Senior IT Internal Auditor

Point
32

Health is a leading not‑for‑profit health and well‑being organization dedicated to delivering high‑quality, affordable healthcare. Serving nearly 2million members, we build on the legacy of Harvard Pilgrim Health Care and Tufts Health Plan to provide access to care and empower healthier lives for everyone. Our culture is based on a community of care and shared values that guide our behaviors and decisions.

We are committed to inclusion and equal healthcare access and outcomes, regardless of background.

The IT Senior Auditor reports to the Internal Audit IT Senior Manager and supports the Model Audit Rule (MAR) program, system and organization control (SOC) reporting, and risk‑based audits. The role evaluates the design and effectiveness of internal controls, assesses the impact of control deficiencies, performs testing for control operating effectiveness, and follows up on open issues.

• Support end‑to‑end internal audit engagements, including planning, risk assessment, walkthrough, testing, and reporting.
• Perform ITGC walkthroughs and testing to support reporting on internal controls over financial reporting (ICFR / Model Audit Rule).
• Support the management and execution of SOC1 audits by collaborating with external service auditors and testing relevant ITGCs.
• Lead walkthrough meetings and document process flowcharts, narratives, and samples in accordance with Point
  32
  
  Health Internal Audit’s methodology and standards.
• Maintain an accurate daily request list and clearly communicate requests and follow‑ups to relevant stakeholders.
• Collaborate with stakeholders to obtain documentation in a timely manner and within agreed‑upon deadlines.
• Proactively communicate audit findings and issues to the Internal Audit IT Senior Manager.
• Partner with stakeholders to identify root causes of control deficiencies and develop appropriate remediation recommendations.
• Monitor and validate the implementation of corrective action plans and remediation efforts.
• Build and maintain strong relationships with IT stakeholders to establish a reputation as a trusted advisor and internal controls expert.
• Provide advisory support on new initiatives, system implementations, and process changes.

• Completed bachelor’s degree in Accounting, Information Systems Management, Finance, or a related field.
• Professional certification (e.g., CISA, CIA, CPA) is preferred but not required.
• 2–4 years of internal or external IT audit experience.
• Strong understanding of Model Audit Rule or Sarbanes‑Oxley requirements, SOC reporting, IIA standards, PCAOB standards, AICPA standards, auditing sampling and testing methodologies, ITIL, NIST, ISO
  27001, and COBIT.
• Experience evaluating and testing IT general controls and understanding of IT risks and controls.
• Experience working on multiple engagements simultaneously.

• Excellent written and verbal communication skills.
• Strong teamwork skills and the ability to work with a diverse group of people.
• Ability to prioritize work and distinguish between time‑sensitive tasks and those that can be scheduled.
• Ability to work on multiple projects simultaneously and in a timely manner.
• Self‑motivated and able to work independently with little supervision.
• Detail oriented with organizational skills.
• Analytical and critical thinking skills.
• Proficiency with Microsoft Office (Word, Excel, PowerPoint, Visio).

The position allows flexible work arrangements. The employee must be able to work under normal office conditions, work from home as required, and may need to use a telephone/headset and PC/keyboard simultaneously while sitting for extended periods. Additional hours may be required beyond the standard work schedule.

The above statements describe the general nature and level of work performed by employees assigned to this classification. They are not intended to be an exhaustive list of all responsibilities, duties, and skills required. Management retains the discretion to add or change duties at any time.

$89,656.26 - $

Annual base salary depends on role scope,…