Nationwide Mutual Insurance Co, Columbus, Ohio
1 Nationwide Plaza, Columbus, Ohio 43215
IT Audit Analyst:
The position would be within the Information Technology Audit area in Internal Audit, which
focuses on technology specific audits as well as integrated audits across the company. The
successful candidate will participate in information technology (IT) related audit assignments by
testing controls and documenting findings in work papers, complete assignments in a timely
manner, and have the ability to effectively interact across various levels of the organization.
JOB SUMMARY: Analyzes and implements internal and information systems audit programs
throughout the company or business segments to evaluate the soundness, adequacy, compliance,
cost effectiveness, and risk of operational, financial, information management, data processing
controls, systems, policies and procedures to ensure the integrity of management information
systems, financial controls, and records.
LOCATION: Corporate Auditing
RELATIONSHIP: Reports to Audit Director/Audit Officer
DIRECT REPORTS: No employees report directly to this position.
JOB RESPONSIBILITIES:
1. Assesses risk and controls on legal and regulatory compliance, financial reporting and
operations for assigned business units. Provides recommendations for problem resolution to
auditing management.
2. Analyzes management problems as well as management information requirements, and
formulates and recommends solutions or range of possible alternatives in rank of desirability and
probability of success.
3. Identifies and evaluates constants and variables, restrictions, alternatives, conflicting
objectives, and their numerical parameters as they relate to a business unit's processes, policies,
procedures, systems and financial controls.
4. Conducts risk assessment and process design analysis. Provides interpretation and
recommendations to auditing management on issues such as changes in methods and procedures
to increase the efficiency of operations and processes for the business unit.
5. Analyzes existing policies, procedures and systems and their risk as well as their cost to
promote effective operations and processes through improvement, simplification, discontinuance
or other methods. Reviews organizational functions and structure; recommends the installation
or implementation of new systems, processes, or financial controls in various departments.
6. Evaluates new risk scenarios and the impact of the input/output flow in order to provide
recommendations on reducing risk and minimizing liability.
7. Conducts financial and operational audits by verifying and examining accounting ledgers,
statements, invoices, records, procedures, and other statistical information within the
organization.
8. Identifies and evaluates internal control problems, departures from financial or operating
procedures and standards. Distinguishes between symptoms and problems of financial and
control processes and evaluates their effectiveness, recommends solutions that address the root
cause to the problems.
9. Evaluates accounting records and methods, tax records and tax payments, reconciliation of
company bank accounts, and audits of operational/managerial methods. Develops
recommendations for improvements and corrections to the auditing management and the
business unit.
10. Evaluates existing and proposed computer systems including scheduling, processing,
input/output systems flow, controls and edits , data storage, and security procedures.
11. Evaluates and determines if data processing procedures and systems conform to corporate
policies and standards. Ensures that proper systems controls are in place and that data processing
operations are efficient, cost effective, accurate and in compliance with company standards.
12. Performs other duties as assigned.
JOB REQUIREMENTS:
Education/Knowledge: Undergraduate studies in a business related field. Progress toward a
professional designation such as CPCU, CLU, CPA, CIA,CISA etc. preferred. Proven
knowledge in business concepts and theory. Must have an operational knowledge and
application of audit practices to multiple functional areas.
Experience: Four years of auditing or technical insurance experience.
Skills: Must have analytical skills to analyze workflow procedures and processes with company
standards. Must have decision-making ability as well as problem solving skills to provide
resolution to process and control problems. Must have organizational skills to plan less complex
audits. Must possess negotiation skills and platform skills. Must have the ability to function in a
team environment and work on multiple projects. Must have P/C skills and knowledge of related
software. Must possess interview skills. Must have oral and written communication skills.
JOB CONDITIONS:
Overtime Eligibility: Not Eligible (Exempt).
Working Conditions: Normal office environment. Occasional travel. Non-standard or extended
work may be required based on project needs.
ADA: The above statements cover what are generally believed to be principal and essential
functions of this job. Specific circumstances may allow or require some people assigned to the
job to perform a somewhat different combination of duties.
Resume Submission:
Interested individuals should email a resume to Steve Kaufman at
KAUFMAS8@nationwide.com or apply on-line at
https://careers.nationwide.com/hcm/Nationwide-jobs-apply.html
IT Audit Specialist
This position is within the Information Technology Audit area in Internal Audit. This position
will focus on technology specific audits as well as integrated audits across the company. The
successful candidate will have the ability to effectively interact across various levels of the
organization.
JOB SUMMARY: Participates in information technology (IT) related audit assignments from
planning to reporting. Assists audit lead in determining audit scope. Responsible for completing
fieldwork in a timely manner.
LOCATION: Corporate Auditing
RELATIONSHIP: Reports to Audit Director/Audit Officer
DIRECT REPORTS: No employees report directly to this position.
JOB RESPONSIBILITIES:






