Dir ERM & IT Int Audit

Medica is a nonprofit health plan with more than a million members that serves communities in Minnesota, Nebraska, Wisconsin, Missouri, and beyond. We deliver personalized health care experiences and partner closely with providers to ensure members are genuinely cared for.

We're a team that owns our work with accountability, makes data-driven decisions, embraces continuous learning, and celebrates collaboration - because success is a team sport. It's our mission to be there in the moments that matter most for our members and employees. Join us in creating a community of connected care, where coordinated, quality service is the norm and every member feels valued.

The Director, Enterprise Risk Management & IT Internal Audit is responsible for the leadership, innovation, and strategic development of the organization's ERM and IT Internal Audit programs. Leads a coordinated, enterprise wide risk management function that identifies, assesses, mitigates, and monitors strategic, operational, financial, regulatory, and reputational risks to ensure compliance, protect members and assets, and support informed decision making aligned with organizational objectives.

Provides independent assurance over technology risk, cybersecurity, and IT controls. This dualaccountability role strengthens alignment between enterprise risks, technology risks, and governance.

The Director serves as a key advisor to executive leadership and the Audit Committee of the Board of Directors, providing clear, actionable insight into enterprise, operational, financial, regulatory, and technology risks. This role also supports the organization's Own Risk and Solvency Assessment (ORSA) and broader risk governance framework. Performs other duties as assigned.

• IT Audit Strategy
  • Provide leadership and oversight for IT Internal Audit activities, ensuring independent assurance over technology risks and IT control environments
• Assessment and Planning
  • Leads development and execution of risk‑based IT audits that align with enterprise risk assessment and overall Internal Audit plan
• ERM Strategy
  • Design, implement, and coordinate the enterprise‑wide risk management framework and processes for the organization
  • This includes assisting with the ongoing development and implementation of the enterprise risk universe, the enterprise risk profile, and the organization's risk appetite statement
• Regulatory Reporting
  • Lead and coordinate the annual processes to support the organization's Own Risk and Solvency Assessment (ORSA)
  • This primarily includes responsibility for completing and collaborating with various business areas to complete the report
• ERM Program Maturity
  • Collaborate with management in developing mitigation plans to manage high priority risks as well as to establish, communicate, and enforce the organization's risk appetite statements, thereby creating accountability for risks within the business
  • Work with management to integrate risk management techniques into the organization's strategic and operational processes and monitor and report on risk response plan actions put in place by management to mitigate identified risk
  • Guide and assist executive leadership in the identification, evaluation, understanding, management, and communication of significant business risks
  • Provide clarity and focus through cross‑functional collaboration in a matrixed organization to risk identification and risk response expectation
• Organizational Communication & Alignment
  • Clearly present and explain complex information in both verbal and written form to diverse audiences, including executive‑level leadership and the Audit Committee
  • These responsibilities include the preparation and presentation of ERM or IT Audit updates to executive leadership, the Audit Committee, and the Board of Trustees
  • Establish and maintain key relationships throughout the organization as a means of obtaining information needed to perform duties and provide audit and risk and related recommendations and corrective action plans as requested by senior leadership, the Audit Committee of the Board, or the internal audit government
• Leadership
  • Leads, mentors, and develops ERM and IT audit staff…