Senior IT Audit Leader — Cloud, HIPAA & AI Controls

Openloop-Health; Des Moines (IA); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, Dental & Vision

Hybrid-work flexibility

401(k) with Company Match

Life Insurance and more

Job summary

OpenLoop is seeking a Senior IT Audit Manager to lead IT controls testing, risk assessments, and regulatory compliance across cloud-based systems, EHR/EMR, and third-party SaaS integrations. You will partner with technology leadership to design, remediate, and validate controls, ensuring secure and compliant operations in a regulated telehealth environment.

Ideal candidates have 7+ years of IT audit experience, CISA, and deep knowledge of IT governance, cloud security, HIPAA, and AI governance.

Qualifications

• Bachelor's degree in Information Systems, IT, Computer Science, or equivalent
• Active CISA designation required
• 7+ years IT audit experience in risk advisory or internal audit IT specialization
• Strong knowledge of IT governance frameworks (COBIT, COSO, NIST 800-53, ISO 27001)
• Experience auditing cybersecurity and cloud controls (AWS, Azure, GCP)
• Experience auditing EHR/EMR, HIPAA, and data privacy controls; AI governance experience

Responsibilities

• Develop and maintain a risk-based IT audit plan across systems, apps, and infra
• Lead end-to-end IT audit engagements from planning to closure
• Design and execute IT control testing procedures, including ITGC
• Assess cybersecurity controls and cloud infrastructure controls for security and compliance
• Audit EHR/EMR and clinical application controls; ensure HIPAA/CCPA compliance
• Support AI governance controls including model governance and data quality

Skills

IT audit

Cloud security

HIPAA compliance

SaaS controls

AI governance

Communication

SOX ITGC

Independent testing

Education

Bachelor's degree in Information Systems or related field

CISA certification

CRISC/CISSP/CISM or CIA

Tools

AuditBoard

Workiva

Vanta

AWS

Job description

OpenLoop is seeking a Senior IT Audit Manager to lead IT controls testing, risk assessments, and regulatory compliance across cloud-based systems, EHR/EMR, and third-party SaaS integrations. You will partner with technology leadership to design, remediate, and validate controls, ensuring secure and compliant operations in a regulated telehealth environment.

Ideal candidates have 7+ years of IT audit experience, CISA, and deep knowledge of IT governance, cloud security, HIPAA, and AI governance.