RiverStone · 1 week ago
Corporate IT Audit Specialist
RiverStone is seeking a Corporate IT Audit Specialist to support the Corporate Audit Services team in deploying an integrated audit process. This role involves evaluating IT controls, executing risk-based audit procedures, and leveraging data analytics to enhance audit efficiency and effectiveness.
Financial ServicesInsurance
Responsibilities
Evaluate the design and adequacy of Business Process, IT General and Application Controls, as well as other operational controls around the IT infrastructure, applications, and Cybersecurity protocols
Execute risk-based audit procedures for IT and Business Process controls in accordance with Sarbanes-Oxley (SOX) requirements
Investigate and address complex issues and control deficiencies, collaborating with responsible management to develop effective solutions/action plans
Provide technology-related guidance to CAS team members to progressively increase team knowledge of IT auditing concepts and techniques
Leverage technology and automation/data analytics tools to extract meaningful insights and streamline audit procedures with increased audit coverage and efficiencies
Conduct IT risk assessments and advisory engagements for new systems or upgrades, changes in processes and operations, data migrations, etc., and advise management on appropriate risks and control requirements
Build and maintain strong relationships with IT business partners across the company – be recognized as a trusted partner and advisor providing quality insight regarding IT risks and controls
Utilize the AuditBoard Connected Risk GRC solution to maintain and govern IT-related risks and controls, in addition to supporting CAS’ role as gatekeeper of RiverStone’s risk register and control matrix
Leverage automation/data analytics tools to enhance audit work (i.e., Alteryx, SQL)
Qualification
Required
1 to 3 years of internal/external IT audit, Technology/IT operational risk management
Strong technical experience with Excel and Microsoft applications for analytics and presentation
Demonstrated experience supporting IT risk and audit projects across multiple business lines, including assessment of IT risks and the design and adequacy of mitigating controls
Working knowledge and experience with IT operations, cybersecurity principles, and emerging technologies including cloud-based applications and agile software development
Familiarity with the regulatory environment and how technology risks are viewed
Experience in the financial or insurance sector a plus
Bachelor's Degree in Information Technology or Business fields with an interest in Computer Information Systems or Management Information Systems, equivalent work experience
Preferred
Certification(s) – Certified Information Systems Auditor (CISA); Certified Internal Auditor (CIA); Certified in Risk and Information Systems Control (CRISC); Associate in Insurance Data Analytics (AIDA); AuditBoard Certifications – desired but not required
Company
RiverStone
We Deliver RiskSmart Run-Off(R) Solutions With Global Reach Aligning risk with the need for capital efficiency and greater business focus is a key challenge for insurers and reinsurers.