials preferred