About This Role
The IT Auditor or Senior IT Auditor evaluates technology risks and controls across systems and business operations, strengthening the control environment and providing objective insights to leaders. This role involves working across areas such as IT general controls, cybersecurity, cloud computing, application controls, data governance, and third-party technology risk.
Responsibilities
- Plan and perform risk-based IT audits, from risk assessment and testing through documentation and reporting
- Evaluate IT general controls, cybersecurity controls, application controls and system development lifecycle processes
- Assess cloud environments, third-party technology providers and emerging technology risks
- Use data analytics to identify trends, anomalies and potential control weaknesses
- Translate technical risks into clear, business-focused insights and actionable recommendations
- Communicate audit findings and recommendations to management and other stakeholders
- Provide risk and control perspectives on system implementations, cloud migrations, process improvements and emerging technologies, including AI and automation
- Follow up on audit findings to validate that corrective actions effectively address identified risks
- Take a leadership role in enterprise technology risk assessments, IT audit activities, audit analytics and automation initiatives, and Internal Audit’s participation in technology projects (Senior level only)
Requirements
- Bachelor’s degree in information systems, computer science, accounting, cybersecurity, data analytics or a related field
- Experience in IT audit, IT risk, cybersecurity, public accounting or a related field
- Typically 2-5 years of experience for the IT Auditor level
- Typically 5-plus years of experience for the Senior IT Auditor level
- Knowledge of IT controls, cybersecurity principles and risk assessment methodologies
- Familiarity with frameworks such as NIST, COBIT, ISO 27001 or CIS Controls
- Strong analytical, critical-thinking and communication skills
Nice to have:
- Experience with cloud environments and data analytics tools such as SQL, Power BI, Alteryx, Tableau or Excel
- A professional certification such as CISA, CISSP, CIA or CPA (preferred for IT Auditor level)
Required:
- A professional certification such as CISA, CISSP, CIA or CPA (Senior IT Auditor level only)
About the Company
Physicians Mutual is looking for an IT Auditor or Senior IT Auditor to join its Internal Audit team.
