IT Auditor

Are you ready to bring your technology expertise, curiosity and risk mindset to a role where your work can make an impact across the organization?

Physicians Mutual is looking for an IT Auditor or Senior IT Auditor to join our Internal Audit team! We’re open to hiring at either level based on the experience, certifications and leadership capabilities you bring.

In this role, you’ll evaluate technology risks and controls across our systems and business operations, helping strengthen our control environment while providing independent, objective insights to leaders throughout the organization. You’ll work across areas including IT general controls, cybersecurity, cloud computing, application controls, data governance and third-party technology risk.

• Plan and perform risk-based IT audits, from risk assessment and testing through documentation and reporting.
• Evaluate IT general controls, cybersecurity controls, application controls and system development lifecycle processes.
• Assess cloud environments, third-party technology providers and emerging technology risks.
• Use data analytics to identify trends, anomalies and potential control weaknesses.
• Translate technical risks into clear, business-focused insights and actionable recommendations.
• Communicate audit findings and recommendations to management and other stakeholders.
• Provide risk and control perspectives on system implementations, cloud migrations, process improvements and emerging technologies, including AI and automation.
• Follow up on audit findings to validate that corrective actions effectively address identified risks.

At the senior level, you’ll also take a leadership role in enterprise technology risk assessments, IT audit activities, audit analytics and automation initiatives, and Internal Audit’s participation in technology projects.

• Bachelor’s degree in information systems, computer science, accounting, cybersecurity, data analytics or a related field.
• Experience in IT audit, IT risk, cybersecurity, public accounting or a related field — typically 2-5 years for the IT Auditor level and 5-plus years for the Senior IT Auditor level.
• Knowledge of IT controls, cybersecurity principles and risk assessment methodologies.
• Familiarity with frameworks such as NIST, COBIT, ISO 27001 or CIS Controls.
• Strong analytical, critical-thinking and communication skills.
• Experience with cloud environments and data analytics tools such as SQL, Power BI, Alteryx, Tableau or Excel is preferred.
• A professional certification such as CISA, CISSP, CIA or CPA is preferred for the IT Auditor level and required for the Senior IT Auditor level.