Internal Information Technology (IT) Auditor Senior

Anticipated End Date:

2025-09-26

Position Title:

Internal Information Technology (IT) Auditor Senior

Job Description:

Internal Information Technology (IT) Auditor Senior

Location: This role requires associates to be in-office 1 day per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace. Ideal candidates will be able to report to one of our Pulse Point locations in Indianapolis, IN, Atlanta, GA Mason, OH, Tampa, FL or Waukesha, WI. Alternate locations may be considered if candidates reside within a commuting distance from an office.

Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law.

The Internal Information Technology (IT) Auditor Senior is responsible for conducting Information Technology operational audits, internal control assessments, strategy reviews, special projects, and risk assessment activities for the enterprise, across all lines of business and functions, in accordance with professional and departmental standards. Provides valuable insights to the IT and business to improve the effectiveness of risk management, control, and governance processes.

How you will make an impact:

• Lead the development and execution of high-quality assessments of the Company’s complex IT processes and controls (including statistical data) for accuracy, completeness, effectiveness, and compliance. Assessments include IT general controls (e.g., access and change management) as well as other IT risk areas (e.g., artificial intelligence, IT vendor management, data governance, system migrations).

• Identify risks and collaborate with team leadership, IT business management and external auditors on audit planning, testing and evaluation procedures, which includes working with the IT business on process, controls, documentation, and issues.

• Support administration of audit team including scheduling and resource management.

• Prepare clear, accurate and concise audit work papers that summarize scope, audit plan methodology and conclusions for audit field work to stakeholder groups with limited IT knowledge (e.g., Board of Directors Audit Committee).

• Provide sufficient evidentiary data to support the work performed.

• Work with IT business partners to address deficiencies or findings through periodic monitoring and retesting.

• Review work performed by others, provide recommendations for improvement, and training to new or less experienced auditors.

• Support internal and external audit/compliance groups with various activities that may include, testing, documentation, client request materials, and data validation.

• Perform special projects and assignments under direction of department management.

Minimum Requirements:

BA/BS in Accounting, Auditing, Finance or related field and a minimum of 3 years in IT Audit, IT internal controls or IT Compliance and at least one professional designation; or 2 years in public accounting (e.g., Big Four firm); or any combination of education and experience, which would provide an equivalent background.

Preferred Skills, Capabilities, and Experiences:

• Experience performing operational or risk-based IT audits covering topics outside of traditional IT general controls highly preferred.

• CIA/CISA/CPA certification or candidate preferred.

• Subject matter expertise in HIPAA, SOX, SOC1, SOC2, PCI, HITRUST, NIST CSF, ISO 2000x, and/or COBIT preferred.

• Project management, process improvement, and quality oversight backgrounds preferred.

• Public accounting (e.g., Big Four) IT audit or consulting experience preferred.

• Understanding of insurance company operations and regulations preferred.

• Experience working in a complex IT/IS environment preferred.

• Experience with Governance, Risk and Compliance (GRC) systems (e.g., Workiva WDesk, Highbond, Audit Board, ServiceNow, etc.) preferred.

Job Level:

Non-Management Exempt

Workshift:

1st Shift (United States of America)

Job Family:

AFA > Audit, Comp & Risk

Please be advised that Elevance Health only accepts resumes for compensation from agencies that have a signed agreement with Elevance Health. Any unsolicited resumes, including those submitted to hiring manag