Senior IT Internal Auditor - Risk & Controls Leader

Are you interested in helping an organization manage technology and emerging risks with confidence? As a Senior IT Internal Auditor at Washington Dental Service, you will lead and support audits of IT systems, cybersecurity, AI, and other technology-enabled processes; evaluate whether governance, risk management, and controls are effective; and collaborate with teams across the organization to recommend practical improvements. Your work will help protect the organization, strengthen decision-making, and support our mission of promoting good oral and overall health for all.

We offer a highly competitive medical, dental and vision plans as well offering a generous 401k match and all employees start accruing vacation and sick time from their very first day. We empower employee development through our tuition reimbursement plan, professional development plans, and employee-led communities.

The pay range for this position In Western Washington varies between $87,100 – $136,800, and for Eastern Washington varies between $76,600 - $120,300. Washington Dental Service and its affiliates, including Arcora Foundation, Delta Dental of Washington, and Tri Forza Corp. intends to offer the selected candidate a base pay within this range, dependent on job-related, non-discriminatory factors such as experience. Base pay will also be adjusted based on the candidate's geographic location.

Essential Responsibilities include the following: The list of responsibilities listed is not intended to be comprehensive. Washington Dental Service and its affiliates, including Arcora Foundation, Delta Dental of Washington, and Tri Forza reserve the right to change the responsibilities at any time with or without notice.

• Plan and perform IT internal audits, risk assessments, and assurance reviews; communicate results in clear, accessible language tailored to the audience.
• Evaluate the design and effectiveness of IT general controls, application controls, and security controls against applicable requirements and Company policies and procedures.
• Conduct risk and security assessment reviews of systems under development and significant IT projects and initiatives.
• Apply knowledge of current technology environments and industry trends to identify potential risks, control gaps and improvement opportunities.
• Partner with management to develop pragmatic solutions to address identified issues and actively follow-up to confirm evidence supporting completion of remediation activities.
• Complete assigned audits in accordance with IIA Global Audit Standards and departmental guidelines.
• Contribute to various internal team and company initiatives and actively participate in professional audit and IT governance organizations.

The experience, skills, and education needed to succeed in the position are outlined below. These requirements are representative of the knowledge, skills, and abilities required to successfully perform the essential functions of the role.

• 6+ years of relevant experience in internal audit, IT operations, cybersecurity, risk management, compliance, or a related field. Scope and depth of experience will be considered alongside length of service.
• A current relevant certification, or willingness and ability to pursue one after hire, such as CISA, CIA, CISSP, or another certification aligned with the role.
• Working knowledge of external risk assurance frameworks (NIST, HITRUST, ISO 27001, COBIT) and audit standards (SOC 2, Model Audit Rule).
• Working knowledge of information systems audit concepts, which may include cybersecurity, network security, IT operations, change management. cloud environments, identity and access management, or disaster recovery.
• Working knowledge of AI-related risks and controls, or demonstrated ability to build that knowledge, including generative AI risk, data governance, model risk, responsible AI principles, and human oversight.
• Ability to navigate ambiguity and develop practical, risk-based solutions.
• Critical thinking and analytical skills, including the ability to assess evidence and explain conclusions.
• Ability to communicate complex information clearly in writing and through meetings or presentations.
• Healthcare or benefit plan industry experience preferred.