Senior IT Audit & Risk Leader

Highmark Health Company; City of Albany (NY); On-site; USD 109,000 - 181,000; Full time

Job summary

Highmark Health seeks an experienced IT Audit Director to lead the technology component of the enterprise audit plan. You will interact with executives, regulators, auditors, and board committees, ensuring compliance with HIPAA and privacy policies while improving risk management across infrastructure and applications.

The role requires strong leadership, regulatory knowledge, and expertise in cybersecurity, data governance, and IS controls within a healthcare context.

Qualifications

• Bachelor’s degree or equivalent experience as determined by the company.
• 7 years in Information Systems auditing or related discipline.
• 3 years in a management/leadership role in an audit or IS discipline.

Responsibilities

• Define and coordinate the IT audit and advisory process with organizational leaders.
• Develop audit reports and present findings to management and Board committees.
• Collaborate with internal assurance partners to address regulatory requirements and industry standards.
• Provide risk, control and governance counsel to business leadership.
• Contribute to annual risk assessment and audit planning for enterprise risk governance.

Skills

IS audit

Management

Risk assessment

Stakeholder influence

Regulatory awareness

Data privacy

Cybersecurity

Communication

Project leadership

Education

Bachelor's degree in Finance/Business/IT or related field

Tools

IIA/ISACA guidelines

Archer GRC (preferred)

Job description

Highmark Health seeks an experienced IT Audit Director to lead the technology component of the enterprise audit plan. You will interact with executives, regulators, auditors, and board committees, ensuring compliance with HIPAA and privacy policies while improving risk management across infrastructure and applications.

The role requires strong leadership, regulatory knowledge, and expertise in cybersecurity, data governance, and IS controls within a healthcare context.