Senior IT Auditor
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections if posting has real specific content.
We need to parse the job posting.
Key info:
- Alternate Locations list: Charlotte, NC; Fort Wayne, IN; Greensboro, NC; Hartford, CT; Omaha, NE; Radnor, PA. Work Arrangement: Hybrid: Employee will work 3 days a week in a Lincoln office. Relocation assistance: is not available. Requisition #: 76667 (should not be heading, fold into short p or drop). We can include a short p with location and work arrangement maybe.
- The Role at a Glance: description: enthusiastic Senior IT Auditor self-starter, etc. This is like "About the role". So we can have About the role
with paragraph(s) summarizing.
- What You'll Be Doing: list of duties. That's responsibilities. Use - .
- What We’re Looking For: Must-haves and Nice-to-haves. This includes qualifications, skills, certifications, etc. We need to decide sections: Requirements, Qualifications, Skills. The instruction: use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can split.
We have Must-haves: expertise list, 4+ years experience, certifications, knowledge of frameworks, problem solving, relationship management, communication, bachelor's degree.
Nice-to-haves: interest in emerging tech, data analytics tools, experience in insurance/financial services, other certifications.
We could put Requirements as must-haves (experience, education, certifications). Qualifications maybe same? But we need to avoid duplication. Perhaps we can have:
-
Requirements
: list of must-haves (experience, degree, certifications, knowledge frameworks, skills).
- Skills
: list of technical expertise (cybersecurity, hardware, etc.) and soft skills.
But we need to ensure we don't create sections with filler. We have real content.
Also Benefits: posting includes "What’s in it for you:" list: Clearly defined career tracks, leadership development, PTO/parental leave, Competitive 401K and employee benefits, Free financial counseling, health coaching and employee assistance program, Tuition assistance program, Work arrangements that work for you, Effective productivity/technology tools and training. That's benefits.
Pay: The pay range is given: $94,875 - $151,800 with anticipated pay for new hires between min and midpoint etc. So we have pay info. So include Pay
with paragraph.
Schedule: Work Arrangement: Hybrid: Employee will work 3 days a week in a Lincoln office. That's schedule info. So include Schedule
with paragraph.
We also have location info: Alternate Locations list and work arrangement. Could be part of Schedule or a separate section? Not in list of headings but we could include location in a short p under maybe About the role or separate? The instruction: do NOT put Job ID/requisition numbers as headings — fold minor metadata into a short or drop it. So we can include location and work arrangement in a short p maybe under About the role or separate? Probably better to include a short p after the heading About the role that includes location and work arrangement.
We must not repeat the job title as a heading. The job title is Senior IT Auditor (implied). Not to repeat.
We must remove boilerplate: EEO, fraud warnings, etc.
We need to preserve all substantive information.
Let's extract details:
About the role (The Role at a Glance):
- Seeking enthusiastic Senior IT Auditor self-starter initiative-driven, ready to take ownership of critical audit processes, thrive in dynamic fast-paced environment.
- Perfect for someone inclined to leverage IT Audit and technology expertise in internal audit environment, focusing on in-depth review of IT systems, cybersecurity, and data integrity controls.
- As Sr. IT Auditor, will independently manage IT audits, perform advisory reviews, support integrated audits with broader Internal Audit team.
- Passionate about driving improvements and ensuring robust IT governance.
We can combine into a paragraph.
Responsibilities (What You'll Be Doing):
List items:
- Plan audit engagements, identify inherent risks and control objectives, perform risk assessments and identify IT-related risks and vulnerabilities based on business objectives, regulatory requirements, and emerging threats.
- Conduct end-to-end audit engagements, perform detailed testing, facilitate meetings, and document and review the results of testing according to internal audit methodology.
- Perform advisory reviews by assessing project governance, risks, controls, and implementation activities.
- Support integrated audits in collaboration with the broader Internal Audit team by evaluating IT risks and controls relevant to the audit objectives.
