Senior IT Auditor

Job Title: Senior IT Auditor
Location: Houston TX (Hybrid 4:1)
Reports To: IT Internal Audit Director
Employment Type: Full time

About Us

Help us insure it. Tokio Marine HCC is a leading global specialty insurance group backed by the strength and stability of the Tokio Marine Group. With more than 50 years of sustained growth and profitability and offices across the United States the United Kingdom Europe and other international locations we offer more than 100 classes of specialty insurancecovering everything from the crops that feed us and the concerts that entertain us to rescuing travelers abroad.

Guided by our Mind Over Risk philosophy we empower clients to pursue opportunities with confidence while fostering a culture rooted in innovation collaboration and trust. Always Advancing we embrace an entrepreneurial spirit; as Experts in Tomorrow we anticipate whats next; and by Reaching Out we build genuine connections that enable our people and our business to thrive.

Role Overview

Under general supervision performs and leads complex information technology audits that add value and improve the companys operations. Evaluates and improves the information technology infrastructure using a systematic disciplined approach for risk management effectiveness and for control and governance processes.

Key Responsibilities

• Perform and lead all aspects of a full IT Audit with limited managerial guidance. Essential elements of an IT audit will include audit planning walkthroughs audit program development risk and control identification status reporting work paper production decision-making and time budget management. These audits are related to cybersecurity application reviews IT infrastructure reviews cloud security API controls DevOps platform reviews databases reviews operating system reviews IT Governance AI and integrated business audits.
• Assist in the development and execution of comprehensive audit programs for the departments and businesses within the organization.
• Conduct an efficient and effective risk assessment with high complexity.
• Participate in system implementation projects with the goal of working with the customer on risk identification life cycle compliance and controls development.
• Develop accurate meaningful and complete audit work papers that adequately support the audit findings and the risk identified in the audit planning process. Audit workpapers must meet IIA requirements.
• Develop issue based reports based on audit points summarize findings and recommendations and discuss with the audited business or department.
• Utilize security tools data analytics and AI to increase efficiencies in audit planning and testing.
• Validate and lead communication of audit issues with IT Audit and client management.
• Suggest recommendations on ways to improve audit work processes.

What You Bring

Education

• Bachelors degree in Accounting Management Information Systems Computer Science a related field or the equivalent education and/or experience.
• Preferred certifications licenses and designations: Certified Information Systems Auditor (CISA) from ISACA; Certified Internal Auditor from the IIA; Certified Information Systems Security Professional from ISC2; Certified Public Accountant from the AICPA.

Experience

• 5 years of relevant and progressive professional experience.
• 2 years of relevant IT internal audit experience.
• Insurance or financial services experience preferred.
• Experience in leading projects and proven ability to drive results.
• Experience working with audit management system software particularly Optro (formerly AuditBoard).

Key Competencies

• Planning: Follow work plans established timelines and predefined goals for assigned work; meet commitments on deadlines.
• Communication: Communicate activities results and observations with employees and management as appropriate.
• Cost Management: Identify areas for improvement in existing business practices; perform work thoroughly in a cost-efficient manner and at a high productivity level.
• Business Controls and Policies: Comply with all corporate policies and procedures; report any breakdowns in controls to management; conduct all activities in a safe manner.
• No people management responsibility.
• Working knowledge of the Sarbanes-Oxley Act internal auditing standards and Control Objectives for Information and Related Technologies (COBIT).
• Possess and have ability to apply broad knowledge of principles practices and procedures.
• Excellent written and verbal communications skills with an emphasis on confidentiality tact and diplomacy.
• Exceptional organizational and analytical skills; demonstrated ability to manage multiple tasks simultaneously.
• Knowledgeable of industry changes legal updates and technical developments related to applicable areas of the Companys business to proactively respond to changing business environment.
• Proficiency in leveraging security tools to validate vulnerability management compliance and security related configurations.
• Intermediate proficiency and experience using Microsoft Office package (Excel Access PowerPoint Word).

What We Offer

• Competitive salary and comprehensive medical vision and dental benefit package with eligibility beginning on your date of hire
• Strong learning culture with ongoing development opportunities
• Basic life and disability insurance
• 401(k) plan with 6% company match
• 20 days of PTO two floating holidays approximately 11 paid holidays and volunteer time off
• Paid parental leave
• An opportunity to do meaningful work and love what you do

Equal Opportunity Employer

TMHCC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age ancestry citizenship color family or medical care leave gender identity genetic information marital status medical condition national origin physical or mental disability protected veteran or military status race ethnicity religion sex (including pregnancy) sexual orientation or any other characteristic protected by applicable local laws regulations and ordinances.

#LI-SD1