Information Technology Auditor

---

Job description

Information Technology Auditor

Corporation Audit Team

Full Time

Boston, MA or Springfield, MA

The Opportunity

As an Information Technology Auditor, you will have an opportunity to function as an information technology risk and control expert, providing advice/mentoring to audit associates and information technology/business area management while championing compliance with standards for audit practices and procedures.

The Team

The MassMutual Corporate Audit Team is located in both Boston and Springfield. If you are a technology audit/risk professional who is looking to leverage and grow your technology skills, operate at the nexus of technology and business at a company that is leading a technology transformation of the life insurance business while focusing on helping people secure financial freedom and protect the ones they love, then please read further. You will use your skills to partner and collaborate with peers and clients to support a technology led audit plan and review of enterprise IT audit projects that includes Cybersecurity, Cloud Computing and Digital Infrastructure. You will help drive positive change across the organization with opportunities to improve internal controls through value-added recommendations.

MassMutual Corporate Audit assists the MassMutual Board of Directors Audit Committee and management in monitoring, analyzing, and strengthening internal controls. Corporate Audit consists of approximately 50 professionals across MassMutual businesses at several locations worldwide. Our work supports MassMutual's strategy on growing the business, enhancing profitability, and focusing on the customer, with emphasis on enhancing effectiveness and efficiency.

The Impact

The Information Technology Auditor will be responsible for delivering audits and assessments across MassMutual. Overall, you will be responsible for leveraging your technology audit skills to assess and evaluate controls over MassMutual's corporate-wide systems infrastructure and application environments in support of MassMutual's businesses. You will be expected to stay in tune with technology processes, programs, and industry best practices.

You will demonstrate a strong understanding of risk concepts including inherent and residual risks as well as how to assess the design and effectiveness of internal controls so that you can plan and conduct audits of the information technology environment focusing on technology risks and controls.

You will be expected to understand and apply knowledge of technology controls and concepts in the execution of audit field work, to set audit scope and test functions to evaluate the design and effectiveness of controls.

Lastly, we are looking for someone who wants to work collaboratively, while enthusiastically engaging clients and peers to complete value-added assignments within the defined project scope and timelines to ensure risks are mitigated appropriately.

In this role, as well as all roles within MassMutual, you will demonstrate accountability, agility, a dedication to be inclusive, a strong business acumen, and will show courage, even in the most difficult situations.

The Minimum Qualifications

• 4+ years audit work experience preferably in relevant technology audit/risk related work experience.
• 4+ years of experience with Information Technology, preferably with Cybersecurity and Cloud tools and processes.
• Bachelor's degree in technology or business related major, or equivalent work experience.
• Due to the nature of this position, as part of our background check process, candidates must be able to pass a non-registered fingerprint background check to qualify for as a fingerprint person for FINRA.

The Ideal Qualifications

• 4+ Years of Technology and Audit experience preferable within the financial services industry.
• Experience working in cybersecurity and cloud technologies reviews.
• Experience with Artificial Intelligence (AI)
• Familiarity with risk concepts including inherent and residual risks as well as how to assess the design and effectiveness of internal controls.
• Knowledge of technology risk concepts including inherent and residual risks as well as how to assess the design and effectiveness of internal controls in the execution of audit field work, primarily focused on Cybersecurity and Cloud technologies.
• Demonstrates versatility in communicating up, down and across the organization by working with others and participate in discussions with various levels of management across the enterprise.
• Works independently, enthusiastically engaging clients and peers to complete value-added assignments within the defined project scope and timelines.
• Possesses high integrity, professional skepticism, and strong business sense.
• Exhibits responsiveness and flexibility to changing business priorities and tight deadlines.
• Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) and/or Cybersecurity Audit certification.
• Experience in a Big 4 or equivalent firm.

What to Expect as Part of MassMutual and the Team

• Regular meetings with teams across the Corporate Audit Team.
• Focused one-on-one meetings with your manager.
• Access to mentorship opportunities.
• Networking opportunities including access to Asian, Hispanic/Latinx, African American, women, LGBTQ, veteran, and disability-focused Business Resource Groups.
• Access to learning content on Degreed and other informational platforms.
• Your ethics and integrity will be valued by a company with a strong and stable ethical business with industry leading pay and benefits.

CR37

MassMutual is an Equal Employment Opportunity employer Minority/Female/Sexual Orientation/Gender Identity/Individual with Disability/Protected Veteran. We welcome all persons to apply. Note: Veterans are welcome to apply, regardless of their discharge status.

If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.

<!– job description page –>