- Demonstrate expertise in IT disciplines (but not limited to): cybersecurity, hardware, networking, firewalls, servers, database management systems, operating systems, disaster recovery, cloud technologies, identity and access management, incident management, vulnerability management, risk assessment, IT governance, and system development.
- Provide IT subject matter expertise, audit knowledge, and professional judgment to assess a broad range of business processes, risks, and control objectives.
- Prepare detailed audit reports outlining findings, risk criteria, and recommendations for management, lead audit closing meetings, and ensure all audit documentation is finalized and conforms with department policies and standards.
- Monitor and report on issue remediation, retesting, and closure status.
- Identify opportunities for continuous improvement and stay informed about emerging IT and industry trends, including developments in AI, and share those insights with team members.
- Manage co-source partner(s) and ensure they are adhering to LF IA methodology, review deliverables, and hold them accountable for budget and scope.
- Partner with IT infrastructure, security, risk management, and other control groups within the company to establish strong working relationships while maintaining independence.
- Collaborate effectively and build strong relationships across Internal Audit, the department, and the broader organization while expanding knowledge of the insurance industry, products, and operations.
- Perform duties in compliance with all state and federal regulations, as well as company policies and procedures.
We need to keep all.
Requirements (Must-haves):
- Expertise in IT disciplines (but not limited to): cybersecurity, hardware, networking, cloud environments, firewalls, servers, database management systems, operating systems, disaster recovery, identity and access management, incident management, vulnerability management, risk assessment, IT governance, and system development.
- 4+ years of experience in IT audit and/or information technology that directly aligns with the specific responsibilities for this position.
- Certifications/Licensures: CISA, CISSP and/or CIA.
- Knowledge of internal controls, business / information technology risk, regulatory and compliance frameworks (ITIL, NIST, COBIT, NY DFS, CCPA/CPRA, SEC, PCI DSS etc.), project management, and audit techniques.
- Demonstrates problem solving skills, root-cause analysis, and critical-thinking skills to assess complex IT environments and identify control gaps.
- Demonstrates relationship management skills and organizational skills and can independently manage engagements and prioritize workload.
- Excellent oral and written communication skills.
- 4 Year / Bachelor's degree in Information Technology, Computer Science, or another related IT field.
Nice-to-haves could be part of Skills or Qualifications? Perhaps we can have a Skills section that includes both must-have skills and nice-to-haves? But we already have Skills heading maybe for technical expertise. However we have a lot of technical expertise already in responsibilities and must-haves. Could create a Skills section listing technical and soft skills.
But we need to avoid duplication. Perhaps we can have:
- Requirements: experience, education, certifications.
- Skills: technical expertise list (cybersecurity, hardware, networking, etc.) plus soft skills (problem solving, relationship management, communication).
- Qualifications: maybe not needed separately.
But the instruction list includes Requirements, Qualifications, Skills as possible headings. We can choose to use Requirements and Skills, and maybe Qualifications if we have distinct content like degree etc. But degree could be under Requirements.
Let's decide:
About the role
paragraph with description and location/work arrangement maybe.
Responsibilities
ul.
Requirements
ul (must-haves: experience, degree, certifications, knowledge frameworks, problem solving, relationship management, communication).
Skills
ul (technical expertise list: cybersecurity, hardware, networking, cloud environments, firewalls, servers, database management systems, operating systems, disaster recovery, identity and access management, incident management, vulnerability management, risk assessment, IT governance, system development; plus maybe data analytics tools, interest in AI, insurance industry experience as nice-to-haves? Actually those are nice-to-haves; we could include them under Skills as optional.)
But we need to ensure we don't lose nice-to-haves: interest in emerging technologies including AI, experience with data analytics tools, experience in insurance or financial services industry, other related certifications (PMP, GSNA, CRISC, CCSP, CISM, etc.). We could put them under Skills as "Nice-to-haves" maybe as a sublist? But we cannot create subheadings not allowed? We can just include them as list items.