Participates in IT reviews that focus on assessing risks in a complex IT
environment. Technologies areas include mainframe, distributed, database, in-house
developed applications, ERP applications, and network infrastructure technology.
Participates in reviews of complex general IT and application control reviews as a part of
operational assessments. May also lead portions of the reviews of less complex
controls. Specialist will be expected to work collaboratively with the operational audit
lead to identify key risks and the controls in place to mitigate those risks.
Develops draft audit findings through identifying and gathering support for potential
issues, as well as recommending value added solutions.
Participates in the IT risk assessment process in support of developing the audit plan.
Uses audit tools, such as ACL, to assist other team members with the extraction and
analysis of data used in support of operational assessments.
Maintains strong technical knowledge in the areas of information security, auditing,
industry, and company priorities.
JOB REQUIREMENTS:
Education: A bachelor's or master's degree in computer science, information systems,
engineering, business, accounting, finance, or a related discipline.
Licenses/Registration: Obtained or working towards CISA, CISSP, PMP or ITIL certification
Experience: Three to six+ years of IT auditing experience and/or equivalent technical
experience.
Knowledge:

Working knowledge of IT Audit risk assessment techniques as well as IT controls.








Working knowledge of information technology best practices and control frameworks,
including, but not limited to ITIL, COBIT, ISO/IEC.
Understanding of various operating system platforms including Windows 200X, UNIX,
OS/400, etc.
Understanding of relational database security concepts and platforms, including Oracle,
Microsoft SQL Server and DB2.
Understanding of enterprise network and systems architecture concepts and technologies,
including but not limited to enterprise directory, enterprise integration architecture, and
identity & access management.
Understanding of SDLC and generally accepted IT project management methodologies
and approaches.
Understanding of managed service risk and control concepts for 'cloud'-based application
services, hosted infrastructure and outsourcing services.
Understanding of information security/protection concepts.
Experience with business process mapping and controls identification, design and
implementation.

Skills/Competencies:






Must possess decision-making skills for problem identification and solution
recommendation.
Must have strong verbal and written communication skills.
Must have negotiation skills.
Must have ability to prioritize and execute various responsibilities in dynamic
environment.
Must have analytical skills to assess risk and evaluate a variety of operational, financial,
and systems controls and processes.
Must have data analytic skills and proven knowledge in related software.
Values: Regularly and consistently demonstrates the Nationwide Values and Guiding Behaviors.
JOB CONDITIONS:
Overtime Eligibility: Not Eligible (Exempt).
Working Conditions: Normal working conditions.
ADA: The above statements cover what are generally believed to be principal and essential
functions of this job. Specific circumstances may allow or require some people assigned to the
job to perform a somewhat different combination of duties.
Resume Submission:
Interested individuals should email a resume to Steve Kaufman at
KAUFMAS8@nationwide.com or apply on-line at
https://careers.nationwide.com/hcm/Nationwide-jobs-apply.html
IT Audit Consultant
JOB SUMMARY: Leads information technology (IT) related audit assignments from planning to
reporting. Determines overall audit scope, and is responsible for completing fieldwork and
reporting in a timely manner.
RELATIONSHIP: Reports to Audit AVP/Director (Lead)
JOB RESPONSIBILITIES:
Plans, executes, and leads IT reviews that focus on assessing risks in a complex IT
environment. Technologies areas include mainframe, distributed, database, in-house developed
applications, ERP applications, and network infrastructure technology.








