Hybrid Senior IT Audit & Security Controls Lead

OpenLoop; United States; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, Dental & Vision

Hybrid work flexibility

401(k) with Company Match

Job summary

OpenLoop seeks a Senior IT Audit Manager to lead its IT controls audit program within the Internal Audit function. You will assess IT general controls, cybersecurity, data privacy, and AI governance across cloud and healthcare technology environments, partnering with leadership to design, remediate, and validate controls.

Reporting to the Head of Internal Audit, you will guide SOX ITGC readiness, regulatory compliance, and risk-based testing across AWS, EHR/EMR systems, and third-party SaaS

Qualifications

• Bachelor's degree in Information Systems, IT, Computer Science, or equivalent.
• Active CISA designation required.
• 7+ years IT audit experience in advisory or internal audit roles.
• Strong knowledge of IT governance frameworks (COBIT, COSO, NIST 800-53, ISO 27001).
• Experience auditing cybersecurity and cloud controls including AWS, Azure, or GCP.
• Experience auditing EHR/EMR systems and regulated healthcare tech.
• Familiarity with HIPAA, data privacy regulations (CCPA) and AI governance concepts.

Responsibilities

• Develop and maintain a risk-based IT audit plan across systems, applications, infrastructure, and emerging tech.
• Lead end-to-end IT audit engagements from planning to reporting and remediation.
• Conduct IT control testing, including ITGC across access/change management and SDLC.
• Assess cybersecurity controls including network security and IAM.
• Evaluate cloud infrastructure controls for security and compliance.
• Audit EHR/EMR systems and assess data privacy controls for HIPAA/CCPA.

Skills

IT audit

Risk assessment

Communication skills

Regulatory compliance

Education

Bachelor's degree in Information Systems

CISA designation

Tools

AuditBoard

Workiva

Vanta

Job description

OpenLoop seeks a Senior IT Audit Manager to lead its IT controls audit program within the Internal Audit function. You will assess IT general controls, cybersecurity, data privacy, and AI governance across cloud and healthcare technology environments, partnering with leadership to design, remediate, and validate controls.

Reporting to the Head of Internal Audit, you will guide SOX ITGC readiness, regulatory compliance, and risk-based testing across AWS, EHR/EMR systems, and third-party SaaS