Information Technology Auditor

About the role

MassMutual's Corporate Audit Team is seeking an Information Technology Auditor to join its Corporate Audit team as a full-time remote position. The role acts as an information technology risk and control expert, advising and mentoring audit associates and IT and business-area management while championing compliance with audit practice standards. The team works on enterprise IT audit projects covering AI, cybersecurity, cloud computing and digital infrastructure, and partners with clients to improve internal controls.

Key responsibilities

• Deliver audits and assessments of MassMutual's corporate-wide systems infrastructure and application environments
• Assess the design and effectiveness of internal controls and plan and conduct IT audits focused on technology risks and controls
• Apply knowledge of technology controls in audit field work, setting scope and tests to evaluate controls
• Work collaboratively with clients and peers to complete value-added assignments within project scope and timelines

Required profile

• 4+ years of audit work experience, preferably in technology audit or risk
• Bachelor's degree or 8+ years of work experience in an IT audit role
• Ideal: 4+ years of technology and audit experience, preferably in financial services, and experience reviewing cybersecurity and cloud technologies
• Ability to pass a non-registered fingerprint background check (required for FINRA eligibility)

Required skills

• 4+ years of experience with information technology, primarily cybersecurity and cloud tools and processes
• Ideal: familiarity with risk concepts, including inherent and residual risks, and assessment of internal controls
• Ideal: CISA, CISSP, CISM and/or cybersecurity audit certification, and experience in a Big 4 or equivalent firm

The position is remote but requires accommodating a hybrid model (3 days a week in the office) if living within 50 miles of the Springfield office or 30 miles of the Boston office. MassMutual offers regular team meetings, one-on-one manager meetings, access to business resource groups and learning content.