IT Compliance Intern

IT Compliance Intern at Allstate

National General, a part of The Allstate Corporation, is driven by innovation to meet evolving customer needs in home, auto, and accident & health insurance. We operate through a vast network of independent agents and direct-to-consumer channels.

Job Overview

The IT Compliance Intern will support National General's SOX audit engagement. This involves gathering audit request evidence, creating and assigning Audit Request Management (ARM) requests, following up with control owners, organizing documentation, and uploading it to external auditors' collaboration tools. The intern will maintain the EIRC SOX evidence repository, perform basic data testing in Excel, participate in business process walkthroughs, and document meeting notes to capture process changes for SOX technology inventory updates. This role provides hands-on exposure to SOX IT General Controls testing, evidence management, audit planning and tracking, and stakeholder coordination within a dynamic, regulated environment.

Key Responsibilities

• Audit Request: Create and assign audit requests/PBCs using the ARM tool. Assign requests to control owners, track due dates, and follow up for timely responses. Escalate delays and data gaps to the Audit Lead with clear status updates and risk/impact notes.
• Evidence Collection & Organization: Guide control owners on prior year evidence. Organize, index, and label evidence consistently (e.g., control ID, period, versioning).
• Evidence Repository: Maintain the EIRC SOX evidence repository, ensuring all required evidence is captured, stored in the correct folder structure, and properly linked to controls/requests. Monitor repository hygiene and ensure proper updates. Upload approved evidence packages to auditors through designated portals/tools.
• Testing & Documentation: Perform basic data testing in Excel (filters, lookups, pivots, reconciliations, tie-outs) to support compliance monitoring efforts. Participate in process walkthroughs with control owners and technology stakeholders. Document clear, accurate meeting notes with process flows, key reports, systems, and control points; identify changes for SOX Technology Inventory updates. Draft/update working papers and templates under supervision.
• Status Tracking: Support audit planning by updating tasks, milestones, and owners in the tracking tool. Assist with maintaining dashboards/status trackers for request aging, evidence completeness, and request progress.

Key Learning Opportunities

• Gain hands-on experience across the SOX lifecycle: scoping, walkthroughs, evidence gathering, and auditor interaction.
• Learn about IT General Controls (ITGCs), automated controls, and key reports.
• Build real-world SOX experience, working directly with auditors and control owners.
• Develop technical and business skills applicable to audit, risk, finance, and technology roles.
• Build professional skills in stakeholder management, written documentation, and time management.
• Gain exposure to GRC/evidence repositories and auditor portals.
• Understand how process and system changes impact the SOX Technology Inventory and control design.

Required Qualifications

• Currently pursuing a master’s or bachelor’s degree in Information Systems, Computer Science, Technology, Data Analytics, or related fields.
• Excel proficiency: sorting/filtering, conditional formatting, VLOOKUP/XLOOKUP, basic PivotTables, text/date functions, and data validation.
• Strong organizational skills with attention to detail and the ability to manage deadlines.
• Effective written and verbal communication; able to document notes and instructions clearly.
• Demonstrated professionalism, confidentiality, and integrity when handling sensitive data.

Preferred Qualifications (Nice To Have)

• Prior internship, coursework, or project experience in audit, SOX, risk, or compliance.
• Familiarity with IT General Controls (ITGCs), key reports, and change management concepts.
• Experience with SharePoint/Teams, audit request portals, or GRC/evidence repositories (e.g., ServiceNow GRC, Archer, Workiva, OneTrust).
• Basic data skills beyond Excel (e.g., Power Query, Power BI, or SQL basics).
• Exposure to flowcharting (Visio, Lucidchart) and writing procedure narratives.

Core Competencies

• Ownership & Follow-Through: Drives tasks to closure with timely follow-ups and crisp status.
• Detail Orientation: Catches inconsistencies and documentation gaps early.
• Collaboration: Partners effectively with control owners and teammates.
• Time Management: Prioritizes competing deadlines with clear escalation when needed.
• Learning Agility: Quickly absorbs process knowledge and applies guidance consistently.

Tools & Platforms

• Microsoft 365: Excel, SharePoint, Teams, OneDrive, PowerPoint, Word.
• EIRC SOX evidence repository (primary system of record).
• Audit request portal / ticketing system; possible GRC platform (e.g., ServiceNow GRC, Archer, Workiva).
• Visio/Lucidchart for process flows (as needed).

Key skills/competency

• IT Compliance
• SOX Audit
• Evidence Management
• Data Testing
• IT General Controls (ITGCs)
• Stakeholder Management
• Microsoft Excel
• SharePoint
• Risk Management
• Documentation