Senior IT Controls Auditor — Healthcare & Cybersecurity

Paycom - ATS; Omaha (NE); Hybrid; USD 75,000 - 95,000; Full time

Benefits offered by this job

401(k)

401(k) match

Dental insurance

Employee assistance program

Health insurance

HSA

Life insurance

Paid time off

Vision insurance

Job summary

Detego Health in Omaha seeks an independent Internal Auditor to provide objective assurance over IT general controls, cybersecurity, and data governance within a regulated healthcare environment. This technology-first role focuses on control design, operating effectiveness, and remediation validation rather than day-to-day ownership.

You will lead risk-based audits across Microsoft 365, Azure, SaaS platforms, endpoints and core infrastructure, assess data protection (PHI) and privacy controls,

Qualifications

• 7–12+ years in internal audit, IT audit, technology risk, or cybersecurity assurance.
• Strong knowledge of SOC 2, HIPAA safeguards, and access governance.
• Experience auditing cloud environments (Microsoft 365, Azure) and SaaS platforms.
• CISA preferred; CISSP/CRISC/CIA are strong additional credentials.
• Excellent written and executive-level communication skills.

Responsibilities

• Lead risk-based audits of IT general controls and cybersecurity controls across defined environments.
• Assess automated and configurable controls on core business platforms (claims, finance, HR, CRM, vendor systems).
• Evaluate data governance and privacy controls across data lifecycle, PHI safeguards, backup integrity, and disaster recovery testing.
• Plan, execute, and report on audits with evidence validation and remediation validation.
• Support readiness activities for SOC 2, HIPAA, URAC and other frameworks, including pre-audit testing.

Skills

IT audit

Cybersecurity

Internal controls

Executive communication

Job description

Detego Health in Omaha seeks an independent Internal Auditor to provide objective assurance over IT general controls, cybersecurity, and data governance within a regulated healthcare environment. This technology-first role focuses on control design, operating effectiveness, and remediation validation rather than day-to-day ownership.

You will lead risk-based audits across Microsoft 365, Azure, SaaS platforms, endpoints and core infrastructure, assess data protection (PHI) and privacy controls,