Internal Auditor (IT + Business Focus)

Overview

• Hybrid schedule: 2 days remote / 3 in‑office
• Predictable hours (no nights, weekends, or holidays)
• Competitive pay + generous PTO
• Medical, dental & vision starting day one
• 401(k), tuition reimbursement & longevity bonuses

Responsibilities

The Internal Auditor (IT & Business Focus) provides independent, objective assurance and advisory services to help safeguard company assets, strengthen internal controls, and enhance operational and technology effectiveness. This role executes risk-based audits across both IT systems and business operations, evaluating the design and effectiveness of controls, assessing compliance, and identifying opportunities to mitigate risk and improve processes. 

What you will do: 

• Run audits across both IT systems and core business operations
• Dig into controls, processes, and risks—then explain them in plain English
• Evaluate things like:
  • System access, change management, and IT operations
  • Cybersecurity practices and third-party/vendor risk
  • Core insurance processes (claims, underwriting, finance)
• Turn findings into clear, actionable recommendations
• Track issues through resolution—not just report and walk away
• Partner across teams to improve how the business actually operates

Qualifications

• 2+ years of experience in internal audit (some IT exposure helps)
• Solid understanding of controls (ITGCs, SOX/MAR, COSO, etc.)
• Ability to spot risk and explain it clearly
• Strong analytical skills—you can connect dots others miss
• Comfort working independently and owning your work

Nice to have:

• CISA (or working toward it)
• Exposure to cybersecurity standards (NIST, NYDFS, etc.)
• Familiarity with Microsoft tools or AI governance concepts
• Bachelor's degree 

The successful candidate is expected to work in one of our offices 3 days per week and also be available for travel as required.