IT Audit Senior

This is your opportunity to join AXIS Capital – a trusted global provider of specialty lines insurance and reinsurance.  We stand apart for our outstanding client service, intelligent risk taking and superior risk adjusted returns for our shareholders. We also proudly maintain an entrepreneurial, disciplined and ethical corporate culture.  As a member of AXIS, you join a team that is among the best in the industry.

At AXIS, we believe that we are only as strong as our people. We strive to create an inclusive and welcoming culture where employees of all backgrounds and from all walks of life feel comfortable and empowered to be themselves. This means that we bring our whole selves to work. 

All qualified applicants will receive consideration for employment without regard to any protected characteristic, including age, color, disability, ethnicity, gender identity, marital status, national origin, pregnancy, race, religion, sex, sexual orientation, veteran status, or any basis prohibited by the laws that govern its operations.

Job Description: IT Senior Auditor

How does this role contribute to our collective success?

The IT Senior Auditor is responsible for developing, leading, and executing technology audits in support of the Internal Audit Plan. This role identifies and assesses key risks across Information Technology, including cybersecurity, vendor management, governance, technology operations, regulatory compliance, and emerging risks related to Artificial Intelligence (AI), and evaluates the design and operating effectiveness of controls over these areas.

The role strengthens the control environment by performing risk and compliance assessments and delivering actionable insights aligned with IIA standards.

What will you do in this role?

• Conduct risk assessments for IT process areas, including emerging technology risks

• Lead and execute technology-focused audit engagements

• Evaluate governance, risk management, and control frameworks, including those supporting AI and data-driven solutions

• Assess the design and operating effectiveness of controls, including controls over AI models, data inputs, and outputs (e.g., bias, explainability, and compliance considerations)

• Prepare and review audit workpapers in accordance with IIA Standards

• Support Sarbanes-Oxley (SOX) IT controls testing

• Identify and communicate control deficiencies and emerging risks, including AI-related risks, to management

• Monitor and assess key risks associated with strategic technology investments and system implementations, including changes to applications and infrastructure

• Build and maintain effective relationships across Technology and business functions

• Leverage data analytics to enhance audit procedures and insight generation

• Communicate audit status and results clearly, both verbally and in writing

• Prepare clear, concise audit reports for senior stakeholders

• Demonstrate proficiency in regulatory requirements and industry frameworks (e.g., NYDFS Cybersecurity Regulation, DORA, CSA & NIST frameworks) relevant to IT risk, cybersecurity, and data governance

You may also be required to take on additional duties, responsibilities and activities appropriate to the nature of this role.

About You:

We encourage you to bring your own experience and expertise to the table, so while there are some qualifications and experiences, we need you to have, we are open to discussing how your individual knowledge might lend itself to fulfilling this role and help us achieve our goals.

What you need to have:

• Bachelor’s degree in accounting, computer science, information systems or other related field. Three years of experience in the audit department of a public company or with an audit firm.

• CISA or CIA certification

What we prefer you to have:

• Strong negotiation and interpersonal skills

• Strong communication skills both written and verbal

• Data analytics and Copilot experience

• Self-starter that works well in both a team setting and independently

• Experience working with a wide range of systems and environments (Azure, Salesforce, Oracle, SQL)

• Proficient in Microsoft Office (Excel, Word, PowerPoint, Project, Visio)

• Working Knowledge of technology frameworks (NIST, COBIT, ISO)

• Understand the financial, operational and compliance risks which affect information systems design, modification and processing activities

This posting is for an existing vacancy.