SOX Auditor III# 26-14280

Model Audit Rule (MAR/SOX) Compliance Specialist

Supports the Model Audit Rule (MAR/SOX) Department in the compliance effort that results in annual reporting to the Department of Insurance in activities such as, but not limited to: risk assessments, process documentation (Financial, Operational and I/S Processes), identification of risks and key controls, testing of controls, reporting of deficiencies, evaluation of deficiencies, periodic reporting to Management, Steering Committee and the Department of Insurance.

Based on the output from the risk assessment, evaluates processes that impact each 'in-scope' financial statement line item and performs control documentation activities, including operational, financial, Entity Level and I/S processes.

Determines applicable risks and mitigation through control activities. Ensures that risks are appropriately addressed based on COSO/COBiT/MAR guidance. Identifies remediation needed for any unmitigated risks and communicates with management.

Makes recommendations on remediation design and uses project processes to ensure remediation is made. Prepares and maintains clear, detailed, accurate MAR/SOX documentation, including process narratives, policies and procedures, process diagrams, control descriptions, risk and control matrices, test plans and test results evaluations.

Works with management (Director and above) to obtain approval or modifications needed.

Performs peer review of testing conclusions and/or documents (Narratives, Process Diagrams, Risk and Control Matrices, Test Plans, Test Workpapers, remediations, etc.) prepared by peers to ensure departmental standards are met. Works with peers to ensure improvement opportunities are adequately addressed.

Participates in the risk assessment process for each company required to comply with MAR/SOX based on a top-down risk-based approach. Ensures that risks identified through the risk assessment process are mitigated by those controls mapped to each financial statement line item.

Performs project work as directed by management team. Projects will be focused on improving quality and efficiency of MAR team functions.

Reviews, approves and communicates with management all remediations identified through testing and design evaluation. Follows departmental process to ensure an adequate response is provided to resolve the remediation and mitigate the risks identified.

Escalates, as needed during the process, to ensure deadlines are met.

Assists internal and external auditors (including the Department of Insurance), with an emphasis on leveraging MAR/SOX work to reduce duplication of efforts and the burden on management throughout the organization.

Required Skills and Abilities: SOX/MAR, Compliance, Auditing, Risk Management, Healthcare or insurance industry experience. Knowledge of IT general controls (methodologies), COSO, COBiT, and project management. Work Environment: Large-scale professional services environment.

Required Education Level and Degree Type: Bachelor's degree- Accounting, Computer Science, Business Administration, Information Systems, Finance, or other job-related field.

Required Work Experience: 5 years-auditing, Information Systems, Sarbanes-Oxley/MAR, compliance or accounting/financial experience.