Internal Auditor, Enterprise Controls and Technology Assurance

Company Overview Detego Health's mission is to connect real-life needs with innovative product design, delivering affordable, approachable health care benefits that feel personal, while deeply understanding our members and partners to improve lives and redefine access to health care.

We're looking for passionate people who want to make a difference and help us redefine access to health care for individuals and small businesses by delivering certainty, connection and significance where others won’t.Ready to build something great together? Join a team that values growth, collaboration and the unique perspective you bring.

Position Summary Detego Health is seeking an independent and analytical Internal Auditor to provide objective assurance over enterprise technology controls and, secondarily, the operational processes that support them, within a regulated healthcare environment. This is a technology-first assurance role. Its primary mandate is the design and operating effectiveness of IT general controls, cybersecurity controls, application and system controls across Microsoft 365, Azure, SaaS platforms, endpoints, Salesforce, AI, and core infrastructure.

Operational process assurance is a defined secondary scope focused on control execution rather than end-to-end business operations.

The Internal Auditor provides independent assurance over control design, operating effectiveness, and remediation validation while remaining separate from day-to-day control ownership and execution. The role identifies systemic control and process breakdowns and supports continuous improvement through defensible testing, findings, and remediation validation. This is not a financial audit or general accounting audit role. Candidates should bring direct experience auditing technology controls, IT general controls, cybersecurity controls, access governance, system controls, or related technology risk areas.

Key Responsibilities

Key Responsibilities Technology, Cybersecurity & IT Controls Lead risk-based audits of IT general controls and cybersecurity controls, including identity and privileged access, change management, logging and monitoring, incident response, endpoint/cloud security, backup and recovery, and security configuration.

Evaluate control design and effectiveness across Microsoft 365, Azure, SaaS platforms, endpoints, and core infrastructure, including segregation of duties and role-based access.

Application, System & Data Controls Assess automated and configurable controls across core business platforms, including claims, finance, HR, CRM, and vendor systems.

Evaluate system configurations, interfaces, data validation, reporting accuracy, and controls designed to prevent errors, unauthorized access, and inconsistent outcomes.

Assess data governance and privacy controls across the data lifecycle, including safeguards for PHI and other sensitive information, backup integrity, disaster recovery testing, and remediation.

Risk-Based Audit & Operational Assurance Plan and execute independent, risk-based audits using walkthroughs, control testing, sampling, data analysis, and evidence validation.

Evaluate operational processes to confirm controls are appropriately designed, documented, consistently executed, and supported by sufficient evidence.

Identify control deficiencies, root causes, recurring failure patterns, and risk exposure; recommend corrective actions and validate remediation through follow-up testing.

Provide secondary assurance over control-related operational processes such as access reviews, change control, vendor onboarding, and regulatory complaint handling.

Compliance & External Audit Readiness Support readiness and internal assurance activities for SOC 2, HIPAA, URAC, client audits, and…