Senior IT Internal Auditor

IT Senior Auditor

Point32Health is a leading not-for-profit health and well-being organization dedicated to delivering high-quality, affordable healthcare. Serving nearly 2 million members, Point32Health builds on the legacy of Harvard Pilgrim Health Care and Tufts Health Plan to provide access to care and empower healthier lives for everyone. Our culture revolves around being a community of care and having shared values that guide our behaviors and decisions. We've had a long-standing commitment to inclusion and equal healthcare access and outcomes, regardless of background; it's at the core of who we are. We value the rich mix of backgrounds, perspectives, and experiences of all of our colleagues, which helps us to provide service with empathy and better understand and meet the needs of the communities where we serve, live, and work.

The IT Senior Auditor will report to the Internal Audit IT Senior Manager and provide support over our Model Audit Rule (MAR) program, system and organization control (SOC) reporting, and risk-based audits (internal audits). The Senior IT Internal Auditor will be responsible to evaluate the design and effectiveness of internal controls, utilize critical thinking to assess the impact of control deficiencies, perform testing for control operating effectiveness, and follow up on open issues.

Key Responsibilities/Duties what you will be doing (top five):

• Support end-to-end internal audit engagements, including planning, risk assessment, walkthrough, testing, and reporting.
• Perform ITGC walkthroughs and testing to support reporting on internal controls over financial reporting (ICFR / Model Audit Rule).
• Support the management and execution of SOC 1 audits by collaborating with our external service auditors and testing relevant ITGCs.
• Lead walkthrough meetings and document process flowcharts, narratives, and samples of one in accordance with Point32Health Internal Audit's methodology and standards.
• Maintain an accurate daily request list and clearly communicate requests and follow-ups to relevant stakeholders. Collaborate with stakeholders to obtain documentation in a timely manner and within agreed-upon deadlines.

Qualifications what you need to perform the job

Education, Certification and Licensure

• Completed bachelor's degree in Accounting, Information Systems Management, Finance, or a related field.
• A professional certification (e.g. CISA, CIA, CPA, etc.) is preferred but not required.

Experience (minimum years required):

• 2-4 years of internal or external IT audit experience.
• Strong understanding of Model Audit Rule or Sarbanes-Oxley requirements, SOC reporting, IIA standards, PCAOB standards, AICPA standards, auditing sampling and testing methodologies, ITIL, NIST, ISO 27001, COBIT.
• Experience evaluating and testing IT general controls and understanding of IT risks and controls.
• Experience working on multiple engagements simultaneously.

Skill Requirements

• Excellent written and verbal communication skills
• Strong teamwork skills and the ability to work with a diverse group of people
• Ability to prioritize work by distinguishing between tasks that are time-sensitive (urgent) and those that can be scheduled or addressed later without impacting overall deadlines.
• Ability to work on multiple projects simultaneously and in a timely manner.
• Self-motivated and ability to work independently with little supervision.
• Detail oriented with organizational skills.
• Analytical and critical thinking skills.
• Technology and computer skills, with the ability to effectively use Microsoft Office (Word, Excel, PowerPoint, Visio).

Working Conditions and Additional Requirements (include special requirements, e.g., lifting, travel):

• The position will include a flexible work arrangement.
• Must be able to work under normal office conditions and work from home as required.
• Work may require simultaneous use of a telephone/headset and PC/keyboard and sitting for extended durations.
• May be required to work additional hours beyond standard work schedule.

Salary Range

$89,656.26 -$134,484.40

Compensation & Total Rewards Overview

The annual base salary range provided for this position represents a range of salaries for this role and similar roles across the organization. The actual salary for this position will be determined by several factors, including the scope and complexity of the role; the skills, education, training, credentials, and experience of the candidate; as well as internal equity. As part of our comprehensive total rewards program, colleagues are also eligible for variable pay. Eligibility for any bonus, commission, benefits, or any other form of compensation and benefits remains in the Company's sole discretion and may be modified at the Company's sole discretion, consistent with the law.

Point32Health offers their Colleagues a competitive and comprehensive total rewards package which currently includes:

• Medical, dental and vision coverage
• Retirement plans
• Paid time off
• Employer-paid life and disability insurance with additional buy-up coverage options
• Tuition program
• Well-being benefits
• Full suite of benefits to support career development, individual & family health, and financial health

For more details on our total rewards programs, visit

We welcome all All applicants are welcome and will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Scam Alert : Point32Health has recently become aware of job posting scams where unauthorized individuals posing as Point32Health recruiters have placed job advertisements and reached out to potential candidates. These advertisements or individuals may ask the applicant to make a payment. Point32Health would never ask an applicant to make a payment related to a job application or job offer, or to pay for workplace equipment. If you have any concerns about the legitimacy of a job posting or recruiting contact, you may contact View email address on click.appcast.io