Better: Have Skills section include both required and nice-to-haves technical skills, but we must not invent content. We'll list them as separate bullet points.
Alternatively, we could have a separate Qualifications
for nice-to-haves? But qualifications usually refer to education/certifications. Nice-to-haves are extra qualifications.
Given the instruction to prefer a few substantive sections over many thin ones, we could combine Requirements and Qualifications into one section called Requirements (includes must-haves and nice-to-haves). But then we lose distinction.
Maybe better: Use Requirements for must-haves, Skills for technical expertise, and Benefits, Pay, Schedule as separate.
We'll include nice-to-haves under Skills as additional bullet points prefixed with "(Nice-to-have)"? That would be adding text not in original? It's okay to clarify but might be considered adding. Safer to just list them as separate bullet points without labeling; they are still part of the posting.
Thus Skills bullets will include:
- Expertise in IT disciplines: cybersecurity, hardware, networking, cloud environments, firewalls, servers, database management systems, operating systems, disaster recovery, identity and access management, incident management, vulnerability management, risk assessment, IT governance, system development.
- Experience with data analytics tools and techniques.
- Interest in emerging technologies, including AI, and how they may impact business risk.
- Experience in the insurance or financial services industry.
- Other related certifications (PMP, GSNA, CRISC, CCSP, CISM, etc.).
But note that the first bullet duplicates some of the must-haves expertise list; but it's okay.
Now Benefits: list from "What’s in it for you:":
- Clearly defined career tracks and job levels, along with associated behaviors for each of Lincoln's core values and leadership attributes
- Leadership development and virtual training opportunities
- PTO/parental leave
- Competitive 401K and employee benefits
- Free financial counseling, health coaching and employee assistance program
- Tuition assistance program
- Work arrangements that work for you
- Effective productivity/technology tools and training
Pay: paragraph with pay range details.
Schedule: paragraph with hybrid work arrangement: Employee will work 3 days a week in a Lincoln office. Also mention alternate locations list? Could include location info in schedule or about the role. Let's include location list in a short p under About the role or separate? Since we have schedule heading, we can include location info there as well: "Alternate locations: Charlotte, NC; Fort Wayne, IN; Greensboro, NC; Hartford, CT; Omaha, NE; Radnor, PA. Work arrangement: Hybrid – employee works 3 days a week in a Lincoln office."
Relocation assistance: is not available for this opportunity. That's
Requirements
: list of must-haves (experience, degree, certifications, knowledge frameworks, skills). -Skills
: list of technical expertise (cybersecurity, hardware, etc.) and soft skills. But we need to ensure we don't create sections with filler. We have real content. Also Benefits: posting includes "What’s in it for you:" list: Clearly defined career tracks, leadership development, PTO/parental leave, Competitive 401K and employee benefits, Free financial counseling, health coaching and employee assistance program, Tuition assistance program, Work arrangements that work for you, Effective productivity/technology tools and training. That's benefits. Pay: The pay range is given: $94,875 - $151,800 with anticipated pay for new hires between min and midpoint etc. So we have pay info. So includePay
with paragraph. Schedule: Work Arrangement: Hybrid: Employee will work 3 days a week in a Lincoln office. That's schedule info. So includeSchedule
with paragraph. We also have location info: Alternate Locations list and work arrangement. Could be part of Schedule or a separate section? Not in list of headings but we could include location in a short p under maybe About the role or separate? The instruction: do NOT put Job ID/requisition numbers as headings — fold minor metadata into a shortor drop it. So we can include location and work arrangement in a short p maybe under About the role or separate? Probably better to include a short p after the heading About the role that includes location and work arrangement. We must not repeat the job title as a heading. The job title is Senior IT Auditor (implied). Not to repeat. We must remove boilerplate: EEO, fraud warnings, etc. We need to preserve all substantive information. Let's extract details: About the role (The Role at a Glance): - Seeking enthusiastic Senior IT Auditor self-starter initiative-driven, ready to take ownership of critical audit processes, thrive in dynamic fast-paced environment. - Perfect for someone inclined to leverage IT Audit and technology