Marsh & McLennan Companies is a global professional services firm providing advice and solutions in the areas of risk, strategy and human capital. It is the parent company of a number of the world’s leading risk experts and specialty consultants,
including Marsh, the insurance broker and risk advisor; Guy Carpenter, the risk and reinsurance specialist; Mercer, the provider of HR and related financial advice and services; and Oliver Wyman, the management consultancy. With over 50,000 employees worldwide and annual revenue of approximately $10 billion, Marsh & McLennan Companies provides analysis, advice and transactional capabilities to clients in more than 100 countries. Its stock (ticker symbol: MMC) is listed on the New York, Chicago and London stock exchanges.
Marsh & McLennan Companies Corporate serves as an internal business function providing infrastructure and operational services to our family of companies. Through a shared vision and best practices, we provide efficient and sustainable solutions to meet internal customer business needs. We are looking for talented and motivated individuals to join our team!
Reporting to the Senior Director, the
IT Audit Manager
, Australia, will be an integral part of the Internal Audit team, directing and participating in planning and performance of IT-related internal audits and special projects, or joining the operational and financial audit teams for integrated audits. Our IT and Integrated Audits vary in size and complexity from field offices to large, regional data centers, in this case in the Asia Pacific.
MMCo Internal Audit focuses on the “objectives, risks, and controls” perspective, derived from the original COSO study and related auditing frameworks. To apply this concept effectively, the IT Audit Manager will assess the risks associated with various business objectives and evaluate the controls in place to mitigate those risks. From an IT perspective, this means understanding the Mercer Australia businesses and supporting information technology to ascertain whether the IT environment (including applications, data centers, server rooms, operating systems, or processes such as change management and information security) is controlled and protected effectively.
The IT audit manager will be responsible to assist Senior Managers in risk assessment and the resulting development and implementation of a yearly and ongoing internal audit plan, designed to provide assurance to Corporate management that IT Controls are effective. Where possible, this will include use of data analytics and other technology tools.
The businesses audited vary from Mercer’s employee benefits consulting services to complex insurance and reinsurance brokerage in Marsh and Guy Carpenter. Depending on the materiality of the entity audited, the IT audit manager will have primary responsibility for ensuring that IT audit findings are communicated adequately (typically by audit supervisors or seniors) to local management. This takes form of status updates and closing meetings and written audit reports. For the IT audit findings, such discussions often include both OpCo and MGTI management.
Maintain high quality standards on assigned audit projects by the following means:
Review and approve audit programs and work plans prepared by staff members
Monitor events and circumstances of assigned audit projects in progress and supervise the performance of staff members assigned
Review workpapers of projects assigned to ensure adequate documentation was gathered to form a basis for reporting the audit results to management
Participate in closing meetings as required with the audit team
Review audit reports in conjunction with workpaper reviews to ensure accurate reporting of essential information in a professional manner.
Assist the internal audit team in administrative functions, as follows:
Develop annual audit plans based on a sound risk assessment
Coordinate plans with operating company management
Recruiting efforts when additional staff is required
Staff performance evaluation and salary reviews
Promote the use of software tools for data analysis and other automated techniques
Promoting compliance with consistent internal audit practices and use of our software
Conduct audit examinations in accordance with department standards, supervising the work of assistants effectively
Assist in developing technical skills and audit capabilities of staff through informal on‑the‑job training techniques and formal instruction in topic areas during periodic staff meetings.
Keep current with evolving information technology and related audit techniques and practices
Contribute to the internal audit profession through attendance and participation in meetings of appropriate professional groups
Undergraduate degree in information technology, business or accounting with MIS minor.
Active pursuit of professional designations (e.g. CISA or related qualification) or progress in that direction is desirable.
Other IT-related designations may suffice, such as a project management certification
Minimum of 4 years information technology or audit experience is critical; insurance, broking, or financial services is a plus
Solid understanding of operating systems and databases, such as Windows, UNIX/ LINUX, Oracle, Windows Server
Ability to understand security and business applications and their affect on operations
Solid analytical, problem solving, organization, and project management skills
Ability to understand the relationships among complex IT and business issues
Control knowledge sufficient to recognize the requirements and agree on solutions proposed by management to address audit findings
The ability to communicate effectively at all management levels is key to successful performance as an IT audit manager, including verbal and written skills.
The manager should be enthusiastic, have sound business judgment, and be tactful
Ability to travel (40% maximum), including international, is fundamental
Marsh & McLennan Companies offers competitive salaries and comprehensive benefits and programs. For more information about our company, please visit us at:
We embrace a culture that celebrates and promotes the many backgrounds, heritages and perspectives of our colleagues and clients. For more information, please visit us at:
Marsh & McLennan Companies and its Affiliates
are equal opportunity employers