IT Audit Lead, Devoted Health

• A bachelor’s degree in a relevant field (e.g., IT, information systems, finance) and a professional certification such as CISA, CIA, CISSP, and/or CPA
• At least 5 years of combined professional experience, including 3+ years auditing IT processes and general controls and 1+ year guiding or supervising staff auditors
• Deep knowledge of IS control and compliance frameworks (e.g., NIST, HITRUST, HIPAA, etc.) and experience with requirements like Sarbanes-Oxley (SOX) or National Association of Insurance Commissioners Annual Financial Reporting Model Regulation (MAR)
• Experience auditing in cloud environments (e.g., Amazon Web Service, Google Cloud Platform) and auditing key cybersecurity domains (e.g., vulnerability management, incident response, network security)
• Excellent communication and project management skills with a proven ability to manage complex audits and present findings clearly to leadership/management

Desirable

• Reporting to the Director of Internal Audit, the experienced Information Systems (IS) Audit Lead will be a key addition to our team. You will serve as a subject matter expert on assurance and advisory over IS governance, risk management, and controls. This role is a unique opportunity to help shape the foundation of our IS audit function, contributing directly to the development of our methodologies and procedures
• If you are a high performing, U.S. based, IS audit professional who wants to build and make an impact on an organization that holds technology at its core, this role is for you! This position offers the flexibility to contribute to diverse operational and financial audits, providing broad exposure to the business and unique professional development opportunities
• Perform and/or review end-to-end planning and execution of IS audits and special projects—from risk assessment and fieldwork to reporting findings and recommendations to senior management
• Contribute to departmental innovation by identifying opportunities to use data analytics and artificial intelligence and applying agile methodologies to improve audit efficiency and effectiveness
• Actively participate in the IS component of the department’s risk assessment to inform and define the audit plan, ensuring focus on key technology risks
• Build and maintain strong relationships with business, technology, and risk management leaders to align assurance efforts and serve as a trusted advisor
• Ensure all audit work is performed and documented in accordance with IIA Global Internal Audit Standards and meets departmental quality standards
• Stay current on emerging technology risks, cybersecurity threats, and IS audit best practices to provide timely insights to business and the IA department