Senior IT Audit & Risk Manager

Highmark Health; Northern (KY); Hybrid; USD 109,000 - 181,000; Full time

Job summary

Highmark Health is seeking an IT Audit Leader to direct the technology component of the comprehensive risk-based information systems audit and advisory plan. You will interact with executive leadership, management, auditors, and external partners to ensure regulatory and corporate standards are met.

The role requires 7 years in IS auditing with 3 years in management, strong knowledge of HIPAA, ISACA and IIA guidelines, and experience with Archer GRC and major platforms.

Qualifications

• Bachelor's degree in Finance, Business Admin, Accounting, IT or related field, or equivalent experience.
• At least 7 years in Information Systems auditing with 3 years in leadership roles, preferably healthcare.
• Familiarity with IT risk, cybersecurity, and regulatory requirements in healthcare.

Responsibilities

• Define and coordinate IT audit and advisory processes with senior leaders.
• Develop audit reports and present findings with proposed actions to management.
• Lead risk assessments and ensure compliance with HIPAA, ISACA, and IIA guidelines.
• Collaborate with assurance partners and business/tech management on improvements.
• Mentor staff and support annual internal audit planning and execution.

Skills

IT audit

Risk assessment

Leadership

Stakeholder management

Data analytics

Auditing standards

Information security

Cloud security

Education

Bachelor's degree in Finance/Business/Accounting/IT

Tools

Archer GRC

Oracle

SQL Server

DB2

RACF

Linux

Windows

Job description

Highmark Health is seeking an IT Audit Leader to direct the technology component of the comprehensive risk-based information systems audit and advisory plan. You will interact with executive leadership, management, auditors, and external partners to ensure regulatory and corporate standards are met.

The role requires 7 years in IS auditing with 3 years in management, strong knowledge of HIPAA, ISACA and IIA guidelines, and experience with Archer GRC and major platforms.