Plans, executes, and leads IT general and application control reviews as a part of
operational assessments. Consultant will be expected to work collaboratively with the
operational audit lead to identify key risks and the controls in place to mitigate those
risks. Consultant will also be expected to leverage IT Audit staff as well as operational
audit staff to conduct IT control testing.
Develops draft audit reports by identifying and gathering support for potential issues, and
recommending value added solutions.
Provides consulting services to management in order to improve information systems and
guide the implementation of audit recommendations.
Leads portions of the IT risk assessment process in support of developing the audit plan.
Provides development opportunities to team members staffed on a particular
review. Also responsible for providing coaching and feedback to staff throughout the
review.
Uses audit tools, such as ACL, to assist other team members with the extraction and
analysis of data used in support of operational assessments.
Develops and maintains positive working relationships with the management team to
keep abreast of emerging risks, and to communicate project status and present audit
results.
Maintains strong technical knowledge in the areas of information security, auditing,
industry, and company priorities.
Provides consulting services to management in order to improve information systems
and guide the implementation of audit recommendations.
JOB REQUIREMENTS:
Education: A bachelor's or master's degree in computer science, information systems,
engineering, business, accounting, finance, or a related discipline.
Licenses/Registration: Professional certification such as a CISA, CISSP, or ITIL
certification.
Experience: 6+ years of IT audit experience and/or equivalent recent handson technical
experience
Knowledge:
Working knowledge of IT Audit risk assessment techniques as well as IT controls.















Working knowledge of information technology best practices and control frameworks,
including, but not limited to ITIL, COBIT, ISO/IEC.
Understanding of various operating system platforms including Windows 200X, UNIX,
etc. Working knowledge of relational database security concepts and platforms, including
Oracle, Microsoft SQL Server and DB2.
Working knowledge of enterprise network and systems architecture concepts and
technologies, including but not limited to enterprise directory, enterprise integration
architecture, and identity & access management.
Working knowledge of security controls for internet facing ecommerce and social media
web applications. Working knowledge of SDLC and generally accepted IT project
management methodologies and approaches.
Working knowledge of managed service risk and control concepts for 'cloud'based
application services, hosted infrastructure and outsourcing services.
Working knowledge of information security/protection concepts
Experience with business process mapping and controls identification, design and
implementation.
Strong business acumen.
Skills/Competencies:
Must possess decisionmaking skills for problem identification and solution
recommendation.
Must have strong verbal and written communication skills.
Must have negotiation skills.
Must have strong project management and organization skills to plan and execute major
audits.
Must have proven team leadership skills including: interacting effectively with team
members, motivating, providing feedback and influencing.
Must have analytical skills to assess risk and evaluate a variety of operational, financial,
and systems controls and processes.
Must have data analytic skills and proven knowledge in related software.
Values:
Regularly and consistently demonstrates the Nationwide Values and Guiding Behaviors.
Overtime Eligibility: Not Eligible (Exempt)
Working Conditions: Normal working conditions.
ADA: The above statements cover what are generally believed to be principal and essential
functions of this job. Specific circumstances may allow or require some people assigned to the
job to perform a somewhat different combination of duties.
Resume Submission:
Interested individuals should email a resume to Steve Kaufman at
KAUFMAS8@nationwide.com or apply on-line at
https://careers.nationwide.com/hcm/Nationwide-jobs-apply.html