Senior IT Internal Auditor

P32HS Point32Health Services Inc; Canton (MA); On-site; USD 9,000 - 13,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Retirement plans

Paid time off

Life and disability insurance

Tuition program

Well-being benefits

Job summary

Point32Health is seeking an IT Senior Auditor to support the MAR program, SOC reporting, and risk-based audits. The role evaluates internal controls, tests control effectiveness, and follows up on remediation efforts under the guidance of the Internal Audit IT Senior Manager.

The ideal candidate has 2–4 years IT audit experience, a bachelor's degree in a related field, and knowledge of SOX, COBIT, NIST, and ITIL.

Qualifications

• Bachelor’s degree in Accounting, Information Systems Management, Finance, or related field.
• 2–4 years IT audit experience.
• Knowledge of MAR/SOX, SOC reporting, IIA, PCAOB, COBIT, ISO/NIST.

Responsibilities

• Support end-to-end internal audit engagements from planning to reporting.
• Perform ITGC walkthroughs and testing for ICFR/MAR.
• Support SOC1 audits with external service auditors.
• Lead walkthrough meetings and document process flows and samples.
• Communicate audit findings to the IT Senior Manager.
• Identify root causes and remediation with stakeholders.

Skills

Communication skills

Team collaboration

Prioritization

Multi-project management

Independent work

Detail-oriented

Analytical thinking

MS Office

Education

Bachelor's degree in Accounting, Information Systems Management, Finance, or related field

Tools

Visio

Excel

PowerPoint

Job description

Point32Health is a leading not‑for‑profit health and well‑being organization dedicated to delivering high‑quality, affordable healthcare. Serving nearly 2million members, we build on the legacy of Harvard Pilgrim Health Care and Tufts Health Plan to provide access to care and empower healthier lives for everyone. Our culture is based on a community of care and shared values that guide our behaviors and decisions. We are committed to inclusion and equal healthcare access and outcomes, regardless of background.

Job Summary

The IT Senior Auditor reports to the Internal Audit IT Senior Manager and supports the Model Audit Rule (MAR) program, system and organization control (SOC) reporting, and risk‑based audits. The role evaluates the design and effectiveness of internal controls, assesses the impact of control deficiencies, performs testing for control operating effectiveness, and follows up on open issues.

Key Responsibilities

• Support end‑to‑end internal audit engagements, including planning, risk assessment, walkthrough, testing, and reporting.
• Perform ITGC walkthroughs and testing to support reporting on internal controls over financial reporting (ICFR / Model Audit Rule).
• Support the management and execution of SOC1 audits by collaborating with external service auditors and testing relevant ITGCs.
• Lead walkthrough meetings and document process flowcharts, narratives, and samples in accordance with Point32Health Internal Audit’s methodology and standards.
• Maintain an accurate daily request list and clearly communicate requests and follow‑ups to relevant stakeholders.
• Collaborate with stakeholders to obtain documentation in a timely manner and within agreed‑upon deadlines.
• Proactively communicate audit findings and issues to the Internal Audit IT Senior Manager.
• Partner with stakeholders to identify root causes of control deficiencies and develop appropriate remediation recommendations.
• Monitor and validate the implementation of corrective action plans and remediation efforts.
• Build and maintain strong relationships with IT stakeholders to establish a reputation as a trusted advisor and internal controls expert.
• Provide advisory support on new initiatives, system implementations, and process changes.

Qualifications

• Completed bachelor’s degree in Accounting, Information Systems Management, Finance, or a related field.
• Professional certification (e.g., CISA, CIA, CPA) is preferred but not required.
• 2–4 years of internal or external IT audit experience.
• Strong understanding of Model Audit Rule or Sarbanes‑Oxley requirements, SOC reporting, IIA standards, PCAOB standards, AICPA standards, auditing sampling and testing methodologies, ITIL, NIST, ISO27001, and COBIT.
• Experience evaluating and testing IT general controls and understanding of IT risks and controls.
• Experience working on multiple engagements simultaneously.

Skill Requirements

• Excellent written and verbal communication skills.
• Strong teamwork skills and the ability to work with a diverse group of people.
• Ability to prioritize work and distinguish between time‑sensitive tasks and those that can be scheduled.
• Ability to work on multiple projects simultaneously and in a timely manner.
• Self‑motivated and able to work independently with little supervision.
• Detail oriented with organizational skills.
• Analytical and critical thinking skills.
• Proficiency with Microsoft Office (Word, Excel, PowerPoint, Visio).

Working Conditions & Additional Requirements

The position allows flexible work arrangements. The employee must be able to work under normal office conditions, work from home as required, and may need to use a telephone/headset and PC/keyboard simultaneously while sitting for extended periods. Additional hours may be required beyond the standard work schedule.

Disclaimer

The above statements describe the general nature and level of work performed by employees assigned to this classification. They are not intended to be an exhaustive list of all responsibilities, duties, and skills required. Management retains the discretion to add or change duties at any time.

Salary Range

$89,656.26 - $134,484.40

Compensation & Total Rewards Overview

Annual base salary depends on role scope, complexity, and individual qualifications. Variable pay is also available. Benefits include medical, dental, and vision coverage; retirement plans; paid time off; employer‑paid life and disability insurance; tuition program; well‑being benefits; and a full suite of benefits supporting career development, family and financial health. For more details, visit: https://www.point32health.org/careers/benefits/

EEO Statement

All applicants are welcome and will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Scam Alert

Point32Health has recently become aware of job posting scams where unauthorized individuals pose as recruiters and ask applicants to make payments. Point32Health would never request a payment related to a job application or offer, and never ask for payment for workplace equipment. If you have concerns about a posting’s legitimacy, contact [e-mail]