The Senior Internal IT Auditor will provide comprehensive reviews of the Company’s IT processes, internal controls, and risk management practices. to ensure: • Effectiveness and efficiency of operations. • Reliability and integrity of financial and operational information. • Safeguarding of assets. • Compliance with laws, regulations, and contracts. Audits will generate recommendations to improve controls and processes, and will require follow up to ensure implementation.

ESSENTIAL DUTIES AND RESPONSIBILITIES

Conduct and lead IT related audits of Company departments, programs, or processes designed to ensure that an adequate internal control structure exists, risks are properly identified and managed, and process efficiency is improved.

• Prioritize and schedule audits based on the audit plan and the needs of the Company.
• Evaluate and appraise the functions and processes of each area or program with an emphasis on internal controls, risk exposure, and profitability.
• Design and execute appropriate objectives, scope, and work programs for audits based upon review of documented procedures and discussions with departmental management and supervisory executives.
• Independently evaluate and appraise processes, policies, and procedures of each department or program to ensure they are comprehensive and appropriate.
• Prepare a written report on the findings of each audit with recommendations for new or changed policies, procedures, internal controls, and/or process improvements.

Provide compliance support for Company departments in the areas of IT internal controls, risk and exposure and process improvements

• Ensure utilization of documented procedures within each department, assisting departments in development of written procedures as necessary.
• Engage in mediation process with audited department as to implementation; refer irreconcilable recommendations to departmental management.
• Follow up on approved recommendations within scheduled time frames.
• Participate in process and internal control improvement initiatives.

Provide expertise, project management, and guidance both inside and outside the Internal Audit function

• Serve as the IT audit specialist for integrated business audits.
• Functions as internal audit’s primary contact for the IT department.
• Reviews existing as well as new IT projects to ensure adequate risk management, internal controls, and compliance with regulatory authority.
• Consults with external auditors where appropriate.
• Assist with discrete risk evaluation and internal control functions as assigned.
• Identifies and assesses strategic risks.
• Participate in the development of the annual audit plan and internal audit risk assessment.

Maintain current professional practice knowledge and educate constituencies

• Participate in professional organizations relevant to the internal audit field
• Stay abreast of new technology related regulations and standards affecting the company and the insurance industry.
• Provide regular education about audit requirements, regulatory compliance, and process efficiency to customers and other constituencies as requested.

Requirements Bachelors degree (B.S. or B.A.) from a four year college or university in computer science, finance, accounting, business, insurance, or related field and a minimum of five to seven years relevant training and progressive experience in internal auditing including at least three years of experience in IT auditing or equivalent combination of education and experience. Knowledge of accounting principles (GAAP) and internal audit standards required. Valid California driver’s license. Certified Information Services Auditor (CISA) required. Certified Internal Auditor or Certified Information Systems Security Professional (CISSP) is a plus.