IT Internal Controls Analyst

Essential Duties & Responsibilities

• Serve as a subject matter expert on IT internal controls, providing guidance and education to IT and business partners
• Assist in the testing of the IT SOX controls, including IT general controls (ITGCs), automated controls (ITACs), and key report testing
• Lead walkthroughs of key business processes and underlying technology, collaborating with IT and business process owners to design effective and efficient controls
• Create and maintain detailed IT SOX documentation, including IT process flowcharts, risk and control matrices, and testing workpapers
• Evaluate IT control deficiencies to understand root cause and impact and work with process and control owners to develop and track effective remediation plans
• Evaluate controls and processes for opportunities to leverage automation and new technologies, reducing manual effort and improving control effectiveness
• Aid in the execution of the audit plan, including the performance of risk assessments and coordination of internal audit testing
• Serve as a liaison for external auditors and support documentation requests

Job Specifications

• Bachelor's degree in management information systems, computer science, accounting or a related field
• Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), or Certified Internal Auditor (CIA) is strongly preferred
• 1-3 years of experience in IT audit, IT internal controls, or public accounting with a focus on technology, preferably within the insurance or financial services industry
• Experience supporting a SOX compliance program, including participation in IT risk assessments, control design, and documentation
• Experience with testing automated controls and key reports is a plus
• Experience in a public company environment is a plus

Knowledge, Skills & Abilities

• Strong knowledge of the Sarbanes-Oxley Act, COSO framework, and US GAAP as they relate to IT controls
• Exceptional analytical skills with the ability to identify, analyze, and interpret complex IT and business processes and risks
• Proven ability to drive IT process improvements and implement automated control solutions
• Excellent communication skills, both written and oral, with the ability to effectively present complex IT risk information to all levels of the organization
• Strong leadership, interpersonal, and collaborative skills to influence change across IT and business teams
• Strong understanding of cyber security and information security frameworks (e.g., NIST, COBIT)

Pay

• The base salary range for this position is $71,598 - $94,396 annually
• Individual pay within this range will be determined based on a variety of factors, including relevant experience, education, certifications, skills, internal equity, geography and market data
• In addition to base salary, UFG Insurance offers a comprehensive total rewards package that includes:
• Annual incentive compensation
• Medical, dental, vision & life insurance
• Accident, critical illness & short-term disability insurance
• Retail plans with employer contributions
• Generous time-off program
• Programs designed to support the employee well-being and financial security