Senior IT Internal Auditor II - Hybrid

Blue Cross Blue Shield of Arizona; United States; Hybrid; USD 90,000 - 135,000; Full time

Job summary

Blue Cross Blue Shield of Arizona seeks a Senior Internal Auditor to plan and perform IT audits, assess controls, and coordinate external audits. You will examine access controls, change management, system operations, and privacy requirements, delivering clear reports to management.

Ideal candidates have hands-on IT experience in enterprise environments and strong analytical skills, with HIPAA knowledge and the ability to communicate findings effectively across teams.

Qualifications

• Experience auditing IT systems, including access controls, change management, and implementation governance.
• Experience coordinating external IT audits.
• Hands-on technical experience with enterprise IT environments, applications, databases, infrastructure, or cybersecurity technologies.
• Knowledge of HIPAA and privacy requirements is preferred.
• Strong analytical and written communication skills are required.

Responsibilities

• Formulate IT audit plans and programs and perform field work.
• Draft audit reports and document work papers to support conclusions.
• Collaborate with management and external auditors on audit findings.
• Lead or assist with IT risk assessments and follow-up actions.

Skills

IT audit

Access controls

Change management

External IT audits

Enterprise IT environments

Cybersecurity technologies

HIPAA knowledge

Analytical skills

Written communication

Education

High School Diploma or GED

Tools

Audit tools

Microsoft Excel

Database tools

Job description

Awarded a Healthiest Employer, Blue Cross Blue Shield of Arizona aims to fulfill its mission to inspire health and make it easy. AZ Blue offers a variety of health insurance products and services to meet the diverse needs of individuals, families, and small and large businesses as well as providing information and tools to help individuals make better health decisions. At AZ Blue, we have a hybrid workforce strategy, called Workability, that offers flexibility with how and where employees work. Our positions are classified as hybrid, onsite or remote.

While the majority of our employees are hybrid, the following classifications drive our current minimum onsite requirements:

• Hybrid People Leaders: must reside in AZ, required to be onsite at least twice per week


• Hybrid Individual Contributors: must reside in AZ, unless otherwise cited within this posting, required to be onsite at least once per week


• Hybrid 2 (Operational Roles such as but not limited to: Customer Service, Claims Processors, and Correspondence positions): must reside in AZ, unless otherwise cited within this posting, required to be onsite at least once per month


• Onsite: daily onsite requirement based on the essential functions of the job


• Remote: not held to onsite requirements, however, leadership can request presence onsite for business reasons including but not limited to staff meetings, one-on-ones, training, and team building


• Please note that onsite requirements may change in the future, based on business need, and job responsibilities. Most employees should expect onsite requirements and at a minimum of once per week. This position is hybrid within the state of AZ only. This hybrid work opportunity requires residency, and work to be performed, within the State of Arizona.

PURPOSE OF THE JOB Plans, performs, reports on, and follows up on IT audit assignments to evaluate whether information technology systems and related processes comply with corporate policies; whether controls over access management, change management, system operations, and other key IT processes are designed and operating effectively; and whether risks to Company assets, data, and operations are appropriately managed.

QUALIFICATIONS REQUIRED

• 3 Years: Experience auditing IT systems, including access controls, change management, and implementation governance.


• 3 Years: Experience auditing IT systems, including access controls, change management, and implementation governance.


• 2 Years: Experience assisting with or coordinating external IT audits.


• 2 Years: Experience assisting with or coordinating external IT audits.


• 5 Years: Hands-on technical experience with enterprise IT environments, applications, databases, infrastructure, or cybersecurity technologies.


• 5 Years: Hands-on technical experience with enterprise IT environments, applications, databases, infrastructure, or cybersecurity technologies.


• Required Education High School Diploma or GED in general field of study


• Required Licenses N/A


• Required Certifications N/A

PREFERRED QUALIFICATIONS

• Preferred Work Experience 3 years of healthcare experience


• 8 Years: Experience auditing IT systems, including access controls, change management, and implementation governance.


• 5 Years: Experience assisting with or coordinating external IT audits.


• 10 Years: Hands-on technical experience with enterprise IT environments, applications, databases, infrastructure, or cybersecurity technologies.


• Preferred Education Bachelor's or master's degree in business or related field of study


• Preferred Licenses N/A


• Preferred Certifications Certified Internal Auditor (CIA) Certified Information Systems Auditor (CISA) Relevant Technical Certifications

LEVEL 1 - Senior Internal Auditor I

• Formulate plans for performing IT audit assignments. Recommend areas for future IT audit efforts. Prepare or revise IT audit programs to accomplish audit objectives and perform field work accordingly. Prepare time budgets for completion of various audit steps. Draft IT audit reports and document audit work. Compile audit work-papers to support audit results and conclusion. Review report draft findings and recommendations with company management. Evaluate responses to reports to determine reasonableness and suggest follow-up actions. Participate in project teams as necessary. Assist Internal Audit management and external auditors as required. Assist teams in meeting project deadlines. Keep current with developments in field of expertise.

LEVEL 2 - Senior Internal Auditor II

• Assist IA management with special projects. Conduct the Annual IT Risk Assessment. Lead external audit coordination. Participate in interdepartmental teams as directed by IA management. Work closely with other departments resolving questions or discrepancies.

LEVEL 3 - Senior Internal Auditor III

• Perform continuous IT risk assessments as needed to determine where audit efforts should be focused. Assist leads and managers in formulating IT audit plan for presentation to the board Perform sensitive high level projects Analyze and assess the controls environment of the business processes in accordance with the IT audit program. Assist other junior level auditors as needed. Be seen as the SME of the Internal IT Audit department.

ALL LEVELS

Each progressive level includes the ability to perform the essential functions of any lower levels and assist / mentor employees in those levels. The position has an onsite expectation of 1 day per week and requires a full-time work schedule. Full-time is defined as working at least 40 hours per week, plus any additional hours as requested or as needed to meet business requirements Perform all other duties as assigned.

COMPETENCIES REQUIRED

Required Job Skills (Applies to All Levels)

• Intermediate PC proficiency


• Intermediate proficiency in spreadsheet, database and word processing software

Required Professional Competencies

• Analytical skills to support independent and effective decisions


• Prioritize tasks and work with multiple priorities, sometimes under limited time constraints.


• Perserverance in the face of resistance or setbacks.


• Effective interpersonal skills and ability to maintain positive working relationship with others.


• Verbal and written communication skills and the ability to interact professionally with a diverse group, executives, managers, and subject matter experts.


• Working knowledge of HIPAA and privacy requirements


• Maintain confidentiality and privacy


• Analytical knowledge necessary to generate reports based on available data and then make decisions based on reported data

Required Leadership Experience and Competencies N/A

PREFERRED COMPETENCIES

Preferred Job Skills

• Advanced PC proficiency


• Advanced proficiency in spreadsheet, database and word processing software


• Use of AI tools such as Microsoft Copilot and Anthropic Claude.


• Use of Optro Audit board

Preferred Professional Competencies

• Identify solutions to meet customer needs


• Work with ambiguous and conflicting information while keeping focused on the end goal.

Preferred Leadership Experience and Competencies N/A

OUR COMMITMENT

AZ Blue does not discriminate in hiring or employment on the basis of race, ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status or any other protected group.