IT Audit Director

IT Audit Director

You have a clear vision of where your career can go. And we have the leadership to help you get there. At CNA, we strive to create a culture in which people know they matter and are part of something important, ensuring the abilities of all employees are used to their fullest potential.

About CNAAt CNA, we focus on what we do best - providing insurance solutions that allow our customers to better manage their risks and grow profitably. We use our expertise to continually evolve our products and services to anticipate and address our customers' needs. Our broad portfolio enables us to respond to a wide range of business risks while focusing on the specialized needs of our insureds in construction, manufacturing, technology, healthcare, professional services, financial institutions and small business.

About Internal AuditThe Global Internal Audit Division supports CNA's corporate strategy of maintaining top quartile underwriting company by enhancing and protecting organizational value through risk-based and objective assurance and advisory engagements. We are analysts, problem-solvers, reporters, explorers as well as trusted advisors and catalysts. We strive to maintain an agile and responsive audit program that focuses on our company's highest risks and builds trust with all of our stakeholders. We invest in our people, are strengthened by diversity and are committed to inclusion. As the third line of defense for CNA, the scope of our work spans across all types of risk: financial, compliance, reputational and operational.

Position DescriptionWe are searching for an IT Audit Director to join our team who thrives in a collaborative environment and shares our commitment to providing valuable risk management, governance and control insights to our business partners. The role will interact with leaders throughout the Company and determine internal audit scope and testing plans, reviewing audit workpapers and preparing communications reflecting the results of the work performed for management and the Audit Committee. This role will also mentor, coach and direct the work of junior team members.

JOB DESCRIPTION:

Essential Duties & Responsibilities

• Leads audit projects involving functions, product areas or locations, which may encompass complex financial, compliance and operational processes. Acts as a resource for less experienced staff.
• Directs the work activities and has day-to-day responsibility for the performance and development of junior staff in accordance with corporate strategic direction.
• Plans, schedules, and assigns resources to audit projects and manages activities by audit teams in timely and effective completion of reviews on multiple, concurrent projects.
• Takes a lead role in the preparation and maintenance of annual audit plans for assigned areas, including determination of budgets for projects.
• Directs the effective execution of all phases of audits, including creation of audit scope through an assessment of risks, evaluating the design of existing controls, developing and executing test programs to assess adherence with established controls and documenting test results.
• Reviews the thoroughness of work papers and updates team and management on progress.
• Structures and writes major sections of audit reports and other outputs intended for customers. Participates in discussions and presents audit results to management responsible for the audited area.
• Monitors business unit efforts to resolve identified control issues and assesses the effectiveness of remediation efforts through follow-up reviews. Candidly discusses open control issues with management and escalates unresolved exposures to senior management as needed.
• Remains aware of and proactive regarding developments, trends and challenges within assigned business units / functions and within the insurance industry.
• Models the appropriate use of 'partner/challenger' relationship with audited entities - know when to pivot and when to persist. Takes an active role in delivering valuable services to assigned areas, enhancing operations, identifying gaps and sharing best practices.
• Review control testing performed in conjunction with our external auditors in support of the annual financial statement audit and other assurance engagements.
• Support in the management of various IA department strategic initiatives to further enhance the current IA practices.
• May perform additional duties as assigned. Reporting Relationship AVP or above.

Skills, Knowledge & Abilities

• Strong knowledge of internal audit principles, practices and procedures or specialized technical understanding of key technology activities (e.g., Change Management, Security Operations, Network Operations).
• Strong knowledge of relevant technology and cybersecurity regulations (e.g., NYDFS, OSFI, HIPAA) and industry standard frameworks (e.g., SSAE 18/SOC, SOX, COSO, COBIT, ITIL, ISO27001, NIST).
• Strong Knowledge of multiple technology environments (e.g., Windows, Oracle, Unix/Linux) and cloud environments (e.g., Google Cloud Platform).
• Excellent project management, organizing and planning skills.
• Ability to achieve results by taking a proactive strategic view of business goals and objectives.
• Excellent analytical and problem solving skills, with the ability to effectively plan and direct multiple projects and project work teams.
• Working knowledge of using Artificial Intelligence technologies to support in the efficient completion of assigned tasks.
• Excellent interpersonal, presentation, verbal and written communication skills, with the ability to effectively interact with internal and external business partners.
• Ability to exercise professional judgment and assume responsibility for decisions which have an impact on people and quality of service.
• Strong knowledge with the International Standards for the Professional Practice of Internal Auditing and integrated risk based auditing preferred.
• Ability to perform data analytics is preferred.
• Knowledge of insurance industry, accounting principles (GAAP and STAT), regulatory compliance and related financial services fields highly desirable.

Education & Experience

• Bachelor's degree in accounting preferred or equivalent. Advanced degree or professional designation (CPA, CIA) preferred.
• Typically, eight to twelve years of relevant experience in the Property & Casualty insurance or related industry.