Internal Audit Manager - Technology

Humana • Washington, DC

19h • $115,200 - $158,400 • Hybrid

About The Position

The Technology Internal Audit Manager develops and executes audit programs focused on cybersecurity risks, IT controls, and technology processes to ensure compliance with Humana policies and industry standards. You will apply advanced cybersecurity expertise to assess control effectiveness across areas such as access management, data protection, and system security. It determines audit approach, resources, timelines, and objectives based on assigned goals. The Technology Internal Audit Manager plans and executes risk-based audits focused on cybersecurity, IT controls, and technology processes. This role evaluates the protection of information assets across systems, applications, data, and third-party environments. The focus is on areas such as identity and access management, data protection, cloud security, vulnerability management, and change management. The Audit Manager develops audit objectives, scope, and testing strategies to assess the design and operating effectiveness of cybersecurity and IT controls. These strategies include identifying control gaps, assessing risk exposure, and evaluating alignment with organizational policies, regulatory requirements, and industry frameworks (e.g., NIST CSF).

Requirements

• Bachelor's Degree in Information Systems, Cybersecurity, Computer Science, or a related field
• One or more of the following certifications required: CISA, CISM, CEH, or CISSP
• 6+ years of experience in IT audit, cybersecurity, or technology risk consulting
• 2+ years of management or team leadership experience
• Strong track record of leading cybersecurity audits and advising on IT risk, including areas such as access management, data protection, cloud security, and third-party risk
• Ability to think strategically about cybersecurity risks while managing multiple audits and initiatives in a fast-paced environment
• Excellent written and verbal communication skills, with the ability to translate technical cybersecurity risks for business stakeholders
• Passion for strengthening cybersecurity posture and protecting consumer data

Nice To Haves

• Advanced certifications (e.g., CISSP, CISM, CEH, or CISA); two or more certifications preferred
• Master's degree in Cybersecurity, Information Systems, or a related field

Responsibilities

• Prepare clear, executive-ready reports that highlight cybersecurity risks and provide applicable recommendations to strengthen the organization's security posture.
• Collaborate with IT, cybersecurity, risk, and business stakeholders to validate findings, support remediation, and monitor progress.
• Manage and develop a team of IT auditors, providing direction, coaching, and performance oversight.
• Determine audit approach, resource allocation, and timelines, and promotes continuous improvement in audit practices while maintaining regular communication with senior leadership and cross-functional teams.
• Use your skills to make an impact

Benefits

• medical
• dental
• vision benefits
• 401(k) retirement savings plan
• time off (including paid time off, company and personal holidays, volunteer time off, paid parental and caregiver leave)
• short-term and long-term disability
• life insurance

What This Job Offers

• Job Type: Full-time
• Career Level: Manager