Senior IT Auditor

Cambia Health Solutions•Portland, OR

10d•$79,000 - $143,000•Hybrid

About The Position

The Senior IT Auditor plans, coordinates, conducts, and reports on IT audits of corporate systems and processes, including system development, general computing controls, applications, networks, databases, and other technical IT functions. The role also supports corporate and special projects and investigations. The position involves assessing risk and internal controls, defining audit scope and objectives, developing audit plans and procedures, gathering and documenting evidence, evaluating findings, and communicating audit results and associated risks. The Senior IT Auditor may lead large or complex audits, coordinate other auditors’ work, guide colleagues, and build relationships with internal customers and external auditors. This is a hybrid role requiring three days per week in an office. Listed office locations are Salt Lake City, Boise, Fargo, Portland, Vancouver, Renton, Medford, Burlington, Lewiston, Springdale, and Little Rock. Preference is given to current employees and candidates who live within commuting distance of certain listed offices or are willing to relocate. The expected salary range is $93,500–$126,500 under the national pay structure, or $84,150–$113,850 under the regional pay structure, depending on work location. The full ranges are $88,000–$143,000 and $79,000–$129,000, respectively; the bonus target is 10%.

Requirements

Bachelor’s degree in Accounting, Computer Science, Information Science, or a related field.
Five years of prior audit experience.
Basic knowledge of audit and compliance functions, auditing, and IT concepts.
Ability to analyze data, summarize conclusions, gather sufficient evidence, and critically assess complex ideas.
Strong organization, planning, prioritization, project management, and time management skills.
Ability to conduct sensitive investigations and maintain confidentiality.
Proficiency with Microsoft Word, Excel, PowerPoint, and Visio.
Strong verbal and written communication skills, including preparing clear audit documentation, narratives, memoranda, and reports.
Ability to present findings and business implications to diverse stakeholders, including non-technical audiences and leadership.
Knowledge and experience in most of the following: SDLC, project management, information systems security, business continuity, disaster recovery, e-business, telecommunications, database management systems, application controls, data center application controls, and emerging technologies.
Ability to construct work papers that document evidence and support audit conclusions.
Working knowledge of COBIT and COSO audit methodologies.
Ability to collaborate with audit customers and work independently through audits and solutions.
Ability to review controls, identify and articulate findings and recommendations, and synthesize findings into final reports.
Ability to lead complex audits, assess risk, define audit scope and objectives, develop audit programs, and coordinate other auditors’ work.
Ability to assess staff auditor performance and provide constructive written and verbal feedback.
Ability to listen constructively and accurately restate others’ viewpoints, including when disagreeing.

Nice To Haves

Healthcare audit experience.
CISA designation.
PMP certification or MBA.
Experience with AI tools and technologies to enhance productivity and decision-making in professional settings.

Responsibilities

Interview employees, examine documents, analyze data, observe operations, and perform tests and procedures to gather sufficient evidence and address audit objectives.
Ensure audit work conforms to applicable policies, standards, budgets, and schedules.
Document audit work clearly and concisely.
Conduct surveys of audit areas, including complex IT audit areas, to assess risk and define audit scope and objectives.
Develop audit plans and comprehensive programs identifying procedures and tests to achieve audit objectives.
Review internal and management controls, including controls for electronic data processing systems and applications, and analyze their strengths and weaknesses.
Develop written findings concerning control deficiencies, operational efficiencies, legal or regulatory noncompliance, and other matters; assess and communicate associated risk.
Write or edit formal audit reports and follow up on outstanding issues and corrective actions.
Conduct special projects and investigations and assist external auditors.
Review new auditing standards and accounting pronouncements, and keep abreast of developments in health insurance and information technology.
Provide leadership, technical guidance, and training to newly hired auditors and other audit staff.
Serve as in-charge auditor or team leader on large or complex audits and investigations; coordinate, assign, and review other auditors’ work.
Lead enterprise-wide audits or projects and coordinate geographically decentralized audit efforts to promote consistency and efficiency.
Develop and maintain relationships with internal customers at varying organizational levels and participate in corporate committees as appropriate.
Coordinate external audits with operations and external auditors, ensuring requests remain within audit scope and comply with confidentiality and privacy guidelines.
Assist management with the annual risk assessment and master audit plan.
Contribute to corporate quality initiatives and help develop and deliver training to improve audit staff competence.

Benefits

Competitive base pay and bonus opportunities, with a 10% bonus target.
401(k) plan with company match and potential discretionary company-performance contribution.
Medical, dental, and vision coverage, including mental health benefits.
Annual employer contribution to a health savings account.
Paid time off and 10 company-paid holidays.
Up to 12 weeks of paid parental time off, subject to eligibility requirements.
Wellness programs that reward participation.
Employee Assistance Fund.
Commute and parking benefits.
Work-from-home options for most roles, subject to stated internet requirements.
Employee resource groups and opportunities to participate in community outreach programs.