Senior IT Internal Auditor

Job Title: Senior IT Internal Auditor

Job Location: Remote with a preference for hybrid workers in Chicago area

Department: Internal Audit

Supervisor: Chief Internal Audit Executive

FLSA Status: Exempt

About Old Republic:

Old Republic International Corporation traces its beginnings back to 1923. Old Republic is one of America’s 50 largest shareholder-owned insurance businesses and currently ranks among the Fortune 500 list of the Nation’s biggest companies. Old Republic is primarily a commercial lines underwriter serving the insurance needs of a large number of organizations, including many of America’s leading industrial and financial services institutions.

Located on Michigan Avenue, in the heart of downtown Chicago (“The Loop”), the Old Republic Building (Headquarters) is close to several public transportation lines and parking locations. We are located at 307 N Michigan Avenue, Chicago, IL. This is a hybrid position.

IT Internal Auditor Summary:

Under direction of the Chief Internal Audit Executive, the IT Internal Auditor will assist with executing the IT Audit Plan to assist Old Republic International (ORI) in evaluating and improving the effectiveness of the Company’s IT risk management, control, and governance processes and develop effective data analytics throughout all audit projects. They will do this by conducting audits of the efficiency and effectiveness of information technology processes and controls against regulatory requirements and best practices and adding value by providing advisory/consulting services over changes in IT operational and security processes.

Your responsibilities:

• Assists the Chief Internal Audit Executive in completing the annual risk assessment and in developing the annual Audit Plan.
• Plans audits and advisory projects, including preparing audit announcements, drafting audit programs, preparing meeting agendas, and identifying relevant risks and controls, preparing evidence requests, conducting interviews, performing walkthroughs, assessing design, assessing operating effectiveness, documenting work papers, and preparing reporting.
• Develops strong positive relationships with IT contacts.
• Mentor and train staff auditors to ensure their professional development and individual success.
• Monitors issue closure status and provides information to support the preparation of the Internal Audit Status Reports for presentation to Internal Audit Leadership and the Audit Committee.
• Develops, grows, and optimizes use of automated tools available within the organization to utilize data analytics in projects to improve quality and efficiencies.
• Supports Internal Audit in special projects and investigations as needed.
• May travel up to 30%.

Your experience:

• Bachelor's degree in technology and/or business-related area of study.
• Minimum 3+ years’ experience in IT audit, in either internal audit, public accounting, compliance, or consulting with experience leading an IT audit function.
• CISA certification or evidence of progress towards.
• Basic level of understanding common accounting and auditing journals, and financial reports.
• Strong problem solving and analytical skills and ability to identify root cause.
• Ability to identify problems, gather relevant information, and identify potential conclusions to present to the Director of IT Internal Audit.
• Excellent research and communication skills.
• Proficient with the Microsoft Suite as well as Adobe programs.
• Ability to work collaboratively in a team environment and a self-starter independent when required.

Ideally, you have:

• Experience with IT processes or IT audits including cyber security, logging and monitoring, business continuity, vulnerability management, patch management, incident response, vendor management, system implementation, application integrity, data governance; and IT general controls such as access, change management, and operations.
• Experience with SOX compliance including IT general controls, application controls, and report.
• Understanding of relevant IT frameworks (such as ISO 27001, NIST 800-53, COBIT, and ITIL)
• Understanding of relevant regulations (such as NYDFS/NAIC, CCPA, PCI,
• General understanding of insurance and accounting concepts.
• Other related certifications such as CPA, CIA, CISSP, CRISC, CGEIT, or CPCU or willingness to obtain.
• Knowledge of systems software applications such as EAS, Duck Creek, and Clearwater; and system environments such as mainframe, iSeries, SQL, and Windows.
• Knowledge of IT infrastructure networks, routers, and firewalls.
• Knowledge of cloud security tools such as Okta, CrowdStrike, and CyberArk.
• Knowledge of audit workflow tools such as AuditBoard.

Old Republic International (ORI) is an Equal Opportunity Employer. ORI provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.