Conducts audit assignments of high complexity that evaluate the adequacy and effectiveness of internal controls over Information Technology risks. Assists Internal Audit staff and other areas of the Company in obtaining information maintained on Company computer records. Determines whether computer systems produce timely, accurate, and complete information, and comply with management instructions, applicable policies, procedures, plans, laws and regulations. Determines whether corporate computing objectives are being met. Reports audit findings objectively and assists management in developing effective action plans to address any audit concerns.
Risk Control & Assessment (35%)
Identifies and assesses complex and interrelated technology risks in unit/department being audited by determining such factors as procedure consistency, database integrity, etc.
Identifies related technology controls by obtaining an understanding and documenting procedures using narratives and/or flowcharts. Completes Internal Audit`s Risk Assessment to document risks and controls.
Creates complex audit programs by developing audit tests that will provide evidence as to how well key technology controls are working. The audit tests will identify where technology risks are not adequately controlled.
Provides Internal Audit director organized documentation of the technology risk assessment performed.
Evaluates Model Audit Rule (MAR) risk and control documentation prepared by I/S management.
Control Testing (20%)
Conducts audit test procedures on information technology as outlined in detailed audit program.
Documents and analyzes audit test results by highlighting areas of exceptions and providing an opinion as to how well technology controls are operating.
Responds to requests from independent auditor.
Audit Concern Analysis / Findings (20%)
Identifies control deficiencies by documenting the criteria (activity that should be occurring) versus the condition (actual result of activity).
Provides an explanation of the cause and impact of audit deviations.
Completes finding sheet that describes condition, criteria, deviation, effect or impact, and management`s action plan.
Customer Relations (15%)
Maintains contact with I/S management throughout audit to keep customer informed of audit progress and any adverse findings to date.
Reports risk assessment and audit findings to divisional management. Answers questions regarding technology risks and controls over the audited area.
Obtains response from I/S vice president and any other appropriate officer of the Company that addresses negative audit findings and describes their plan of action to correct audit concerns.
Provides consulting to audit customers on risks, controls, and ideas on how to strengthen technology controls in specific areas.
Obtains information and prepares special reports as requested by management.
Reports risk assessment and audit findings, including implications of control weaknesses identified, to divisional management. Answers questions regarding technology risks and controls over the audited area.
Project Management (10%)
Establishes budget, timelines, and milestones for each information technology audit assignment.
Coordinates time schedule of auditor set by Internal Audit director and personnel in audit area.
Monitors progress against budget and schedule. Informs Internal Audit director of any deviations and works with management to develop corrective action plan.
Specialized Knowledge and Skills Requirements
Demonstrated experience providing customer-driven solutions, support or service
Demonstrated experience in data analysis and outcome measurement.
Demonstrated experience managing or leading complex projects.
Demonstrated extensive experience using internal audit techniques and methodologies.
Relevant professional designation (e.g. CISA, CIPP, CISSP, CGEIT, CISM, CRISC) or post-graduate degree required
This position requires travel up to 10% of the time.
Employer will assist with relocation costs.
About American Family Insurance
AF-WI Madison Natl HQ
Apply with LinkedIn
At American Family Insurance, we’re driven by our customers and employees. That’s why we provide more than just a job – we provide opportunity. Whether you’re already part of our team in search of a new challenge or new to our company and ready for what’s next, you’re in the right place. Every dream is a journey that starts with a single step. Start your journey right here. Join our team. Bring your dreams.