Senior IT Auditor: AI & Cybersecurity Controls

Blue Shield of California; California; Hybrid; USD 91,000 - 154,000; Full time

Job summary

Blue Shield of California is seeking a Senior Internal IT Auditor to lead and execute audits across technology and cybersecurity domains. You will act as a subject‑matter resource, guide risk assessments, and ensure high‑quality audit delivery of AI, data governance, and software development controls.

The role requires strong auditing experience in IT, data, and AI, with exposure to DevSecOps, secure coding, and regulatory frameworks.

Qualifications

• Requires a Bachelor's degree or High School Diploma/GED and 4 years of additional relevant experience in lieu of a degree.
• Minimum 5 years of prior relevant experience.
• Familiar with COBIT, NIST, ISO, or HIPAA frameworks.
• Knowledge of AI governance, model risk management, and secure SDLC practices.
• Auditing expertise across IT, data, and AI domains.

Responsibilities

• Lead transactional quality review audits with limited supervision.
• Serve as subject matter expert across technology and cybersecurity domains.
• Support risk assessments and audit planning for data and AI governance.
• Review controls over AI-enabled processes, data sourcing, and model outputs.
• Lead corrective/preventive action planning for transactional audits.
• Assess design and operating effectiveness of IP protection controls.
• Audit DevSecOps pipelines, CI/CD tooling, and code promotion practices.
• Evaluate risks from open-source software and external AI services.
• Analyze data governance, privacy, and regulatory compliance in AI development.
• Research issues and communicate findings to executives and staff.

Education

Bachelor's degree

High School Diploma/GED

Tools

Git-based repositories

CI/CD tooling

Job description

Blue Shield of California is seeking a Senior Internal IT Auditor to lead and execute audits across technology and cybersecurity domains. You will act as a subject‑matter resource, guide risk assessments, and ensure high‑quality audit delivery of AI, data governance, and software development controls.

The role requires strong auditing experience in IT, data, and AI, with exposure to DevSecOps, secure coding, and regulatory frameworks.