Senior IT Audit & Risk Leader (Healthcare)

Highmark Health; Boise (ID); On-site; USD 109,000 - 181,000; Full time

Job summary

Highmark Health is seeking an experienced IT Audit Director to lead the technology audit and advisory program aligned with the enterprise risk framework. You will partner with executive leadership, subsidiaries, and external auditors to ensure regulatory compliance and robust controls across information systems.

You will coach teams, drive risk assessment, and develop the annual Internal Audit plan in collaboration with the Enterprise Risk & Governance function, presenting findings to the

Qualifications

• 7 years in Information Systems auditing or a combination of experience in audit and an Information Systems related discipline, such as Information Security, Change Management, Systems Development, etc.
• 3 years in a management or leadership role, preferably in an audit or information systems discipline in a healthcare or healthcare-related industry
• Familiarity with Oracle, SQL Server, DB2, RACF, Linux, and Windows.
• Experience evaluating risks and controls across enterprise technology environments, including cloud platforms, identity and access management, cybersecurity, and emerging technologies.
• Experience leading or performing technology risk, cybersecurity, compliance, or assurance reviews.
• Experience with Archer Governance, Risk, and Compliance (GRC) suite of products.
• Experience leveraging data analytics, automation, or AI-enabled audit techniques to enhance audit effectiveness and efficiency.

Responsibilities

• Perform management responsibilities to include, but are not limited to: hiring and termination decisions, coaching and development, rewards and recognition, performance management and staff productivity.
• Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
• Define and coordinate the IT audit and advisory process with key organizational leaders and review and establish a program to ensure the quality of work performed consistently meets IIA and ISACA guidelines.
• Develop and present audit reports and ensure agreement on findings and actions with business owners; prepare materials for senior/executive management and Audit Committee.
• Collaborate with internal assurance partners to ensure risk assessment and audit activities consider regulatory requirements and industry standards.
• Provide proactive risk, control and governance counsel to business leadership; influence senior management accordingly.
• Participate in annual technology audit and advisory risk assessment; assist in developing the comprehensive annual Internal Audit plan.

Skills

Risk management

Audit

Information Security

Cybersecurity

Data Privacy

Leadership

Communication

Project management

Stakeholder management

Education

Bachelor’s degree in Finance, Business Administration, Accounting, Information Technology, Computer Science or related field

Tools

Archer GRC

Job description

Highmark Health is seeking an experienced IT Audit Director to lead the technology audit and advisory program aligned with the enterprise risk framework. You will partner with executive leadership, subsidiaries, and external auditors to ensure regulatory compliance and robust controls across information systems.

You will coach teams, drive risk assessment, and develop the annual Internal Audit plan in collaboration with the Enterprise Risk & Governance function, presenting findings to the