Associate Director, IT Audit

Associate Director, IT Audit

Please note that we do not offer visa sponsorship for this position.

Position Overview

The Associate Director of IT Audit will play a strategic leadership role in overseeing and executing IT audit activities within the organization. This role ensures that technology risks are effectively identified, assessed, and managed, while supporting regulatory compliance and industry best practices. The individual will collaborate with business and IT leadership to strengthen the company’s risk management framework, safeguard data, and drive improvements in technology governance and cybersecurity.

Key Responsibilities

Audit Leadership & Execution

• Lead the planning, execution, and reporting of IT audit engagements across infrastructure, applications, cybersecurity, and IT operations.
• Ensure audit activities align with the company’s risk-based audit plan and industry standards (IIA, ISACA, NIST, COBIT, etc.).
• Supervise audit staff and external resources, providing coaching and technical guidance.
• Review audit findings, develop actionable recommendations, and present results to senior management.

Risk Management & Governance

• Partner with business and IT stakeholders to evaluate emerging technology risks, regulatory requirements, and control gaps.
• Support the company’s IT risk management framework, including data privacy, cybersecurity, cloud computing, disaster recovery, and vendor risk management.
• Provide independent assurance on IT governance practices and internal controls.

Strategic Advisory

• Serve as a trusted advisor to senior IT and business leaders by providing insights on process improvements, control efficiencies, and risk mitigation strategies.
• Monitor technology trends, cyber threats, and industry regulations impacting the insurance sector.
• Support digital transformation initiatives with proactive risk assessments and control advisory services.

Team Development

• Mentor and develop IT audit team members to strengthen technical expertise and leadership capabilities.
• Foster a culture of continuous learning, collaboration, and innovation.

Qualifications

Education & Certifications

• Bachelor’s degree in Information Technology, Computer Science, Accounting, or related field (Master’s preferred).
• Professional certifications strongly preferred: CISA, CISSP, CISM, CPA, or CIA.

Experience

• 8–12 years of progressive IT audit experience preferably within financial services or insurance industry.
• Demonstrated experience leading complex IT audit projects and managing teams. 
• Strong knowledge of and experience with IT general controls, cybersecurity, cloud environments, and data privacy regulations (e.g., NYDFS, HIPAA, NAIC model laws).

Skills & Competencies

• Deep understanding of IT risk frameworks (NIST, COBIT, COSO).
• Ability to translate technical risks into business terms and provide practical, solutions-oriented recommendations.
• Strong leadership and communication skills, with the ability to influence and engage stakeholders across the enterprise.
• High degree of integrity, objectivity, and professional judgment. 

Why Join Us?

- Play a key role in protecting the organization’s digital ecosystem.
- Collaborate with senior leaders driving innovation in the insurance sector.
- Competitive compensation, benefits, and career advancement opportunities. 

The base compensation range represents the low and high end of the range for this position. Actual compensation will vary and may be above or below the range based on various factors including but not limited to qualifications, skills, competencies, location, and experience. The range listed is just one component of our total compensation package for employees.

 

Other rewards may include an annual bonus, quarterly bonuses, commissions, and other long-term incentive compensation, depending on the position.  National Life offers a competitive total rewards package which includes: a 401(k) retirement plan match; medical, dental, and vision insurance; a company funded wellness account for director and below employees; 10 paid holidays; a generous paid time off plan (22 days of combined time-off for non-exempt employees and exempt employees have discretion in managing their time, including scheduling time off in the normal course of business, but in no even