IT Audit Director

You have a clear vision of where your career can go. And we have the leadership to help you get there. At CNA, we strive to create a culture in which people know they matter and are part of something important, ensuring the abilities of all employees are used to their fullest potential. 

About CNA
At CNA, we focus on what we do best - providing insurance solutions that allow our customers to better manage their risks and grow profitably. We use our expertise to continually evolve our products and services to anticipate and address our customers' needs. Our broad portfolio enables us to respond to a wide range of business risks while focusing on the specialized needs of our insureds in construction, manufacturing, technology, healthcare, professional services, financial institutions and small business.

About Internal Audit
The Global Internal Audit Division supports CNA’s corporate strategy of maintaining top quartile underwriting company by enhancing and protecting organizational value through risk-based and objective assurance and advisory engagements. We are analysts, problem-solvers, reporters, explorers as well as trusted advisors and catalysts. We strive to maintain an agile and responsive audit program that focuses on our company’s highest risks and builds trust with all of our stakeholders. We invest in our people, are strengthened by diversity and are committed to inclusion. As the third line of defense for CNA, the scope of our work spans across all types of risk: financial, compliance, reputational and operational.

Position Description
We are searching for an IT Audit Director to join our team who thrives in a collaborative environment and shares our commitment to providing valuable risk management, governance and control insights to our business partners. The role will interact with leaders throughout the Company and determine internal audit scope and testing plans, reviewing audit workpapers and preparing communications reflecting the results of the work performed for management and the Audit Committee. This role will also mentor, coach and direct the work of junior team members.

JOB DESCRIPTION:

Essential Duties & Responsibilities

• Leads audit projects involving functions, product areas or locations, which may encompass complex financial, compliance and operational processes. Acts as a resource for less experienced staff.

• Directs the work activities and has day-to-day responsibility for the performance and development of junior staff in accordance with corporate strategic direction.

• Plans, schedules, and assigns resources to audit projects and manages activities by audit teams in timely and effective completion of reviews on multiple, concurrent projects.

• Takes a lead role in the preparation and maintenance of annual audit plans for assigned areas, including determination of budgets for projects.

• Directs the effective execution of all phases of audits, including creation of audit scope through an assessment of risks, evaluating the design of existing controls, developing and executing test programs to assess adherence with established controls and documenting test results.

• Reviews the thoroughness of work papers and updates team and management on progress.

• Structures and writes major sections of audit reports and other outputs intended for customers. Participates in discussions and presents audit results to management responsible for the audited area.

• Monitors business unit efforts to resolve identified control issues and assesses the effectiveness of remediation efforts through follow-up reviews. Candidly discusses open control issues with management and escalates unresolved exposures to senior management as needed.

• Remains aware of and proactive regarding developments, trends and challenges within assigned business units / functions and within the insurance industry.

• Models the appropriate use of 'partner/challenger' relationship with audited entities - know when to pivot and when to persist. Takes an active role in delivering valuable services to assigned areas, enhancing operations, identifying gaps and sharing best practices.

• Review control testing performed in conjunction with our external auditors in support of the annual financial statement audit and other assurance engagements.

• Support in the management of various IA department strategic initiatives to further enhance the current IA practices.

• May perform additional duties as assigned. Reporting Relationship AVP or above.

Reporting Relationship

AVP or above

Skills, Knowledge & Abilities

• Strong knowledge of internal audit principles, practices and procedures or specialized technical understanding of key technology activities (e.g., Change Management, Security Operations, Network Operations). 

• Strong knowledge of relevant technology and cybersecurity regulations (e.g., NYDFS, OSFI, HIPAA) and industry standard frameworks (e.g., SSAE 18/SOC, SOX, COSO, COBIT, ITIL, ISO27001, NIST).

• Strong Knowledge of multiple technology environments (e.g., Windows, Oracle, Unix/Linux) and cloud environments (e.g., Google Cloud Platform).

• Excellent project management, organizing and planning skills.   

• Ability to achieve results by taking a proactive strategic view of business goals and objectives.    

• Excellent analytical and problem solving skills, with the ability to effectively plan and direct multiple projects and project work teams.

• Working knowledge of using Artificial Intelligence technologies to support in the efficient completion of assigned tasks.

• Excellent interpersonal, presentation, verbal and written communication skills, with the ability to effectively interact with internal and external business partners.   

• Ability to exercise professional judgment and assume responsibility for decisions which have an impact on people and quality of service.   

• Strong knowledge with the International Standards for the Professional Practice of Internal Auditing and integrated risk based auditing preferred.  

• Ability to perform data analytics is preferred.

• Knowledge of insurance industry, accounting principles (GAAP and STAT), regulatory compliance and related financial services fields highly desirable. 

Education & Experience

• Bachelor's degree in accounting preferred or equivalent. Advanced degree or professional designation (CPA, CIA, CISA, CISSP) preferred.

• Typically, eight to twelve years of relevant experience in the Property & Casualty insurance or related industry.

#LI-MR1

#LI-Hybrid

In certain jurisdictions, CNA is legally required to include a reasonable estimate of the compensation for this role. In District of Columbia, California, Colorado, Connecticut, Illinois, Maryland, Massachusetts, New York and Washington, the national base pay range for this job level is $97,000 to $189,000 annually. Salary determinations are based on various factors, including but not limited to, relevant work experience, skills, certifications and location. CNA offers a comprehensive and competitive benefits package to help our employees – and their family members – achieve their physical, financial, emotional and social wellbeing goals.  For a detailed look at CNA’s benefits, please visit cnabenefits.com.

CNA utilizes AI-enabled technology during the recruiting process. For more information, please visit our careers page.

CNA is committed to providing reasonable accommodations to qualified individuals with disabilities in the recruitment process. To request an accommodation, please contact leaveadministration@cna.com