Senior IT Internal Auditor

The Group: Reporting to the Board of Directors, Morningstar’s Global Audit and Assurance is an independent, objective assurance and consulting activity designed to add value and improve the company’s operations. Global Audit and Assurance helps the company accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes. The Role: Morningstar’s Global Audit and Assurance seeks a highly motivated Senior IT Internal Auditor who thrives on new experiences and challenges.

As a Senior IT Internal Auditor, you will play an integral role in evaluating the company’s information technology and information security processes and effectiveness of internal controls. You will have the opportunity to work on a variety of operational, information technology, and compliance reviews as well as evaluate the effectiveness of internal controls over external financial reporting as part of the company’s Sarbanes-Oxley Section 404 compliance activities. The position is based at the company’s headquarters in Chicago.

You will work closely with all levels of management across the organization, recommending changes to strengthen controls for increased efficiencies and reduced risks. The Senior IT Internal Auditor will have the opportunity to utilize and reference world-class audit tools and audit methodologies in the performance of his or her duties. This position is based in our Chicago office and follows our hybrid schedule, 4 days/week in office. Job responsibilities: Assist with the planning, management, and execution of operational, information technology, and compliance-related reviews.

Perform walkthroughs of complex information technology and information security processes and test the design and effectiveness of internal controls. Document work and assist in the preparation of observations and recommendations for corrective action. Supervise audit staff and external consultants, review workpapers, and provide appropriate coaching and feedback. Effectively apply the COSO internal control framework, COBIT IT governance framework, NIST Cyber Security Framework and IIA International Professional Practices Framework. Serve as a consultant and business partner with management.

Qualifications: Action-oriented, self-starter with strong verbal and written communication skills. Comfortable working both independently or in teams and working within a complex environment. Ability to diagnose problems, determine root causes, and recommend solutions to complex challenges. Strong understanding of information technology general computer controls, system development life cycle, and IT auditing techniques; including a broad knowledge of IT technologies, operating systems, databases, and application platforms.

Knowledge of recognized IT audit and governance frameworks such as COBIT, ITIL, NIST, ISO, etc. Undergraduate degree in accounting, information technology, management information systems, or a related field. Four or more years of internal or external audit experience assessing information technology/security controls and/or internal controls over financial reporting. Proven ability to manage people and projects, and actively develop team members. Willingness to travel to domestic and international offices.

Nice to have: Experience in working for a Big 4 or Tier-Two public accounting firm preferred. Knowledge of General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) is a plus. Experience performing data analytics and using data analysis or automated audit software is a plus. Professional accreditation (e.g., CISA, CISM) is a plus. Compensation and Benefits At Morningstar we believe people are at their best when they are at their healthiest.

That’s why we champion your wellness through a wide range of programs that support all stages of your personal and professional life.

Here are some examples of the offerings we provide: Financial Health 100% 401k match up to 6% of salary Stock Ownership Potential Company provided life insurance - 1x salary + commission Physical Health Comprehensive health benefits (medical/dental/vision) including potential premium discounts and company-provided HSA contributions (up to $500-$2,000 annually) for specific plans and coverages Additional medical Wellness Incentives - up to $300-$600 annual Company-provided long- and short-term disability insurance Emotional Health Trust-Based Time Off 6-week Paid Sabbatical Program 6-Week

Paid Family Caregiving Leave Competitive 8-24 Week Paid Parental Leave Adoption Assistance Leadership Coaching & Formal Mentorship Opportunities Annual Flex Stipend - $1000 annually to cover personal education & well-being expenses Tuition Reimbursement Social Health Charitable Matching Gifts program Dollars for Doers volunteer program Paid volunteering days 15+ Employee Resource & Affinity Groups Total Cash Compensation Range $95,275.00-139,741.66 Inclusive of annual base salary and target incentive Morningstar's hybrid work environment gives you the opportunity to collaborate

in-person each week as we've found that we're at our best when we're purposely together on a regular basis. In most of our locations, our hybrid work model is four days in-office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you'll have tools and resources to engage meaningfully with your global colleagues. 001\_MstarInc Morningstar Inc. Legal Entity How to Apply for a Job at Morningstar Step 1 When you find a position you're interested in, click the 'Apply' button.

Please fill out this form completely, attaching your resume and cover letter in the approved format. Read the job requirements carefully and make sure to attach writing or design samples as required. Applicants must submit their resume and other information through our corporate website to be considered for a job at Morningstar. No phone calls, please. Step 2 You will receive an email notification to confirm that we've received your application. Step 3 If you are called in for an interview, a representative from Morningstar will contact you to set up a date, time, and location.

Be prepared for a rigorous interview process. To make sure you're a good fit for Morningstar and we're a good fit for you, we'll schedule time for you to meet with multiple staff members at all levels of the company. Expect to return for multiple interviews as part of the process. A representative from Morningstar will contact you with the results of your interview—either with a job offer or to let you know our plans for the position.

Applicants With Disabilities Who Need Accommodation Morningstar is committed to working with and providing reasonable accommodation to individuals with disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the employment process, please call +1 312 384-3900 or email AskHR@morningstar.com and let us know the nature of your request and your contact information. Please note: We only accept calls from applicants who need accommodation related to a disability. Please, no calls with unrelated questions or requests.

Please be sure to include the title and location of the open position you’re interested in when you leave a message. US Applicants: Morningstar is an E-Verify program participant. Learn more: This Organization Participates in E-Verify (English) This Organization Participates in E-Verify (Spanish) Right to Work (English) Right to Work (Spanish) EEO is the Law Pay Transparency Notice Morningstar is strongly committed to creating and preserving equal opportunity for all employees and applicants.

We make all employment decisions—including recruitment, hiring, compensation, training, promotion, transfer, discipline, termination, and other personnel matters—without regard to race, color, ancestry, religion, sex, national origin, age, disability, protected veteran status, marital status, sexual orientation, genetic information, citizenship, gender identity and expression, parental status, or other legally protected characteristics or conduct.

• Undergraduate degree in accounting, IT, MIS, or related field with 4+ years audit experience in IT/security controls or financial reporting.
• Strong knowledge of IT audit frameworks (COBIT, NIST, ITIL), IT general controls, SDLC, and IT auditing techniques.
• Proven ability to manage people/projects, strong communication skills, and willingness to travel domestically and internationally.