Senior IT Audit Manager

Open Loop was co-founded by CEO, Dr. Jon Lensing, and COO, Christian Williams, with the vision to bring care anywhere. Our telehealth support solutions are thoughtfully designed to streamline and simplify go-to-market care delivery for companies offering meaningful virtual support to patients across an expansive array of specialties, in all 50 states.

Open Loop’s mission is to bring care anywhere by powering telehealth solutions nLoop is looking for a Senior IT Audit Manager to join its Internal Audit function and own the IT controls audit program. Reporting to the Head of Internal Audit, you will assess and validate the design and effectiveness of IT general controls, cybersecurity, data privacy, and emerging technology controls across a cloud-based infrastructure, EHR and EMR systems, and a broad ecosystem of third-party SaaS integrations.

The work spans the full IT risk landscape, from SOX ITGC readiness to HIPAA security, AI governance, and data security, in a multi-entity, heavily regulated telehealth environment that is scaling rapidly and preparing for a significant next step in its growth trajectory. This role partners directly with technology and business leadership to design, remediate, and validate controls, ensuring systems and data are secure, reliable, and compliant.

• Develop and maintain a risk-based IT audit plan, conducting periodic IT risk assessments across systems, applications, infrastructure, and emerging technology domains to establish audit priorities
• Lead end-to-end IT audit engagements, from planning and scoping through fieldwork, reporting, and issue closure
• Facilitate kickoff, status update, and closing meetings with IT process owners, system owners, and senior management
• Design and execute IT control testing procedures independently, including ITGC testing across access management, change management, computer operations, and system development life cycle (SDLC)
• Assess and validate cybersecurity controls, including network security, identity and access management, vulnerability management, and incident response
• Evaluate cloud infrastructure controls (including AWS environments) for security, reliability, and compliance with applicable frameworks and regulatory requirements
• Conduct audits of EHR and EMR systems and clinical application controls, and assess data privacy controls for compliance with HIPAA Security Rule, CCPA, and applicable state-level regulations
• Support the governance of AI governance frameworks and controls, including model governance, data quality, bias risk, and compliance with emerging AI regulations
• Prepare and maintain IT audit documentation including process narratives, system flowcharts, risk and control matrices (RCMs), testing work papers, and audit reports
• Partner with management to design, remediate, and validate IT controls, providing practical and prioritized recommendations to address identified gaps and process weaknesses
• Track open IT audit issues and remediation plans through closure, validating the effectiveness of corrective actions
• Monitor the evolving IT risk, cybersecurity, and regulatory landscape to keep the IT audit plan current and relevant

• Bachelor's degree in Information Systems, Information Technology, Computer Science, or equivalent technical field and active Certified Information Systems Auditor (CISA) designation
• 7+ years of progressive IT audit experience in business risk advisory consulting or internal audit IT specialization
• Demonstrated hands-on experience with IT general controls (ITGC) testing, including access management, change management, computer operations, and SDLC
• Strong knowledge of IT governance and control frameworks (COBIT, COSO, NIST 800-53,…