Company:
NICO National Indemnity Company Want to work for a company with unparalleled financial strength and stability that offers “large company” benefits with an exciting, friendly, and “small company” atmosphere? Our companies, as members of the Berkshire Hathaway group of Insurance Companies, provides opportunities for professionals interested in just that.
The IT Internal Auditor - SOX supports the evaluation and testing of Information Technology (IT) controls that help ensure reliable financial reporting, regulatory compliance, and effective IT governance across the National Indemnity (NICO) Group. This role partners with Internal Audit, Enterprise Risk Management, Information Technology, and business stakeholders to assess IT risks, perform Sarbanes-Oxley (SOX) compliance testing, monitor remediation activities, and recommend control and process improvements that strengthen the organization's overall control environment.
This position will be with National Indemnity Company in Omaha, NE and is eligible for Hybrid work after a period of in-office training . This position is NOT eligible for employer visa sponsorship.
What Will You Do?
Support ongoing IT audit and SOX compliance initiatives across multiple business units and legal entities within the NICO Group
Perform risk-based testing of IT General Controls (ITGCs), automated controls, and key reports that support financial reporting objectives
Execute SOX testing activities, including walkthroughs, control evaluations, evidence reviews, and documentation of testing results
Partner with management and control owners to maintain compliance with SOX requirements and support audit activities
Monitor and validate remediation efforts resulting from internal audits, external audits, SOX testing, risk assessments, and management self-assessments
Prepare clear, concise, and professional audit documentation, reports, and recommendations
Assist with IT risk assessments, evaluation of key risk indicators, and reporting on the effectiveness of the IT control environment
Identify opportunities to improve IT processes, internal controls, and governance practices, and recommend practical solutions
Support the development of risk-based audit plans by identifying, scoping, and prioritizing IT systems, applications, processes, and controls for review
Stay current on emerging technologies, cybersecurity risks, regulatory requirements, audit practices, and industry frameworks relevant to IT governance and compliance
What Are We Looking For?
Bachelor's degree in a related field or equivalent work experience
Two or more years of work experience
Knowledge of Sarbanes-Oxley (SOX) requirements and objectives
Knowledge of Information Technology General Controls (ITGCs)
Personal computer proficiency and experience with basic applications such as Excel and Word
Preferred Knowledge:
National Institute of Standards and Technology (NIST) frameworks
Committee of Sponsoring Organizations of the Treadway Commission (COSO) Internal Control Framework
New York Department of Financial Services (NYDFS) 23 NYCRR Part 500 Regulation
Experience supporting IT audits, SOX compliance, risk management, or internal controls initiatives
Professional certifications such as CISA, CIA, or CPA
Who Would Excel in This Role?
Someone who communicates clearly and professionally and can effectively explain technical, risk, and control concepts to both technical and non-technical audiences
A detail-oriented professional who takes pride in producing accurate, high-quality audit documentation and work products
An organized self-starter who can manage multiple audit engagements, competing priorities, and deadlines simultaneously
A collaborative teammate who builds strong relationships with management, business partners, auditors, regulators, vendors, and other stakeholders
A curious and analytical thinker who enjoys identifying risks, evaluating controls, and solving complex business and technology challenges
A professional who…