Internal Audit Manager

About The Role

OpenLoop’s mission is to bring care anywhere by powering tele-health solutions at scale. OpenLoop is seeking an Internal Audit Manager to help build its newly established audit function. Reporting to the Head of Internal Audit, you'll lead risk assessments and business process audits across financial, operational, and compliance areas, partnering with stakeholders to strengthen controls and mitigate risk. This role offers broad exposure, meaningful ownership, and visibility across a fast-growing, multi-state regulated business.

What You’ll Do

• Develop and maintain a risk-based audit plan, conducting periodic risk assessments across business processes, entities, and emerging risk areas to establish audit priorities
• Lead end-to-end audit engagements, from planning through fieldwork, reporting, and issue closure
• Design and execute control testing procedures independently, including walkthroughs, inquiry, inspection, and reperformance
• Prepare and maintain audit documentation including process narratives, flowcharts, risk and control matrices (RCMs), testing workpapers, and audit reports
• Facilitate kickoff, status update, and closing meetings with process owners and senior management
• Identify control deficiencies and communicate findings clearly, with practical and prioritized remediation recommendations
• Support management in designing and implementing controls to address identified gaps and process weaknesses
• Track open audit issues and remediation plans through closure, validating the effectiveness of corrective actions
• Support readiness for regulatory and compliance audits, including HIPAA , data privacy, and applicable state licensing requirements
• Collaborate cross-functionally with Finance, Legal, Compliance, IT, and Operations to support control assessments and process improvements
• Contribute to developing and refining IA methodology, workpaper templates, and audit tooling as the function matures
• Monitor the evolving regulatory and risk landscape relevant to telehealth and healthcare services to keep the audit plan current and relevant

Who You Are

Required

• Bachelor's degree in Accounting, Finance, Healthcare Administration, or related field and an active Certified Internal Auditor (CIA) designation
• 5+ years of progressive internal audit, external audit, business risk advisory, or healthcare regulatory experience
• Demonstrated hands-on experience across the full audit lifecycle, including risk assessment, control design and testing, workpaper documentation, and audit report writing, with the ability to execute independently without close supervision
• Deep understanding of COSO frameworks and internal control principles
• Proven ability to manage multiple concurrent audit engagements, prioritize under competing deadlines, and deliver on time
• Years of experience working directly with process owners at all levels in a fluid environment where formal controls are still being built and refined
• A builder of control awareness across an organization, including educating process owners and non-finance stakeholders across departments on internal audit's role and foundational control concepts
• Critical thinker that provides sound and professional judgment, with the ability to distinguish material risks from noise and communicate findings with precision and appropriate tact
• Concise and clear communicator, both written and verbal, with the ability to translate technical control concepts into findings that resonate with non-audit audiences
• Strong proficiency with AI tools and data analytics platforms (e.g., ACL/Galvanize, IDEA, Power BI, or Tableau ) for control testing and exception analysis

Preferred

• Public accounting background ( Big 4 or regional firm) with a SOX or advisory focus
• Certified Public Accountant (CPA) or additional relevant certification (e.g., CISA, CFE )
• Prior experience supporting an organization through an IPO readiness process or M&A integration
• Proficiency with GRC platforms (e.g., AuditBoard, Workiva, or Vanta )
• Experience in digital health, telehealth, or multi-state healthcare services environments, including familiarity with HIPAA , state medical board licensing, and clinician credentialing compliance
• Familiarity with data privacy frameworks beyond HIPAA , such as CCPA or other applicable state-level regulations
• Exposure to healthcare revenue cycle operations, compounding pharmacy, or pharmaceutical regulatory environments, including claims, billing integrity, and payer compliance