Senior Internal Controls Advisor (Hybrid)

Blue Shield of CA; Springfield Meadows (CA); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Blue Shield of California's Internal Controls Advisory Services (ICAS) team strengthens enterprise-wide internal controls, risk management, and governance across business and technology functions. The Principal will report to the Director, ICAS and lead complex initiatives, shaping controls in a changing risk landscape, including AI-enabled processes.

This hybrid role offers autonomy, requires senior stakeholder engagement, and a track record of delivering practical, business-friendly risk

Qualifications

• Requires a Bachelor's degree or equivalent experience
• Requires a minimum of 10 years of experience in internal audit, internal controls, risk advisory, or related field
• Strong understanding of internal control frameworks and risk assessment methodologies
• Experience leading complex, cross-functional engagements
• Demonstrated ability to work independently and drive outcomes with minimal supervision
• CPA, CIA, CISA or equivalent certifications
• Prefer: Healthcare experience (e.g., Medi-Cal, Medicare)

Responsibilities

• Own complex initiatives and influence senior stakeholders
• Shape how controls evolve in a changing risk landscape (including AI-enabled processes)
• Translate risk and controls into practical, business-friendly solutions
• Lead cross-functional engagements
• Operate with high autonomy

Skills

Internal controls

Risk assessment

Cross-functional leadership

Independent work

Stakeholder management

Audit

Healthcare experience

Education

Bachelor's degree

Job description

Blue Shield of California's Internal Controls Advisory Services (ICAS) team strengthens enterprise-wide internal controls, risk management, and governance across business and technology functions. The Principal will report to the Director, ICAS and lead complex initiatives, shaping controls in a changing risk landscape, including AI-enabled processes.

This hybrid role offers autonomy, requires senior stakeholder engagement, and a track record of delivering practical, business-friendly risk