Internal Controls Associate- MSI

Why MSI? We thrive on solving challenges.

As a leading MGA, MSI combines deep underwriting expertise with insurer and reinsurer risk capacity to create specialized insurance solutions that empower distribution partners to meet customers’ unique needs.

We have a passion for crafting solutions for the important risks facing individuals and businesses. We offer an expanding suite of products – from fully-digital embedded renters coverage to high-value homeowners insurance to sophisticated commercial coverages, such as cyber liability and habitational property – delivered through agents, brokers, wholesalers and other brand partners.

Our partners and customers count on us to deliver exceptional service through a dedicated team that makes rapid resolutions a priority. We simplify the insurance experience through our advanced technology platform that supports every phase of the policy lifecycle.

Bring on your challenges and let us show you how we build insurance better.

The Internal Controls Associat e is responsible for supporting and enhancing the organization's overall internal control environment across business operations, technology platforms, financial reporting, information security, regulatory compliance, and risk management activities. This role evaluates the design and effectiveness of controls, documents key processes and procedures, maintains evidence to demonstrate control performance, and collaborates with business and technology teams to identify, assess, and mitigate risks.

The Internal Controls Associate assists with internal audits, operational reviews, control testing and/or execution, remediation efforts, and compliance initiatives related to applicable laws, regulations, industry standards, and contractual obligations. Responsibilities extend beyond any single regulatory framework and may include supporting compliance with Sarbanes-Oxley (SOX), privacy regulations, cybersecurity requirements, insurance industry regulations, and other governance, risk, and compliance obligations as applicable to the organization.

This position plays a key role in promoting a strong control culture by continuously assessing organizational risks, identifying control gaps, recommending improvements, and helping ensure that the company's overall control environment remains effective, sustainable, and aligned with business objectives, regulatory requirements, and industry best practices.

Key Responsibilities

Internal Control Program Administration

• Support the design, execution, and documentation of IT General Controls (ITGCs), including user access reviews, segregation of duties, and system change management controls.
• Document and maintain policies, procedures, process flows, risk and control matrices (RCMs), and control narratives in alignment with COSO principles.
• Ensure controls are appropriately designed to mitigate identified business, operational, financial, compliance, and technology risks.

Risk Assessment and Control Design

• Perform periodic risk assessments across business and technology functions.
• Identify control gaps, emerging risks, and process inefficiencies.
• Develop and recommend risk mitigation strategies and control enhancements.
• Support enterprise risk management and compliance initiatives.

Control Testing and Monitoring

• Develop and execute control testing procedures to evaluate control design and operating effectiveness.
• Analyze testing results, identify deficiencies, and track remediation activities.
• Maintain evidence supporting control execution and effectiveness.
• Monitor key controls through continuous auditing and data analytics techniques where applicable.

Regulatory and Compliance Support

• Support compliance with applicable regulations, standards, and contractual obligations, including: Sarbanes-Oxley (SOX)State insurance regulationsPrivacy regulations (CCPA, CPRA, GDPR, etc.)Cybersecurity and information security requirementsSOC reporting, PCI DSS, and other industry-specific frameworks as applicable
• Assist in preparing regulatory examinations, audits, and compliance assessments.

Audit Coordination and Management

• Serve as a primary liaison for Internal Audit and external auditors.
• Coordinate audit requests and facilitate walkthroughs, interviews, and evidence collection.
• Respond to audit inquiries and support remediation efforts.
• Track audit findings and ensure corrective actions are implemented timely.

Operational and Business Process Reviews

• Evaluate operational processes to identify risks, inefficiencies, and control weaknesses.
• Conduct special reviews and investigations relating to control failures, incidents, or identified concerns.
• Participate in assessments related to fraud prevention, business continuity, vendor management, and cybersecurity.
• Perform periodic user access reviews across key business applications and platforms, including Microsoft Entra ID , to ensure appropriate access and compliance with internal policies.

Reporting and Stakeholder Engagement

• Prepare clear, concise, and audit-ready reports summarizing risks, control effectiveness, and recommendations.
• Communicate findings and corrective action plans to business and technology leadership.
• Escalate significant issues and emerging risks appropriately.
• Present control-related information to management committees and stakeholders.

Continuous Improvement

• Identify opportunities to enhance operational efficiency, governance, and compliance processes.
• Assist in developing metrics, dashboards, and reporting to monitor control effectiveness.
• Promote a culture of accountability, risk awareness, and strong internal controls throughout the organization.
• Stay informed on regulatory changes, emerging risks, and industry best practices affecting the insurance sector.

Other Duties

• Support control, audit, risk management, governance, compliance, and operational initiatives as assigned by Internal Controls leadership.
• Perform additional control-related activities necessary to maintain an effective enterprise-wide control environment.
• Support the implementation and governance of controls within Microsoft Azure environments, including access management, security configurations, and compliance requirements.

Core Competencies that predict success in a high-accountability Internal Controls Role:

• Bachelor’s degree in accounting, Finance or Tech preferred
• 1-2 years of experience in internal controls, external or internal audit positions.
• Big four or banking experience is a plus.
• Demonstrated ability to consistently deliver on commitments and manage competing priorities.
• Strong organizational, planning, and project management skills.
• Sound professional judgment and risk-based decision-making capabilities.
• Exceptional attention to detail and analytical thinking.
• Strong written and verbal communication skills.
• Ability to work independently with minimal supervision.
• Demonstrated accountability, ownership, and follow-through.
• Strong listening skills and openness to coaching and feedback.
• Ability to quickly learn new systems, regulations, and business processes.
• Proven ability to build effective working relationships and influence stakeholders.
• Must demonstrate the organization’s core values, exuding behavior aligned with the firm’s culture.

Special Working Conditions:

Fast-paced, multi-tasking and agile environment.

Must be able to interact effectively with various levels of management both inside and outside the organization.

Important Notice:

This position description is intended to describe the level of work required of the person performing in the role and is not a contract. The essential responsibilities are outlined; other duties may be assigned as needs arise or as required to support the Firm.

#LI-BM1

#LI-REMOTE

Click here for some insight into our culture!

The Baldwin Group will not accept unsolicited resumes from any source other than directly from a candidate who applies on our career site. Any unsolicited resumes sent to The Baldwin Group, including unsolicited resumes sent via any source from an Agency, will not be considered and are not subject to any fees for any placement resulting from the receipt of an unsolicited resume.