Senior Assistant Vice President, IT Audit

Lead and oversee enterprise-wide IT audit strategy, risk assessment, and annual audit planning for insurance and financial services operations.

Manage and mentor IT audit managers and staff, fostering a high-performance and continuous-improvement culture.

Act as a strategic partner to business, technology, compliance, and risk leadership teams.

Direct audits covering: Core insurance systems (policy administration, claims, underwriting, billing) Financial systems (GL, ERP, reporting platforms) Cybersecurity, IAM, data privacy, cloud, and infrastructure Application development, change management, and SDLC controls

Core insurance systems (policy administration, claims, underwriting, billing)

Financial systems (GL, ERP, reporting platforms)

Cybersecurity, IAM, data privacy, cloud, and infrastructure

Application development, change management, and SDLC controls

Ensure audits are risk-based, data-driven, and aligned with regulatory expectations and industry best practices (COSO, COBIT, NIST, ISO).

Review and approve audit scopes, testing approaches, findings, and final reports.

Ensure compliance with relevant regulatory frameworks, including: SOX (ITGCs & automated controls) NAIC Model Audit Rule NYDFS Cybersecurity Regulation (23 NYCRR 500) SOC 1 / SOC 2, PCI DSS, GDPR (as applicable)

SOX (ITGCs & automated controls)

NAIC Model Audit Rule

NYDFS Cybersecurity Regulation (23 NYCRR 500)

SOC 1 / SOC 2, PCI DSS, GDPR (as applicable)

Support regulatory examinations and external audits; act as primary IT audit liaison with regulators and external auditors.

Identify emerging technology and cyber risks impacting insurance and financial services operations.

Provide advisory services on major initiatives (system implementations, cloud migrations, M&A integrations, automation, AI).

Monitor remediation of audit issues and provide reporting on risk trends to senior leadership and Audit Committee.

Prepare executive-level reporting for senior management and Audit Committee, including audit results, risk assessments, and key metrics.

Contribute to enterprise risk management (ERM) initiatives and technology risk governance forums.

Bachelor’s degree in Information Systems, Computer Science, Accounting, Finance, or related field (required)

Master’s degree (MBA, MIS, or equivalent) preferred

12+ years of progressive experience in IT audit, technology risk, or cybersecurity

5+ years in a senior leadership or management role within insurance or financial services

Strong experience with insurance platforms and financial systems in a regulated environment

CISA, CISSP, CRISC, CIA, CPA, or equivalent