Internal IT Auditor - SOX

Company:

NICO National Indemnity Company

Want to work for a company with unparalleled financial strength and stability that offers “large company” benefits with an exciting, friendly, and “small company” atmosphere?  Our companies, as members of the Berkshire Hathaway group of Insurance Companies, provides opportunities for professionals interested in just that. 

The IT Internal Auditor - SOX supports the evaluation and testing of Information Technology (IT) controls that help ensure reliable financial reporting, regulatory compliance, and effective IT governance across the National Indemnity (NICO) Group. This role partners with Internal Audit, Enterprise Risk Management, Information Technology, and business stakeholders to assess IT risks, perform Sarbanes-Oxley (SOX) compliance testing, monitor remediation activities, and recommend control and process improvements that strengthen the organization's overall control environment.

This position will be with National Indemnity Company in Omaha, NE and is eligible for Hybrid work after a period of in-office training. This position is NOT eligible for employer visa sponsorship.

What Will You Do?

• Support ongoing IT audit and SOX compliance initiatives across multiple business units and legal entities within the NICO Group
• Perform risk-based testing of IT General Controls (ITGCs), automated controls, and key reports that support financial reporting objectives
• Execute SOX testing activities, including walkthroughs, control evaluations, evidence reviews, and documentation of testing results
• Partner with management and control owners to maintain compliance with SOX requirements and support audit activities
• Monitor and validate remediation efforts resulting from internal audits, external audits, SOX testing, risk assessments, and management self-assessments
• Prepare clear, concise, and professional audit documentation, reports, and recommendations
• Assist with IT risk assessments, evaluation of key risk indicators, and reporting on the effectiveness of the IT control environment
• Identify opportunities to improve IT processes, internal controls, and governance practices, and recommend practical solutions
• Support the development of risk-based audit plans by identifying, scoping, and prioritizing IT systems, applications, processes, and controls for review
• Stay current on emerging technologies, cybersecurity risks, regulatory requirements, audit practices, and industry frameworks relevant to IT governance and compliance

What Are We Looking For?

• Bachelor's degree in a related field or equivalent work experience
• Two or more years of work experience
• Knowledge of Sarbanes-Oxley (SOX) requirements and objectives
• Knowledge of Information Technology General Controls (ITGCs)
• Personal computer proficiency and experience with basic applications such as Excel and Word

Preferred Knowledge:

• National Institute of Standards and Technology (NIST) frameworks
• Committee of Sponsoring Organizations of the Treadway Commission (COSO) Internal Control Framework
• New York Department of Financial Services (NYDFS) 23 NYCRR Part 500 Regulation
• Experience supporting IT audits, SOX compliance, risk management, or internal controls initiatives
• Professional certifications such as CISA, CIA, or CPA

Who Would Excel in This Role?

• Someone who communicates clearly and professionally and can effectively explain technical, risk, and control concepts to both technical and non-technical audiences
• A detail-oriented professional who takes pride in producing accurate, high-quality audit documentation and work products
• An organized self-starter who can manage multiple audit engagements, competing priorities, and deadlines simultaneously
• A collaborative teammate who builds strong relationships with management, business partners, auditors, regulators, vendors, and other stakeholders
• A curious and analytical thinker who enjoys identifying risks, evaluating controls, and solving complex business and technology challenges
• A professional who can assess control deficiencies, determine root causes, evaluate impacts, and recommend practical remediation strategies
• An effective interviewer and facilitator who can gather information, evaluate processes, and assess control effectiveness
• A trusted team member who handles sensitive business, financial, and cybersecurity information with discretion and confidentiality
• A continuous learner who stays informed on emerging technologies, cybersecurity threats, regulatory developments, and evolving industry best practices
• A positive contributor who promotes a strong team culture through collaboration, respect, accountability, and a willingness to support others' success

We want you to be involved! We offer Employee Resource Groups for volunteering, connecting with others, social gatherings, and professional development. We also regularly seek employees input through companywide surveys.

We care about your health and wellbeing! Our Wellness program is integrated into the Company culture with an online wellness portal that offers a year-round, one-stop-shop to manage and track all areas of health, our Omaha office boasts a complimentary state-of-the-art onsite fitness center, and a robust wellness program.

Benefits, Perks and more! We offer retirement and savings plan with immediate enrollment with 100% employer match up to 5%, Medical, Dental and Vision for regular, full-time employees and eligible dependents, a dedicated Learning & Development program for employees to grow personally and professionally, 100% upfront Educational Reimbursement program, subsidized downtown parking, competitive time off policies including parental leave, an Employee Assistance program and much more!