Internal IT Auditor, Senior

Blue Shield of CA; Oakland (CA); Hybride; USD 130 000 - 180 000; Plein temps

Résumé du poste

Blue Shield of California is seeking a Senior Internal IT Auditor to lead and execute audits across technology and cybersecurity areas. You will act as a subject matter expert, ensuring high-quality audit delivery with a focus on AI governance and data protection.

Ideal candidates bring 5+ years of relevant experience, familiarity with COBIT/NIST/ISO/HIPAA, and strong analytical skills. The role supports a hybrid work model with in-office collaboration as needed.

Qualifications

• Bachelor's degree or High School Diploma/GED with 4 years of relevant experience
• Minimum of 5 years of prior relevant experience
• Familiar with COBIT, NIST, ISO, or HIPAA
• Experience in AI governance frameworks and AI risk management
• Knowledge of data governance and privacy principles
• Experience in software development and SDLC methodologies (Agile, DevOps, CI/CD)
• Familiarity with secure coding practices and application security controls
• Experience with AI/ML model risk management and monitoring
• Regulated environments experience such as healthcare

Responsabilités

• Lead and execute audit engagements across technology and cybersecurity domains
• Serve as a subject matter resource and ensure high-quality audit delivery
• Apply knowledge of AI governance, controls, and risk management to audits
• Collaborate with teams to assess IT governance, risk, and controls
• Support audit planning, scoping, and reporting

Connaissances

Analytical skills

Problem solving

Auditing

AI governance

Data governance

Security controls

Formation

CISA

CISSP

CIA

CSSLP

AAIA

Outils

Git

CI/CD

Description du poste

Your Role

The Senior Internal IT Auditor leads and executes audit engagements, serving as a subject matter resource and ensuring high-quality audit delivery across technology and cybersecurity domains.

Your Knowledge and Experience

• Requires a Bachelor's degree or High School Diploma/GED and 4 years of additional relevant experience in lieu of a degree
• Requires a minimum of 5 years of prior relevant experience
• Basic competence and knowledge with support from others of: Financial Accounting and Finance Concepts, Managerial Accounting, Regulatory, Legal and Economics, Quality Framework, Ethics and Fraud, Information Technology, Governance, Risk and Controls, Organizational Theory and Behavior
• Working knowledge of AI tools, models, and platforms (e.g., generative AI, ML systems), including associated risks, controls, and governance consideration
• Strong analytical and problem-solving skills
• Typically, requires advanced knowledge of auditing typically obtained through advanced education combined with experience. May have practical knowledge of project management
• Familiarity with frameworks such as COBIT, NIST, ISO, or HIPAA
• Certified Information Systems Auditor (CISA), Advanced in AI Audit (AAIA), Certified Information Systems Security Professional (CISSP), Certified Internal Auditor (CIA) and/or Certified Secure Software Lifecycle Professional (CSSLP) desired
• Experience in software development, including SDLC methodologies (Agile, DevOps, CI/CD) and modern engineering practices
• Familiarity with secure coding practices, code management tools (e.g., Git-based repositories), and application security controls
• Understanding of data governance and data protection principles, including privacy, confidentiality, regulatory compliance, and intellectual property management
• Experience auditing or implementing AI governance frameworks (e.g., NIST AI RMF, internal AI governance programs)
• Experience with AI/ML model risk management, including validation, bias detection, explainability, and monitoring
• Familiarity with secure AI development practices and emerging AI risk domains (prompt injection, data poisoning, model leakage, etc.)
• Experience in the management, governance, and control of Artificial Intelligence (AI) use
• Experience in regulated environments (e.g., healthcare)

Hybrid

This role requires employees to be in-office based on our hybrid workplace model, balancing purposeful in-person collaboration with flexibility. For most teams, this means coming into the office two days each week. Employees living more than 50 miles from an office location will work with their manager to determine in-office time based on business need.