Senior IT Auditor

Location: Houston, TX (Hybrid 4:1). Reports to: IT Internal Audit Director. Employment type: Full time.

About the role

Under general supervision, performs and leads complex information technology audits that add value and improve the company's operations. Evaluates and improves the information technology infrastructure using a systematic, disciplined approach for risk‑management effectiveness and for control and governance processes.

Responsibilities

• Perform and lead all aspects of a full IT audit with limited managerial guidance, including audit planning, walkthroughs, audit program development, risk and control identification, status reporting, work‑paper production, decision‑making, and time‑budget management.
• Audit areas include cybersecurity, application reviews, IT infrastructure reviews, cloud security, API controls, DevOps platform reviews, database reviews, operating‑system reviews, IT governance, AI, and integrated business audits.
• Assist in developing and executing comprehensive audit programs for departments and businesses across the organization.
• Conduct efficient, high‑complexity risk assessments.
• Participate in system implementation projects to identify risks, ensure life‑cycle compliance, and develop controls.
• Develop accurate, meaningful, and complete audit work papers that meet IIA requirements and support audit findings.
• Prepare issue‑based reports summarizing findings and recommendations, and discuss them with the audited business or department.
• Utilize security tools, data analytics, and AI to increase efficiencies in audit planning and testing.
• Validate and lead communication of audit issues with IT Audit and client management.
• Suggest recommendations to improve audit work processes.

Requirements

• Bachelor’s degree in Accounting, Management Information Systems, Computer Science, a related field, or equivalent education/experience.
• Preferred certifications: Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Information Systems Security Professional (CISSP), Certified Public Accountant (CPA).
• 5 + years of relevant and progressive professional experience, including at least 2 years of IT internal audit experience.
• Insurance or financial‑services experience preferred.
• Proven ability to lead projects and drive results.
• Experience with audit‑management system software, particularly Optro (formerly AuditBoard).

Key Competencies

• Planning: Follow work plans, timelines, and predefined goals; meet commitments on deadlines.
• Communication: Effectively convey activities, results, and observations to employees and management.
• Cost Management: Identify improvement areas, perform work thoroughly and cost‑efficiently, maintain high productivity.
• Business Controls and Policies: Comply with corporate policies, report control breakdowns, conduct activities safely.
• No people‑management responsibility.
• Working knowledge of the Sarbanes‑Oxley Act, internal‑auditing standards, and COBIT.
• Broad knowledge of principles, practices, and procedures; excellent written and verbal communication with emphasis on confidentiality, tact, and diplomacy.
• Exceptional organizational and analytical skills; ability to manage multiple tasks simultaneously.
• Awareness of industry changes, legal updates, and technical developments to proactively respond to a changing business environment.
• Proficiency in leveraging security tools to validate vulnerability‑management compliance and security‑related configurations.
• Intermediate proficiency with Microsoft Office (Excel, Access, PowerPoint, Word).

Benefits

• Competitive salary and comprehensive medical, vision, and dental benefit package (eligibility begins on date of hire).
• Strong learning culture with ongoing development opportunities.
• Basic life and disability insurance.
• 401(k) plan with 6 % company match.
• 20 days of PTO, two floating holidays, approximately 11 paid holidays, and volunteer time off.
• Paid parental leave.
• Opportunity to do meaningful work and love what you do.

Pay

Competitive salary.

Schedule

Full‑time hybrid schedule (approximately four days on‑site, one day remote) in Houston, TX.