Lead enterprise IT audit strategy and execution for insurance and financial systems. Oversee audits of core insurance platforms, financial systems, cybersecurity, cloud, IAM, SDLC, and regulatory compliance. Advise executives and regulators, manage remediation, prepare Audit Committee reporting, and mentor IT audit staff.
The Sr. AVP – IT Audit provides strategic leadership and oversight of the IT Audit function within an Insurance and Financial Services environment. This role is responsible for assessing the effectiveness of technology controls, cybersecurity, data governance, and system resiliency across core insurance platforms and financial systems. The position serves as a trusted advisor to executive management, Audit Committee, and regulators, ensuring compliance with regulatory requirements and alignment with business objectives.
ResponsibilitiesLeadership & Strategy
- Lead and oversee enterprise-wide IT audit strategy, risk assessment, and annual audit planning for insurance and financial services operations.
- Manage and mentor IT audit managers and staff, fostering a high-performance and continuous-improvement culture.
- Act as a strategic partner to business, technology, compliance, and risk leadership teams.
Audit Execution & Oversight
- Direct audits covering:
- Core insurance systems (policy administration, claims, underwriting, billing)
- Financial systems (GL, ERP, reporting platforms)
- Cybersecurity, IAM, data privacy, cloud, and infrastructure
- Application development, change management, and SDLC controls
- Ensure audits are risk-based, data-driven, and aligned with regulatory expectations and industry best practices (COSO, COBIT, NIST, ISO).
- Review and approve audit scopes, testing approaches, findings, and final reports.
Regulatory & Compliance
- Ensure compliance with relevant regulatory frameworks, including:
- SOX (ITGCs & automated controls)
- NAIC Model Audit Rule
- NYDFS Cybersecurity Regulation (23 NYCRR 500)
- SOC 1 / SOC 2, PCI DSS, GDPR (as applicable)
- Support regulatory examinations and external audits; act as primary IT audit liaison with regulators and external auditors.
Risk Management & Advisory
- Identify emerging technology and cyber risks impacting insurance and financial services operations.
- Provide advisory services on major initiatives (system implementations, cloud migrations, M&A integrations, automation, AI).
- Monitor remediation of audit issues and provide reporting on risk trends to senior leadership and Audit Committee.
Governance & Reporting
- Prepare executive-level reporting for senior management and Audit Committee, including audit results, risk assessments, and key metrics.
- Contribute to enterprise risk management (ERM) initiatives and technology risk governance forums.
Education
- Bachelor’s degree in Information Systems, Computer Science, Accounting, Finance, or related field (required)
- Master’s degree (MBA, MIS, or equivalent) preferred
Experience
- 12+ years of progressive experience in IT audit, technology risk, or cybersecurity
- 5+ years in a senior leadership or management role within insurance or financial services
- Strong experience with insurance platforms and financial systems in a regulated environment
Certifications (Preferred)
- CISA, CISSP, CRISC, CIA, CPA, or equivalent
Key Skills & Competencies
- Deep knowledge of IT controls, cybersecurity, and regulatory compliance in insurance/financial services
- Strong leadership, stakeholder management, and executive communication skills
- Ability to translate complex technical risks into clear business impact
- Experience with audit analytics, automation, and continuous monitoring
- High integrity, sound judgment, and independence of thought
What you need to know about the Colorado Tech Scene
With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
