Senior IT Internal Auditor II – IT Risk & Controls Leader

Blue Cross Blue Shield of Arizona; Phoenix (AZ); Hybrid; USD 90,000 - 125,000; Full time

Job summary

Blue Cross Blue Shield of Arizona is seeking a Senior Internal Auditor to perform IT audits, evaluate access controls and change management, and coordinate external audits. The role supports a hybrid work model with onsite requirements in AZ, including at least one day per week onsite.

The position requires several years of hands-on IT audit experience, strong analytical skills, and familiarity with HIPAA/privacy considerations.

Qualifications

• 3 Years: Experience auditing IT systems, including access controls, change management, and implementation governance.
• 2 Years: Experience assisting with or coordinating external IT audits.
• 5 Years: Hands-on technical experience with enterprise IT environments, applications, databases, infrastructure, or cybersecurity technologies.

Responsibilities

• Formulate plans for performing IT audit assignments and recommend areas for future IT audit efforts.
• Prepare IT audit programs and perform field work accordingly.
• Draft IT audit reports and document audit work with supporting evidence.
• Lead external audit coordination and work with management to implement recommendations.
• Maintain current knowledge of developments in IT audit and related technologies.

Skills

Audit IT systems

Access controls

Change management

External IT audits

Enterprise IT environments

Education

High School Diploma or GED

Bachelor’s or master’s degree in business or related field

Tools

Optro Audit board

Microsoft Copilot

Job description

Blue Cross Blue Shield of Arizona is seeking a Senior Internal Auditor to perform IT audits, evaluate access controls and change management, and coordinate external audits. The role supports a hybrid work model with onsite requirements in AZ, including at least one day per week onsite.

The position requires several years of hands-on IT audit experience, strong analytical skills, and familiarity with HIPAA/privacy considerations.