Senior IT Internal Auditor - ICFR

🏢 Mercury Insurance · all Mercury Insurance jobs
📍 United States
💰 USD 83,670 - 161,815 / annual
📅 Posted 2026-08-16 · via Himalayas
🏷 IT-Internal-Audit,SOX-Compliance,ICFR-Auditor,Internal-Controls-Audit,Finance,Senior-Information-Systems-Auditor,Senior-Internal-Auditor,IT-Internal-Auditor,Senior-Internal-Audit,Internal-Audit-Senior,IT-Audit-Analyst,IT-Audit-Supervisor
Apply on original site ↗

Overview

Join an amazing team that is consistently recognized for our achievements and culture, including our most recent Forbes award of being one of America's Best Midsize Employers for 2026!
Position Summary:

The primary job function is to support management’s business objectives through execution of technical Internal Control over Financial Reporting (ICFR), including SOX and MAR-related testing and compliance support, within Corporate Audit. This role focuses on IT-related controls that support financial reporting, including IT general controls, access, segregation of duties, program change, and other technical control activities. The role helps improve the depth, consistency, and efficiency of IT-related ICFR testing while contributing to broader internal audit and compliance objectives as well as completing internal audits and projects to evaluate and improve the effectiveness and efficiency of the company’s risk management, internal control and governance processes.
Geo-Salary Information

An in-person interview may be required during the hiring process

State specific pay scales for this role are as follows:

$83,670 to $161,815 (NJ, NY, WA, HI, AK, MD, CT, RI, MA)

$76,064 to $147,104 (NV, OR, AZ, CO, WY, TX, ND, MN, MO, IL, WI, FL, GA, MI, OH, VA, PA, DE, VT, NH, ME)

$68,457 to $132,394 (UT, ID, MT, NM, SD, NE, KS, OK, IA, AR, LA, MS, AL, TN, KY, IN, SC, NC, WV)

In CA: Typical hiring range is $110,468.00 to $135,016.00

The expected base salary for this position will vary depending on a number of factors, including relevant experience, skills and location.
Responsibilities
Essential Job Functions:

- Perform technical ICFR and IT SOX testing in areas such as IT general controls, access controls, segregation of duties, program change, and related technical control activities.

- Lead walkthroughs with control owners, ask probing questions, document IT architecture and flow in diagrams.

- Review and analyze technical evidence and documentation to support evaluation of control design and operating effectiveness.

- Support execution of testing programs, documentation standards, issue follow-up, and remediation tracking for IT-related ICFR activities

- Coordinate with management, IT, control owners, and external auditors to support timely completion of ICFR-related responsibilities and resolution of issues.

- Leverage AI, automation, and Alteryx to improve the efficiency, consistency, and scalability of IT SOX testing, evidence analysis, and related compliance support.

- Support process improvements in testing methodology, evidence review, and documentation quality.

- Help build dedicated in-house technical ICFR capability within Corporate Audit and reduce reliance on limited specialized resources outside the department.

- Advise process owners and management on internal control design, documentation standards, and remediation requirements, promoting consistent understanding of SOX and ICFR expectations.

- Prepare periodic management reporting on audit status, control effectiveness, and risk exposure.

- Support broader internal audit and compliance initiatives as needed.

- Promote awareness and accountability for effective internal controls and support improvements in department policies, procedures, tools, and auditing techniques through innovation and continuous improvement.

Qualifications
Education:
Minimum:
- Bachelor’s degree in a business-related field, preferably Accounting, Finance, Computer Science, Business Administration, or related discipline.

Preferred:
- Professional certification such as CPA, CIA, CISA, CFE, or similar is preferred

Experience:
Minimum:
- Minimum 3 to 6 years of experience in IT SOX, IT audit, ICFR, internal controls, or related technical compliance roles

Preferred:

- Experience reviewing technical evidence, documenting results, and supporting audit or compliance testing

- Experience with systems, applications, and technology processes that support fi

← All remote jobs