SOC-1 Business Process Senior Internal Auditor

This is a global Internal Audit function with focus on leading compliance support for Cigna's System and Organization Controls (SOC1) reports over business operations. Responsibilities include engagements of elevated priority for compliance audits, supporting internal and external auditor requests and testing requirements.

Candidate will facilitate risk, control objective and control testing, evaluate testing results, identify gaps, and make recommendations to improve processes and the system of internal control over the claim processing operations, including member set-up, provider, eligibility and banking processes. Individual will, from time-to-time, supervise and review the work of others.

The ideal candidate for this role should have knowledge and experience with AICPA System and Organization Controls (SOC1) requirements, auditing practices, as well as general project management skills. A Bachelor's Degree is required with 8+ years of experience in the business or audit fields with experience within claim processing operations or general business operations space. Health, insurance or financial services industry is preferred with a strong understanding of risk and controls frameworks. This role requires strategic and critical thinking, analytical skills as well as the ability to collaborate to achieve results.

Responsibilities include:

• Provide support in the execution of management’s assertion and representation letters
• Facilitate review of SOC audit scope and coverage with appropriate business owners and sales representatives
• Assist management in the identification of new controls/processes to be tested or coverage of existing enterprise-wide controls in support of new regulatory requirements or scope changes
• Lead coordination and execution of process walkthroughs, supporting internal and external auditor
• Review and update SOC1 process narratives with relevant control and process owners across claim processing organization, including member set-up, provider, eligibility and banking
• Support and manage timely completion of compliance audit tasks across various planning, fieldwork, and reporting phases, including assisting with gathering of audit evidence and follow-up requests
• Supervise and coach staff members (both internal to Cigna and external co-sourcing support) and interns
• Perform SOC1 readiness assessments, including recommendations on business process improvements and revisions to ensure adequate control objective coverage and compensating controls taking into consideration the efficiency and cost effectiveness of proposed solutions
• Perform gap assessments as an advisor to management related to process changes and system implementations   
• Oversight of use-of-work of others testing (i.e. Genpact, IA Ops staff), including planning, status reporting and final workpaper delivery to external auditors
• Perform control deficiency assessment including root cause, compensating control and impact assessments
• Verbally communicate findings to senior management and draft comprehensive and complete root cause analysis with the assistance from various business owners
• Assist remediation activities (corrective action plans), retesting, including follow-up on control deficiencies and identified gaps to ensure that management has taken corrective action
• Provide recommendation on business processes, improvements, revisions, including sufficiency of control objective coverage and compensating controls
• Recommend changes to policies, procedures and controls, as needed
• Field client inquiries for exceptions / report content
• Address client and sales inquiries for scope changes or new SOC report requirements
• Facilitate questions and requests from the SOX PMO office regarding testing strategy, reliance on the work of others, and final results

Specific desired attributes in a candidate include:

• Proficient in Microsoft Excel (formulas and VBA scripting) and other analytics tools, and PowerPoint are desired
• Understanding of the healthcare claim processing operations (including member set-up, provider, eligibility and banking processes), including a basic understanding of automated business process controls (i.e., application controls)
• Understanding of control procedures, frameworks, methodologies and leading audit industry practices and techniques
• Possess an innovative mindset to assess process and control efficiency and effectiveness
• A passion to learn and develop deep technical skillsets in order to execute coordination of compliance audits
• Self-starter with strong motivation and the ability to multi-task effectively in a fast-paced environment
• Proven results orientation and consistent track record with the ability to follow direction, but execute independently