Internal Controls Manager - SOX and SOC Reporting

Ilocatum; Boston (MA); On-site; USD 110,000 - 120,000; Full time

Job summary

Ilocatum is seeking an Internal Controls Manager to lead MAR and SOC programs, ensuring control integrity and audit readiness. You will partner with Finance, IT, Operations, and Compliance, and coordinate with external auditors to align with regulatory and customer expectations.

The role follows an annual cycle, from Q1 planning to Q4 remediation, overseeing documentation, testing, and reporting of 200+ controls and 70 SOC controls.

Qualifications

• 4+ years of progressive audit experience, incl. MAR/SOX 404 and SOC.
• Knowledge of insurance operations; healthcare insurance experience preferred.
• Experience in financial services or public accounting is a plus.
• Experience with audit sampling and internal controls testing methodologies.
• Familiarity with AuditBoard or similar audit management platform.

Responsibilities

• Oversee MAR and SOC program activities, documentation, testing, and reporting.
• Coordinate management's ICFR risk assessment per MAR requirements.
• Maintain MAR control frameworks, narratives, RCMs, and testing protocols.
• Manage annual SOC examination lifecycle and external audit coordination.
• Track MAR/SOC deficiencies and remediation actions.
• Communicate with Audit Plan Managers on budget and timelines.

Skills

MAR/ICFR frameworks

SOC reporting

Cross-functional collaboration

Data analytics

Education

Bachelor's degree

Advanced degree preferred

CPA or CIA preferred

Job description

Job description:

Internal Controls Manager
Our client is a leading healthcare insurer delivering high-quality, affordable healthcare to nearly 2 million members. The organization offers excellent benefits and a culture that values professionalism and work/life balance. The organization is recruiting for an Internal Controls Manager. The Internal Controls Manager reports to an Audit Senior Manager and
leads the evaluation, execution, maintenance, and continuous improvement of the organization’s Model Audit Rule (MAR) and Service Organization Control (SOC) reporting programs. This role serves as a key control advisor and partner to Finance, IT, Operations, and Compliance, ensuring control integrity, audit readiness, and alignment with regulatory and
customer assurance expectations. The Internal Controls Manager also partners with external auditors and regulators to maintain that alignment.
The role follows a predictable annual cycle centered on reviewing and testing the organization’s 200+ internal controls and nearly 70 SOC controls. Much of the SOC work is performed on behalf of members, who rely on these controls for assurance that their insurance claims are processed accurately and properly.
The Annual Cycle
– Q1 Planning: Scope and plan the year’s MAR and SOC audits.
– Q2 Review & Testing: Review existing controls and begin testing.
– Q3 Peak Testing: The busiest testing period of the year; because
testing spans roughly nine months, this work regularly spills into
adjacent quarters.
– Q4 Reporting & Remediation: Finalize audit reporting and drive
remediation of identified issues.
Three statutory reporting months January, June, and September
intersect with this quarterly cycle and shape deadlines throughout the
year.
Key Responsibilities
– Oversee delivery of MAR and SOC program activities, including
creation and maintenance of process documentation, walk-throughs,
testing, and reporting.
– Coordinate management’s risk assessment of internal control over
financial reporting (ICFR) in accordance with MAR requirements.
– Maintain and enhance MAR control frameworks, process narratives,
risk and control matrices (RCMs), and testing protocols.
– Manage the annual SOC examination lifecycle, including scope
definition, mapping controls to relevant control objectives, and
organizational readiness.
– Review and validate SOC deliverables, including updating SOC reports
and coordinating and monitoring external auditors through
walk-throughs, testing, and reporting.
– Track and manage MAR and SOC deficiencies, including root cause
analysis, remediation plans, and validation of corrective actions.
– Serve as the primary liaison with management and external auditors
on MAR and SOC inquiries, testing, and project management.
– Monitor changes in MAR and SOC standards and assess their impact on
the program and organization.
– Direct and oversee audit staff assigned to MAR and SOC activities,
providing performance and development feedback.
– Communicate with Audit Plan Managers on budget, timelines, and
status of MAR and SOC activities to ensure timely delivery through
each phase of the annual cycle.

Qualifications:

Qualifications
Education, Certification and Licensure
– Bachelor’s degree required; advanced degree preferred.
– CPA or CIA certification preferred.
Experience (minimum required)
– 4+ years of progressive audit experience, preferably including Model
Audit Rule/SOX 404 and SOC reporting.
– Knowledge of insurance operations; healthcare insurance experience
preferred.
– Experience in a financial services organization and/or public
accounting is a plus.
– Experience with audit sampling and internal controls testing
methodologies.
– Familiarity with AuditBoard or an equivalent audit management
platform.
Skill Requirements
– Strong understanding of SOX frameworks, including Model Audit
Rule/ICFR and SOC reporting.
– Data analytics experience preferred.

Qualifications:

Qualifications
Education, Certification and Licensure
– Bachelor’s degree required; advanced degree preferred.
– CPA or CIA certification preferred.
Experience (minimum required)
– 4+ years of progressive audit experience, preferably including Model
Audit Rule/SOX 404 and SOC reporting.
– Knowledge of insurance operations; healthcare insurance experience
preferred.
– Experience in a financial services organization and/or public
accounting is a plus.
– Experience with audit sampling and internal controls testing
methodologies.
– Familiarity with AuditBoard or an equivalent audit management
platform.
Skill Requirements
– Strong understanding of SOX frameworks, including Model Audit
Rule/ICFR and SOC reporting.
– Data analytics experience preferred.

Why is This a Great Opportunity:

Very professional and well-managed organization. Everyone is in office on Tuesdays; prefer everyone to come to the office one other day. Experience matters.the desired candidate has a strong controls risk background. With technology evolving rapidly and a need make sure that the organization has all the proper controls in place, demonstrated controls experience is valuable to this organization. This is a new position.

Salary Type : Annual Salary

Salary Min : $ 110000

Salary Max : $ 120000

Currency Type : USD