Manager, Internal Audit

OpenLoop Health

About The Position

OpenLoop's mission is to bring care anywhere by powering tele-health solutions at scale. OpenLoop is seeking an Internal Audit Manager to help build its newly established audit function. Reporting to the Head of Internal Audit, you'll lead risk assessments and business process audits across financial, operational, and compliance areas, partnering with stakeholders to strengthen controls and mitigate risk. This role offers broad exposure, meaningful ownership, and visibility across a fast-growing, multi-state regulated business.

Requirements

Bachelor's degree in Accounting, Finance, Healthcare Administration, or related field and an active Certified Internal Auditor (CIA) designation
5+ years of progressive internal audit, external audit, business risk advisory, or healthcare regulatory experience
Demonstrated hands-on experience across the full audit lifecycle, including risk assessment, control design and testing, workpaper documentation, and audit report writing, with the ability to execute independently without close supervision
Deep understanding of COSO frameworks and internal control principles
Proven ability to manage multiple concurrent audit engagements, prioritize under competing deadlines, and deliver on time
Years of experience working directly with process owners at all levels in a fluid environment where formal controls are still being built and refined
A builder of control awareness across an organization, including educating process owners and non-finance stakeholders across departments on internal audit's role and foundational control concepts
Critical thinker that provides sound and professional judgment, with the ability to distinguish material risks from noise and communicate findings with precision and appropriate tact
Concise and clear communicator, both written and verbal, with the ability to translate technical control concepts into findings that resonate with non-audit audiences
Strong proficiency with AI tools and data analytics platforms (e.g., ACL/Galvanize, IDEA, Power BI, or Tableau) for control testing and exception analysis

Nice To Haves

Public accounting background (Big 4 or regional firm) with a SOX or advisory focus
Certified Public Accountant (CPA) or additional relevant certification (e.g., CISA, CFE)
Prior experience supporting an organization through an IPO readiness process or M&A integration
Proficiency with GRC platforms (e.g., AuditBoard, Workiva, or Vanta)
Experience in digital health, telehealth, or multi-state healthcare services environments, including familiarity with HIPAA, state medical board licensing, and clinician credentialing compliance
Familiarity with data privacy frameworks beyond HIPAA, such as CCPA or other applicable state-level regulations
Exposure to healthcare revenue cycle operations, compounding pharmacy, or pharmaceutical regulatory environments, including claims, billing integrity, and payer compliance

Responsibilities

Develop and maintain a risk-based audit plan, conducting periodic risk assessments across business processes, entities, and emerging risk areas to establish audit priorities
Lead end-to-end audit engagements, from planning through fieldwork, reporting, and issue closure
Design and execute control testing procedures independently, including walkthroughs, inquiry, inspection, and reperformance
Prepare and maintain audit documentation including process narratives, flowcharts, risk and control matrices (RCMs), testing workpapers, and audit reports
Facilitate kickoff, status update, and closing meetings with process owners and senior management
Identify control deficiencies and communicate findings clearly, with practical and prioritized remediation recommendations
Support management in designing and implementing controls to address identified gaps and process weaknesses
Track open audit issues and remediation plans through closure, validating the effectiveness of corrective actions
Support readiness for regulatory and compliance audits, including HIPAA, data privacy, and applicable state licensing requirements
Collaborate cross-functionally with Finance, Legal, Compliance, IT, and Operations to support control assessments and process improvements
Contribute to developing and refining IA methodology, workpaper templates, and audit tooling as the function matures
Monitor the evolving regulatory and risk landscape relevant to telehealth and healthcare services to keep the audit plan current and relevant