Internal Controls Program Manager

HMSA•Honolulu, HI

6d•Hybrid

About The Position

Based on the strategic direction developed by the CAE together with senior leadership, the Internal Controls Program Manager will design, develop, and implement the organization's Internal Control function. This role involves being a key liaison for the co-sourced partner for the Internal Control function, establishing methodologies and standards, designing and implementing an enterprise-wide risk and control framework, leading cross-functional efforts, supporting prioritization of internal control build work, establishing monitoring and reporting mechanisms, contributing to presentations for senior leadership and the Board of Directors, and acting as a valued business partner in risk advisory and consulting services. The role also includes partnering with business leaders to identify, assess, and prioritize risks within key business processes, leading enterprise and business process-level risk assessments across various domains, evaluating complex business processes to identify control deficiencies, aligning risk identification with the ERM framework, and coordinating alignment among governance functions. Additionally, the position involves independently leading special reviews, risk management program activities, consulting engagements, and investigations. Administrative duties such as preparing status reports, organizing files, and participating in departmental activities are also part of the role, along with performing other assigned tasks.

Requirements

Bachelor's degree in related field (example: Accounting, General Business, Finance) and six years of related work experience; or equivalent combination of education and related work experience
Knowledge of healthcare industry practices and risks, healthcare related rules and regulations
Center for Medicare & Medicare Services (CMS), Office of Personnel Management (OPM), National Association of Insurance Commissioners (NAIC), or National Committee for Quality Assurance (NCQA), American Institute of Certified Public Accountants (AICPA) and Institute of Internal Auditors (IIA) Standards.
Strong program management capabilities, including prioritization of resources, management of competing demands, and delivery of outcomes
Demonstrated expertise in evaluating complex risk and control issues.
Expertise with general internal audit issues.
Experience dealing in a regulated environment involving compliance with federal, state, and local laws and regulations.
Knowledge of common business and functional procedures as well as common business, financial, operational and management controls.
Basic working knowledge of Microsoft Office applications. Including but not limited to Word, Excel, and Outlook
Candidate must have one of the following certifications or must agree to obtain one of the following certifications within two years of employment. Certified Internal Auditor (CIA) or Certified Public Accountant (CPA), or other agreed upon certification.

Responsibilities

Be a key liaison for the co-sourced partner for the Internal Control function and ensure that any barriers are identified and addressed timely
Establish and maintain methodologies, standards, templates, governance practices, and performance metrics for the enterprise internal control program
Design and implement an enterprise-wide risk and control framework aligned with ERM practices and organizational strategy
Lead cross-functional efforts to design internal controls and assist in implementation
Support prioritization of internal control build work by communicating potential barriers and awareness of conflicting priorities
Establish monitoring and reporting mechanisms that drive accountability for control effectiveness and sustainable risk mitigation
Contribute to and develop presentations for senior leadership and the Board of Directors related to the internal control function, its work outcomes/deliverables and performance
Be a valued business partner in risk advisory and consulting services
Lead enterprise and business process-level risk assessments across operational, financial, regulatory, information technology, cybersecurity, privacy, and strategic domains
Evaluate complex business processes and operating models to identify control deficiencies and opportunities for improvement
Align risk identification and categorization activities within the ERM framework and risk taxonomy
Coordinate alignment among governance functions, such as Internal Audit, Compliance and Ethics, Privacy, and IT Security, to achieve integrated risk management outcomes
Independently lead and/or conduct special reviews, risk management program activities, consulting engagements, and investigations under the direction of the Director, ERM and/or the VP and CAE
Perform administrative duties such as preparing status reports, organizing and backing up files, participating in planning, training and other departmental and organizational activities.
Perform other tasks as assigned by the Director, ERM.