Internal IT Audit Consultant (hybrid)

If you're excited about this role but don’t meet every qualification, we still encourage you to apply! At Grange, we value growth and are committed to supporting continuous learning and skill development as you advance in your career with us.

• →Assists in updating the enterprise audit universe and annual internal audit priority development by analyzing risk throughout the enterprise, conducting interviews with key business and IT leadership, and collaborating with enterprise risk management.
• →Leads the development of IT audit programs, including scope, audit objectives, audit criteria, and procedures.

• →Assesses IT risk and controls on legal and regulatory compliance, financial reporting and operations for the organization.
• →Presents positions, findings and recommendations in verbal and written format to a variety of stakeholders, including senior management and the Audit Committee of the Board.
• →Prepare clear, succinct, balanced and persuasive reports including constructive and practical recommendations designed to improve the economy, efficiency and effectiveness of operations.
• →Monitors and reports on management actions undertaken to address audit concerns identified.
• →Keep well informed of significant changes to IT activities, organizational structure, systems and policies.

• →Works with business unit management to ensure management actions plans are documented and implemented for identified internal audit observations or internal control deficiencies.

• →Perform internal IT audit validation of management action plans and/or retesting of observations following management’s remediation.

• →Coaches and mentors audit team members for performance and development, including providing training to new employees and other staff on IT audit policies, procedures, and programs.

• →Performs planning, execution and reporting over Model Audit Rule (MAR) requirements related to validating control assessments and management testing.
• →Develops and performs data analytics to include extraction, analytical testing and security reviews that utilize Artificial Intelligence and other analytical tools.

• →Monitors IT best practices and recent developments in audit, risk management, and corporate governance.
• →Pursues professional development through continuing education and training and participation within professional associations.

Education/Knowledge:

• Undergraduate degree in business related area, preferably in accounting, finance, management information systems or related field. Non-business degree is acceptable with MBA. Professional certification of CPA, CISA, and/or CIA, strongly encouraged. Proven knowledge in applying IT risk assessment and audit skills including financial, operational, and compliance control objectives, as well as knowledge in information systems. Working knowledge of audit and control frameworks including: COSO, MAR and/or SOX methodologies, and Internal Audit Methodologies (e.g., Institute of Internal Audit’s Standards for Professional Practice of Internal Auditing). Familiarity with IT security and governance frameworks (e.g., NIST, ITIL, COBIT, CIS Controls, SOC reports, etc.).

Experience:

• At least five years of professional experience in IT audit or related control environment. Prior audit, compliance, and/or governance experience within the insurance industry is desired.

Skills:

Must have:

• Project management skills to lead a project team and drive a project to successful completion.
• Decision-making skills to evaluate alternatives and recommend alternate courses of action.
• Analytical skills to research and evaluate highly complex processes and systems.
•  Documentation and report writing skills, as well as strong communication skills.
• Interviewing skills to support root cause analysis.
• Organization and planning skills to set priorities, and to plan, prioritize and execute workload.
• Excellent oral and written communication skills to prepare and present audit plans, procedures and findings to senior management as well as have the ability to interact effectively with team members.
• Good coaching and consulting skills.

About Us:

Grange Insurance Company, with $3.4 billion in assets and more than $1.61 billion in annual revenue, is an insurance provider founded in 1935 and based in Columbus, Ohio. Through its network of independent agents, Grange offers auto, home and business insurance protection. Grange Insurance Company and its affiliates serve policyholders in Georgia, Illinois, Indiana, Iowa, Kentucky, Michigan, Minnesota, Ohio, Pennsylvania, South Carolina, Tennessee, Virginia and Wisconsin and holds an A.M. Best rating of "A" (Excellent).

Grange understands that life requires flexibility. We promote geographical diversity, allowing hybrid and remote options and flexibility in work hours (role dependent). In addition to competitive traditional benefits, Grange has also created unique benefits based on associate feedback, including a cultural appreciation holiday, family formation benefits, compassionate care leave and expanded categories of bereavement leave.   

Who We Are:

Grange values all the things that make us unique as human beings. We are committed to creating and supporting a workforce that reflects the richness of our differences by welcoming all backgrounds, viewpoints and lived experiences. To foster an inclusive environment, we are intentional in bringing those differences together for the good of our enterprise, associates, agents, customers and community.

Our Associate Resource Groups help cultivate an inclusive workplace while providing professional and personal growth opportunities. Open to all associates, these voluntary groups celebrate shared experiences and perspectives across ethnicity and race, nationality, generation, gender identity and sexual orientation. Our groups include the Multicultural Professional Network, Pride Partnership & Allies, Women's Group and Young Professionals.

Established in 2016, our Inclusive Culture Council advances professional development, networking, business value and community outreach. Together, we create opportunities to learn from one another, encourage innovation and build a culture where everyone can contribute and grow.  

Our commitment to inclusion is grounded in our core values: Be One Team, Deliver Excellence, Communicate Openly, Do the Right Thing and Solve Creatively for Tomorrow.