Internal Controls

NPAworldwide; Boston (MA); On-site; USD 110,000 - 120,000; Full time

Job summary

NPAworldwide, a leading healthcare insurer, seeks an Internal Controls Manager to oversee MAR and SOC programs, partnering with Finance, IT, Operations, and Compliance to ensure control integrity and audit readiness.

The role manages the annual MAR/SOC cycle, coordinates with external auditors, and drives remediation of deficiencies. Requirements include a Bachelor's degree; CPA or CIA preferred; 4+ years in audit; ICFR/SOC experience; 110k–120k USD.

Qualifications

• 4+ years of progressive audit experience, including MAR/SOX 404 and SOC reporting.
• Knowledge of insurance operations; healthcare experience preferred.
• Experience in financial services and/or public accounting is a plus.
• Familiarity with audit sampling and testing methodologies.

Responsibilities

• Oversee MAR and SOC program activities, including documentation, walk-throughs, testing, and reporting.
• Coordinate risk assessment of ICFR in accordance with MAR requirements.
• Maintain MAR control frameworks, narratives, RCMs, and testing protocols.
• Manage the annual SOC examination lifecycle, including scope definition and mapping controls.
• Review SOC deliverables and coordinate with external auditors through testing and reporting.
• Track MAR/SOC deficiencies, root cause analysis and remediation actions.
• Serve as primary liaison with management and external auditors on inquiries and timelines.

Skills

MAR/SOC

ICFR

SOX

Data analytics

Education

Bachelor's degree

Tools

AuditBoard

Job description

Job Description:

Internal Controls Manager

Our client is a leading healthcare insurer delivering high-quality, affordable healthcare to nearly 2 million members. The organization offers excellent benefits and a culture that values professionalism and work/life balance. The organization is recruiting for an Internal Controls Manager. The Internal Controls Manager reports to an Audit Senior Manager and leads the evaluation, execution, maintenance, and continuous improvement of the organization’s Model Audit Rule (MAR) and Service Organization Control (SOC) reporting programs. This role serves as a key control advisor and partner to Finance, IT, Operations, and Compliance, ensuring control integrity, audit readiness, and alignment with regulatory and customer assurance expectations. The Internal Controls Manager also partners with external auditors and regulators to maintain that alignment. The role follows a predictable annual cycle centered on reviewing and testing the organization’s 200+ internal controls and nearly 70 SOC controls. Much of the SOC work is performed on behalf of members, who rely on these controls for assurance that their insurance claims are processed accurately and properly.

The Annual Cycle

• Q1 Planning: Scope and plan the year’s MAR and SOC audits.
• Q2 Review & Testing: Review existing controls and begin testing.
• Q3 Peak Testing: The busiest testing period of the year; because testing spans roughly nine months, this work regularly spills into adjacent quarters.
• Q4 Reporting & Remediation: Finalize audit reporting and drive remediation of identified issues.

Three statutory reporting months January, June, and September intersect with this quarterly cycle and shape deadlines throughout the year.

Key Responsibilities

• Oversee delivery of MAR and SOC program activities, including creation and maintenance of process documentation, walk-throughs, testing, and reporting.
• Coordinate management's risk assessment of internal control over financial reporting (ICFR) in accordance with MAR requirements.
• Maintain and enhance MAR control frameworks, process narratives, risk and control matrices (RCMs), and testing protocols.
• Manage the annual SOC examination lifecycle, including scope definition, mapping controls to relevant control objectives, and organizational readiness.
• Review and validate SOC deliverables, including updating SOC reports and coordinating and monitoring external auditors through walk-throughs, testing, and reporting.
• Track and manage MAR and SOC deficiencies, including root cause analysis, remediation plans, and validation of corrective actions.
• Serve as the primary liaison with management and external auditors on MAR and SOC inquiries, testing, and project management.
• Monitor changes in MAR and SOC standards and assess their impact on the program and organization.
• Direct and oversee audit staff assigned to MAR and SOC activities, providing performance and development feedback.
• Communicate with Audit Plan Managers on budget, timelines, and status of MAR and SOC activities to ensure timely delivery through each phase of the annual cycle.

Qualifications

• Bachelor's degree required; advanced degree preferred.
• CPA or CIA certification preferred.

Experience (minimum Required)

• 4+ years of progressive audit experience, preferably including Model Audit Rule/SOX 404 and SOC reporting.
• Knowledge of insurance operations; healthcare insurance experience preferred.
• Experience in a financial services organization and/or public accounting is a plus.
• Experience with audit sampling and internal controls testing methodologies.
• Familiarity with AuditBoard or an equivalent audit management platform.

Skill Requirements

• Strong understanding of SOX frameworks, including Model Audit Rule/ICFR and SOC reporting.
• Data analytics experience preferred.

Why is This a Great Opportunity:

Very professional and well-managed organization. Everyone is in office on Tuesdays; prefer everyone to come to the office one other day. Experience matters. The desired candidate has a strong controls risk background. With technology evolving rapidly and a need make sure that the organization has all the proper controls in place, demonstrated controls experience is valuable to this organization. This is a new position.

Salary Type: Annual Salary

Salary Min: $ 110000

Salary Max: $ 120000

Currency Type: USD