IT Internal Auditor – Munich Re

Title of the Job: IT Internal Auditor

Location: Toronto, ON

Job Description: IT Internal AuditorAs part of the North America Audit Hub, you provide audit services to Munich Re’s North America entities to assist Senior management in the achievement of the Company’s strategic objectives. As a trusted advisor, the IT auditor builds effective relationships while providing independent value added internal audit services necessary to provide reasonable assurance regarding the effectiveness of governance, compliance, risk management, and internal controls systems.The IT Internal Auditor participates as a lead staff on engagement teams that conduct independent assessments of Munich Re’s information systems, IT infrastructure, and IT internal control environment through the execution of risk analysis, control evaluation, and innovative audit testing procedures and techniques.Individuals in the IT Internal Auditor role demonstrate the ability to independently apply the department’s audit methodology. They participate on all phases of the audit from planning to reporting, including understanding the technologies under review, how IT enables business operations, scoping the audit, identifying risks and controls, designing and executing testing with minimal oversight and assisting with writing audit reports. Note our Hybrid work structure with 2 days in the office.Major Duties and Responsibilities:

• Independently conducts thorough risk analysis, control identification and audit program development. Independently concludes on the effectiveness of controls and control gaps based on the results of testing. Demonstrates the ability to multi-task, by clearly documenting the results of testing on more than one audit concurrently.

• Executes and completes assigned audit work in accordance with agreed upon milestones and dates.

• Demonstrates technical knowledge of routine IT systems and processes and continues development of technical and analytical skills to understand more complex technologies. Interprets the associated risks, develops testing approaches, and proposes solutions.

• Furthers technical knowledge and demonstrates a strong understanding of the department’s audit methodology, insurance industry concepts, Cyber Security, IT General Controls and Software Development Practices. Effectively demonstrates these capabilities when completing assigned work.

• Effectively communicates audit issues and related recommendations in both technical and non-technical terms to Operational and IT management. Makes sound recommendations for audit finding rankings and effectively supports conclusions during discussions with audit clients. Works closely with management to design and implement remediation efforts.

• Contribues to continuos improvement (CI) efforts. Participates in efforts to solve problems and make audit processes more effective and efficient.

• Demonstrates increased technical understanding of data analysis concepts and practices. Effectively uses the department’s data analysis software to facilitate audit scoping and testing. Shares knowledge and experience with less experienced team members.

• Takes an active role in facilitating the training and development of less experienced team members.

• Aware of changes in IT audit practices, regulatory requirements, and IT Risk frameworks to understand their impact to Internal Auditing and Munich Re. (e.g. NIST Cyber, CSC, COBIT, ISO2700x)

Qualifications:

• Requires in-depth IT Audit skills as typically acquired through experience.
• Bachelor’s degree in Computer Science, Management Information Systems or a comparative field.
• Two or more years of IT Audit or information technology experience with a focus on security, risk management, or system development.
• Strong technical knowledge of various IT infrastructure and network components such as operating system (Windows, Linux), databases (Oracle), network platforms, etc.
• Strong understanding of public cloud networking and network security controls such as Azure, Google Cloud Platform, and/or Amazon Web Services.
• Strong knowledge of IT auditing standards and control frameworks such as IIA, COBIT, NIST Cyber, CSC, and ISO2700x.
• Demonstrated ability to evaluate internal controls, effectively execute large portions of an audit independently, analyze and solve complex problems, conduct research, and express ideas clearly, concisely and persuasively both verbally and in writing.
• Demonstrates a strong understanding of business ethics.
• CISA Certification is preferred. CISSP or other technical / IT security certifications are a plus.

At Munich Re US, we see Diversity and Inclusion as a solution to the challenges and opportunities all around us. Our goal is to foster an inclusive culture and build a workforce that reflects the customers we serve and the communities in which we live and work. We strive to provide a workplace where all of our colleagues feel respected, valued and empowered to achieve their very best every day. We recruit and develop talent with a focus on providing our customers the most innovative products and services.We are an equal opportunity employer. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Company Name: Munich Re

Salary:

Apply for the job!