Internal Controls

Job Juncture; Boston (MA); On-site; USD 110,000 - 120,000; Full time

Job summary

Job Juncture is recruiting an Internal Controls Manager for a leading US healthcare insurer. The role partners with Finance, IT, Operations and Compliance to ensure MAR/SOC control integrity, audit readiness, and regulator alignment.

Accountabilities include managing MAR/SOC testing across 200+ controls, coordinating external auditors, and driving remediation. Strong SOX, ICFR, and analytics experience are required, with CPA/CIA preferred.

Qualifications

• 4+ years of progressive audit experience, preferably including Model Audit Rule/SOX 404 and SOC reporting.
• Knowledge of insurance operations; healthcare insurance experience preferred.
• Experience in a financial services organization and/or public accounting is a plus.
• Experience with audit sampling and internal controls testing methodologies.
• Familiarity with AuditBoard or an equivalent audit management platform.

Responsibilities

• Oversee delivery of MAR and SOC program activities, including creation and maintenance of process documentation, walk-throughs, testing, and reporting.
• Coordinate management's risk assessment of internal control over financial reporting (ICFR) in accordance with MAR requirements.
• Maintain and enhance MAR control frameworks, process narratives, risk and control matrices (RCMs), and testing protocols.
• Manage the annual SOC examination lifecycle, including scope definition, mapping controls to relevant control objectives, and organizational readiness.
• Review and validate SOC deliverables, including updating SOC reports and coordinating and monitoring external auditors through walk-throughs, testing, and reporting.
• Track and manage MAR and SOC deficiencies, including root cause analysis, remediation plans, and validation of corrective actions.
• Serve as the primary liaison with management and external auditors on MAR and SOC inquiries, testing, and project management.
• Monitor changes in MAR and SOC standards and assess their impact on the program and organization.
• Direct and oversee audit staff assigned to MAR and SOC activities, providing performance and development feedback.
• Communicate with Audit Plan Managers on budget, timelines, and status of MAR and SOC activities to ensure timely delivery through each phase of the annual cycle.

Skills

MAR/SOC controls

ICFR

Audit

Data analytics

Cross-functional collaboration

Education

Bachelor's degree

CPA or CIA certification

Tools

AuditBoard

Job description

Internal Controls Manager

Our client is a leading healthcare insurer delivering high-quality, affordable healthcare to nearly 2 million members. The organization offers excellent benefits and a culture that values professionalism and work/life balance.

The organization is recruiting for an Internal Controls Manager. The Internal Controls Manager reports to an Audit Senior Manager and leads the evaluation, execution, maintenance, and continuous improvement of the organization's Model Audit Rule (MAR) and Service Organization Control (SOC) reporting programs. This role serves as a key control advisor and partner to Finance, IT, Operations, and Compliance, ensuring control integrity, audit readiness, and alignment with regulatory and customer assurance expectations. The Internal Controls Manager also partners with external auditors and regulators to maintain that alignment.

The role follows a predictable annual cycle centered on reviewing and testing the organization's 200+ internal controls and nearly 70 SOC controls. Much of the SOC work is performed on behalf of members, who rely on these controls for assurance that their insurance claims are processed accurately and properly.

The Annual Cycle

• Q1 Planning: Scope and plan the year's MAR and SOC audits.
• Q2 Review & Testing: Review existing controls and begin testing.
• Q3 Peak Testing: The busiest testing period of the year; because testing spans roughly nine months, this work regularly spills into adjacent quarters.
• Q4 Reporting & Remediation: Finalize audit reporting and drive remediation of identified issues.

Three statutory reporting months January, June, and September intersect with this quarterly cycle and shape deadlines throughout the year.

Key Responsibilities

• Oversee delivery of MAR and SOC program activities, including creation and maintenance of process documentation, walk-throughs, testing, and reporting.
• Coordinate management's risk assessment of internal control over financial reporting (ICFR) in accordance with MAR requirements.
• Maintain and enhance MAR control frameworks, process narratives, risk and control matrices (RCMs), and testing protocols.
• Manage the annual SOC examination lifecycle, including scope definition, mapping controls to relevant control objectives, and organizational readiness.
• Review and validate SOC deliverables, including updating SOC reports and coordinating and monitoring external auditors through walk-throughs, testing, and reporting.
• Track and manage MAR and SOC deficiencies, including root cause analysis, remediation plans, and validation of corrective actions.
• Serve as the primary liaison with management and external auditors on MAR and SOC inquiries, testing, and project management.
• Monitor changes in MAR and SOC standards and assess their impact on the program and organization.
• Direct and oversee audit staff assigned to MAR and SOC activities, providing performance and development feedback.
• Communicate with Audit Plan Managers on budget, timelines, and status of MAR and SOC activities to ensure timely delivery through each phase of the annual cycle.

Qualifications

Education, Certification and Licensure

• Bachelor's degree required; advanced degree preferred.
• CPA or CIA certification preferred.

Experience (minimum required)

• 4+ years of progressive audit experience, preferably including Model Audit Rule/SOX 404 and SOC reporting.
• Knowledge of insurance operations; healthcare insurance experience preferred.
• Experience in a financial services organization and/or public accounting is a plus.
• Experience with audit sampling and internal controls testing methodologies.
• Familiarity with AuditBoard or an equivalent audit management platform.

Skill Requirements

• Strong understanding of SOX frameworks, including Model Audit Rule/ICFR and SOC reporting.
• Data analytics experience preferred.

Salary Type : Annual Salary

Salary Min : $ 110000

Salary Max : $ 120000

Currency Type : USD