Senior IT Internal Auditor - ICFR

Overview

Join an amazing team that is consistently recognized for our achievements and culture, including our most recent Forbes award of being one of America's Best Midsize Employers for 2026!

Position Summary:

The primary job function is to support management’s business objectives through execution of technical Internal Control over Financial Reporting (ICFR), including SOX and MAR-related testing and compliance support, within Corporate Audit. This role focuses on IT-related controls that support financial reporting, including IT general controls, access, segregation of duties, program change, and other technical control activities. The role helps improve the depth, consistency, and efficiency of IT-related ICFR testing while contributing to broader internal audit and compliance objectives as well as completing internal audits and projects to evaluate and improve the effectiveness and efficiency of the company’s risk management, internal control and governance processes.

Geo-Salary Information

An in-person interview may be required during the hiring process

State specific pay scales for this role are as follows:

$83,670 to $161,815 (NJ, NY, WA, HI, AK, MD, CT, RI, MA)

$76,064 to $147,104 (NV, OR, AZ, CO, WY, TX, ND, MN, MO, IL, WI, FL, GA, MI, OH, VA, PA, DE, VT, NH, ME)

$68,457 to $132,394 (UT, ID, MT, NM, SD, NE, KS, OK, IA, AR, LA, MS, AL, TN, KY, IN, SC, NC, WV)

In CA: Typical hiring range is $110,468.00 to $135,016.00  

The expected base salary for this position will vary depending on a number of factors, including relevant experience, skills and location.

Responsibilities

Essential Job Functions:

• Perform technical ICFR and IT SOX testing in areas such as IT general controls, access controls, segregation of duties, program change, and related technical control activities.
• Lead walkthroughs with control owners, ask probing questions, document IT architecture and flow in diagrams.
• Review and analyze technical evidence and documentation to support evaluation of control design and operating effectiveness.
• Support execution of testing programs, documentation standards, issue follow-up, and remediation tracking for IT-related ICFR activities 
• Coordinate with management, IT, control owners, and external auditors to support timely completion of ICFR-related responsibilities and resolution of issues.
• Leverage AI, automation, and Alteryx to improve the efficiency, consistency, and scalability of IT SOX testing, evidence analysis, and related compliance support.
• Support process improvements in testing methodology, evidence review, and documentation quality.
• Help build dedicated in-house technical ICFR capability within Corporate Audit and reduce reliance on limited specialized resources outside the department.
• Advise process owners and management on internal control design, documentation standards, and remediation requirements, promoting consistent understanding of SOX and ICFR expectations.
• Prepare periodic management reporting on audit status, control effectiveness, and risk exposure.
• Support broader internal audit and compliance initiatives as needed.
• Promote awareness and accountability for effective internal controls and support improvements in department policies, procedures, tools, and auditing techniques through innovation and continuous improvement.

Qualifications

Education:

Minimum:

• Bachelor’s degree in a business-related field, preferably Accounting, Finance, Computer Science, Business Administration, or related discipline.

Preferred: 

• Professional certification such as CPA, CIA, CISA, CFE, or similar is preferred

Experience:

 Minimum:

• Minimum 3 to 6 years of experience in IT SOX, IT audit, ICFR, internal controls, or related technical compliance roles

Preferred:

• Experience reviewing technical evidence, documenting results, and supporting audit or compliance testing 
• Experience with systems, applications, and technology processes that support financial reporting controls is preferred 
• Experience in audit workflow tools such as Workiva and/or Alteryx preferred

Knowledge and Skills:

Minimum:

• Knowledge of internal control concepts and best practices, including areas such as: COSO, COBIT, SOX, and IIA professional standards.
• Knowledge of IT general controls, access controls, segregation of duties, program change, and related technical compliance processes.
• Ability to perform data analysis and leverage tools such as Alteryx and other automation or analytics platforms.
• Effective communication and interpersonal skills to analyze issues, develop alternatives, and support practical solutions.
• Ability to build collaborative relationships with internal and external stakeholders.
• Ability to work effectively independently and as part of a team.
• Strong organizational skills and ability to maintain supporting documentation for audit and compliance work.
• Detail oriented and organized, with the ability to obtain and maintain adequate documentation to support audit work.
• Possesses high ethical standards

About the Company

Why choose a career at Mercury?

At Mercury, we have been guided by our purpose to help people reduce risk and overcome unexpected events for more than 60 years. We are one team with a common goal to help others. Everyone needs insurance and we can’t imagine a world without it.

Our team will encourage you to grow, make time to have fun, and work together to make great things happen. We embrace the strengths and values of each team member. We believe in having diverse perspectives where everyone is included, to serve customers from all walks of life.

We care about our people, and we mean it. We reward our talented professionals with a competitive salary, bonus potential, and a variety of benefits to help our team members reach their health, retirement, and professional goals.

Learn more about us here: https://www.mercuryinsurance.com/about/careers

Perks and Benefits

We offer many great benefits, including:

• Competitive compensation
• Flexibility to work from anywhere in the United States for most positions
• Paid time off (vacation time, sick time, 9 paid Company holidays, volunteer hours)
• Incentive bonus programs (potential for holiday bonus, referral bonus, and performance-based bonus)
• Medical, dental, vision, life, and pet insurance
• 401 (k) retirement savings plan with company match
• Engaging work environment
• Promotional opportunities
• Education assistance
• Professional and personal development opportunities
• Company recognition program
• Health and wellbeing resources, including free mental wellbeing therapy/coaching sessions, child and eldercare resources, and more

Mercury Insurance is an equal opportunity employer.  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by federal, state, or local law.

Pay Range