Senior IT Audit & Risk Leader

Highmark Health; Denver (CO); On-site; USD 109,000 - 181,000; Full time

Job summary

Highmark Health is seeking a senior IT audit leader to direct the technology component of the enterprise risk-based audit plan. You will partner with executive leadership and governance bodies to ensure compliant, effective controls across information systems and data privacy requirements.

You will drive risk assessments, craft audit reports, and advise senior management on improvements per industry standards and HIPAA obligations, while guiding a team to deliver high-quality assurance work.

Qualifications

• Bachelor's degree required in a related field or equivalent experience.
• 7 years in Information Systems auditing or related discipline.
• 3 years in a management/leadership role in a healthcare or related industry.

Responsibilities

• Direct IT audit and advisory processes, aligning with IIA/ISACA guidelines.
• Develop and present audit reports and obtain agreement on findings and actions with business owners.
• Collaborate with internal assurance partners to assess regulatory requirements and industry standards.
• Provide governance counsel to senior leadership and influence stakeholders across the organization.
• Lead risk assessment and annual audit planning with Enterprise Risk & Governance teams.

Skills

IT Audit

Information Security

Cybersecurity

Data Privacy

Risk & Controls

Communication

Leadership

Education

Bachelor's degree in Finance, Business Administration, Accounting, Information Technology, or related field

Tools

Oracle

SQL Server

DB2

RACF

Linux

Windows

Archer GRC

Job description

Highmark Health is seeking a senior IT audit leader to direct the technology component of the enterprise risk-based audit plan. You will partner with executive leadership and governance bodies to ensure compliant, effective controls across information systems and data privacy requirements.

You will drive risk assessments, craft audit reports, and advise senior management on improvements per industry standards and HIPAA obligations, while guiding a team to deliver high-quality assurance work.