expertise in internal audit environment, focusing on in-depth review of IT systems, cybersecurity, and data integrity controls. - As Sr. IT Auditor, will independently manage IT audits, perform advisory reviews, support integrated audits with broader Internal Audit team. - Passionate about driving improvements and ensuring robust IT governance. We can combine into a paragraph. Responsibilities (What You'll Be Doing): List items: - Plan audit engagements, identify inherent risks and control objectives, perform risk assessments and identify IT-related risks and vulnerabilities based on business objectives, regulatory requirements, and emerging threats. - Conduct end-to-end audit engagements, perform detailed testing, facilitate meetings, and document and review the results of testing according to internal audit methodology. - Perform advisory reviews by assessing project governance, risks, controls, and implementation activities. - Support integrated audits in collaboration with the broader Internal Audit team by evaluating IT risks and controls relevant to the audit objectives. - Demonstrate expertise in IT disciplines (but not limited to): cybersecurity, hardware, networking, firewalls, servers, database management systems, operating systems, disaster recovery, cloud technologies, identity and access management, incident management, vulnerability management, risk assessment, IT governance, and system development. - Provide IT subject matter expertise, audit knowledge, and professional judgment to assess a broad range of business processes, risks, and control objectives. - Prepare detailed audit reports outlining findings, risk criteria, and recommendations for management, lead audit closing meetings, and ensure all audit documentation is finalized and conforms with department policies and standards. - Monitor and report on issue remediation, retesting, and closure status. - Identify opportunities for continuous improvement and stay informed about emerging IT and industry trends, including developments in AI, and share those insights with team members. - Manage co-source partner(s) and ensure they are adhering to LF IA methodology, review deliverables, and hold them accountable for budget and scope. - Partner with IT infrastructure, security, risk management, and other control groups within the company to establish strong working relationships while maintaining independence. - Collaborate effectively and build strong relationships across Internal Audit, the department, and the broader organization while expanding knowledge of the insurance industry, products, and operations. - Perform duties in compliance with all state and federal regulations, as well as company policies and procedures. We need to keep all. Requirements (Must-haves): - Expertise in IT disciplines (but not limited to): cybersecurity, hardware, networking, cloud environments, firewalls, servers, database management systems, operating systems, disaster recovery, identity and access management, incident management, vulnerability management, risk assessment, IT governance, and system development. - 4+ years of experience in IT audit and/or information technology that directly aligns with the specific responsibilities for this position. - Certifications/Licensures: CISA, CISSP and/or CIA. - Knowledge of internal controls, business / information technology risk, regulatory and compliance frameworks (ITIL, NIST, COBIT, NY DFS, CCPA/CPRA, SEC, PCI DSS etc.), project management, and audit techniques. - Demonstrates problem solving skills, root-cause analysis, and critical-thinking skills to assess complex IT environments and identify control gaps. - Demonstrates relationship management skills and organizational skills and can independently manage engagements and prioritize workload. - Excellent oral and written communication skills. - 4 Year / Bachelor's degree in Information Technology, Computer Science, or another related IT field. Nice-to-haves could be part of Skills or Qualifications? Perhaps we can have a Skills section that includes both must-have skills and nice-to-haves? But we already have Skills heading maybe for technical expertise. However we have a lot of technical expertise already in responsibilities and must-haves. Could create a Skills section listing technical and soft skills. But we need to avoid duplication. Perhaps we can have: - Requirements: experience, education, certifications. - Skills: technical expertise list (cybersecurity, hardware, networking, etc.) plus soft skills (problem solving, relationship management, communication). - Qualifications: maybe not needed separately. But the instruction list includes Requirements, Qualifications, Skills as possible headings. We can choose to use Requirements and Skills, and maybe Qualifications if we have distinct content like degree etc. But degree could be under Requirements. Let's decide: