Manager IT Audit

Manager IT Audit at Highmark Health

We are looking for a Manager IT Audit to lead the technology component of our comprehensive, risk-based information systems audit, advisory, and compliance plan. This role is fully remote, offering the flexibility to work from home while collaborating with stakeholders across the enterprise.

What You'll Do

You'll take ownership of the IT audit and advisory process, working closely with executive leadership, subsidiary management, government entities, external auditors, employer groups, and partner plan customers. Your responsibilities include ensuring that risk management and compliance programs address applicable laws, regulations, and business risks, recommending and implementing improvements aligned with corporate standards and best practices. You will also perform management duties such as hiring, coaching, performance management, and staff development, and may have budgetary authority.

You'll define and coordinate the IT audit process with key organizational leaders, establish quality programs that meet IIA and ISACA standards, and present audit reports that secure agreement on findings and actions. Collaboration with internal assurance partners ensures risk assessments consider regulatory requirements. Proactively identifying areas needing attention and driving improvements with business and technology management is a key part of the role. You'll also provide risk, control, and governance counsel to business leadership and influence senior management on significant matters.

Participation in the annual technology audit and advisory risk assessment is expected, helping develop the comprehensive internal audit plan for the Audit Committee. You'll stay current through industry forums and training on cybersecurity, data governance, and specialized risks.

What We're Looking For

• *Education: A Bachelor’s degree in Finance, Business Administration, Accounting, Information Technology, Computer Science, or a related field is required (or equivalent experience as determined by the company).
• *Experience: You need at least 7 years in Information Systems auditing or a combination of audit and an IS-related discipline (e.g., Information Security, Change Management, Systems Development). Additionally, 3 years in a management or leadership role, preferably in audit or IS within healthcare or a healthcare-related industry, is required.
• *Preferred qualifications include familiarity with Oracle, SQL Server, DB2, RACF, Linux, and Windows. Experience evaluating risks across enterprise technology environments (cloud, identity and access management, cybersecurity, emerging tech) is highly valued. Experience leading technology risk, cybersecurity, compliance, or assurance reviews, along with using the Archer GRC suite, data analytics, automation, or AI-enabled audit techniques, will set you apart.
• *Certifications: None required, but CISA, CIA, or CPA are preferred.
• *Skills: You should demonstrate expert knowledge of IT processes, risk and control frameworks, and audit methodology, especially applied to application and infrastructure security. Strong risk-based auditing techniques for systems environments are essential. Excellent resource planning, decision-making, and team-building skills are needed. You must have strong written and verbal communication for diverse audiences, relationship-building ability, and the capacity to influence without authority. Analytical thinking, strategic decision-making, and managing multiple projects under deadlines are also critical.

Additional Details

• Travel requirement: 0% - 25%
• This is an office-based position (remote work from home)
• Physical demands: lifting up to 10 pounds constantly, occasionally up to 25 pounds, rarely up to 50 pounds
• You’ll frequently teach or train others, and occasionally travel to various sites

Compensation

The pay range for this role is $108,600 to $180,600 annually. Base pay is determined by qualifications, experience, internal equity, market, and business considerations. Geographic differentials may apply.

Highmark Health is an equal opportunity employer. All qualified applicants will receive consideration regardless of protected veteran status, disability, or any other protected category. Accommodations for the application process are available upon request.

This position requires adherence to HIPAA and all data security guidelines, as you may have access to protected health information or other confidential data.

• --

_This job was found on bandana.com_