Senior IT Auditor

Job description

Job Title: Senior IT Auditor Location: Houston, TX (Hybrid 4:1) Reports To: IT Internal Audit Director Employment Type: Full time About Us Help us insure it. Tokio Marine HCC is a leading global specialty insurance group, backed by the strength and stability of the Tokio Marine Group. With more than 50 years of sustained growth and profitability, and offices across the United States, the United Kingdom, Europe, and other international locations, we offer more than 100 classes of specialty insurance—covering everything from the crops that feed us and the concerts that entertain us to rescuing travelers abroad. Guided by our Mind Over Risk philosophy, we empower clients to pursue opportunities with confidence while fostering a culture rooted in innovation, collaboration, and trust. Always Advancing , we embrace an entrepreneurial spirit; as Experts in Tomorrow , we anticipate what’s next; and by Reaching Out , we build genuine connections that enable our people and our business to thrive. Role Overview Under general supervision, performs and leads complex information technology audits that add value and improve the company's operations. Evaluates and improves the information technology infrastructure using a systematic, disciplined approach for risk management effectiveness and for control and governance processes. Key Responsibilities • Perform and lead all aspects of a full IT Audit with limited managerial guidance. Essential elements of an IT audit will include audit planning, walkthroughs, audit program development, risk and control identification, status reporting, work paper production, decision-making, and time budget management. These audits are related to cybersecurity, application reviews, IT infrastructure reviews, cloud security, API controls, DevOps platform reviews, databases reviews, operating system reviews, IT Governance, AI, and integrated business audits. • Assist in the development and execution of comprehensive audit programs for the departments and businesses within the organization. • Conduct an efficient and effective risk assessment with high complexity. • Participate in system implementation projects with the goal of working with the customer on risk identification, life cycle compliance, and controls development. • Develop accurate, meaningful, and complete audit work papers that adequately support the audit findings and the risk identified in the audit planning process. Audit workpapers must meet IIA requirements. • Develop issue based reports based on audit points, summarize findings and recommendations, and discuss with the audited business or department. • Utilize security tools, data analytics, and AI to increase efficiencies in audit planning and testing. • Validate and lead communication of audit issues with IT Audit and client management. • Suggest recommendations on ways to improve audit work processes. What You Bring Education • Bachelor's degree in Accounting, Management Information Systems, Computer Science, a related field, or the equivalent education and/or experience. Preferred certifications, licenses, and designations: Certified Information Systems Auditor (CISA) from ISACA; Certified Internal Auditor from the IIA; Certified Information Systems Security Professional from ISC2; Certified Public Accountant from the AICPA. Experience • 5 years of relevant and progressive professional experience. • 2 years of relevant IT internal audit experience. • Insurance or financial services experience preferred. • Experience in leading projects and proven ability to drive results. • Experience working with audit management system software, particularly Optro (formerly AuditBoard). Key Competencies • Planning: Follow work plans, established timelines, and predefined goals for assigned work; meet commitments on deadlines. • Communication: Communicate activities, results, and observations with employees and management as appropriate. • Cost Management: Identify areas for improvement in existing business practices; perform work thoroughly in a cost-efficient manner and at a high productivity level. • Business Controls and Policies: Comply with all corporate policies and procedures; report any breakdowns in controls to management; conduct all activities in a safe manner. • No people management responsibility. • Working knowledge of the Sarbanes-Oxley Act, internal auditing standards and Control Objectives for Information and Related Technologies (COBIT). • Possess and have ability to apply broad knowledge of principles, practices, and procedures. • Excellent written and verbal communications skills with an emphasis on confidentiality, tact, and diplomacy. • Exceptional organizational and analytical skills; demonstrated ability to manage multiple tasks simultaneously. • Knowledgeable of industry changes, legal updates, and technical developments related to applicable areas of the Company’s business to proactively respond to changing business environment. • Proficiency in leveraging security tools to validate vulnerability management compliance, and security related configurations. • Intermediate proficiency and experience using Microsoft Office package (Excel, Access, PowerPoint, Word). What We Offer • Competitive salary and comprehensive medical, vision, and dental benefit package, with eligibility beginning on your date of hire • Strong learning culture with ongoing development opportunities • Basic life and disability insurance • 401(k) plan with 6% company match • 20 days of PTO, two floating holidays, approximately 11 paid holidays, and volunteer time off • Paid parental leave • An opportunity to do meaningful work and love what you do Equal Opportunity Employer TMHCC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity, genetic information, marital status, medical condition, national origin, physical or mental disability, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations, and ordinances. #LI-SD1