Lead Internal Controls Analyst - IT

Summary

The Lead Internal Controls - IT partners with leaders and stakeholders across the organization to provide dedicated financial risk and controls expertise.  The Lead will be a trusted advisor to business areas to ensure the health and efficiency of the internal control environment.  This role will make valuable recommendations to improve processes and to strengthen the design and execution of controls.  The Lead plays a key role in preparing the functional areas for the internal and external audit processes.  In addition, this role will serve as the Team Lead for other employees on the team and subject matter expert for all projects.

Organization

The Lead Internal Controls - IT will report directly to the Director, Internal Controls, but be embedded within assigned functional teams in order to build partnership and trust with those teams.

Duties and Responsibilities

• Identify risks in the IT related financial reporting process and ensure appropriate risk-based controls are in place to mitigate those risks
• Evaluating the effectiveness of internal controls over data management, application processing, physical and logical security, systems acquisition and development, system and network infrastructure, change management, computer operations, and production support
• Provide consultation and advice to IT functional teams in the design and execution of controls
• Assessing business data and IT infrastructure for key information security and cybersecurity risks -
• Communicate with and educate process owners on the benefit and importance of internal controls
• Take a hands-on approach in the development of control documentation. This position will often prepare drafts of control language and attributes for management’s review
• Develop a detailed understanding of business processes and prepare various documents to communicate understanding to team members and internal/external auditors
• Act as a lead point of contact with internal/external audit to resolve questions and issues with respect to internal controls.
• Develop strong working relationships with process owners and their teams
• Drive continued development and building of a risk management culture through coordination of employee awareness and training programs that emphasize the importance of risk management
• Partner with process and control owners in control gap remediation
• Make recommendations on the decommissioning of obsolete controls associated with the significant changes in process due to the Modernization initiative
• Serve as the Internal Controls Team Lead/SME for active, firmwide projects
• Responsible for training new team members and ensuring the entire team is cross-trained on all routine tasks
• Make recommendations on potential areas for efficiency and/or automation in the current control environment and work hand in hand with the business to make related updates

Experience and Education Requirements

• Bachelor’s degree in Accounting, Information Systems, or Information Technology

• 5-7 years of progressive experience auditing internal controls, information technology, or IT risk management preferably in public accounting
• Advanced knowledge of IT general controls and IT application controls that support financial and operational business processes
• Advanced knowledge of Sarbanes/Oxley (SOX) and NAIC Model Audit Rule (MAR)
• CPA, CISA and/or CIA preferred
• Insurance industry experience