Senior IT Internal Auditor

Humana•Washington, DC

1d•$94,900 - $130,500•Hybrid

About The Position

The Senior IT Internal Auditor is part of Humana’s Internal Audit Consulting Group, which supports the company’s strategic and financial objectives by evaluating the efficiency and effectiveness of operational processes. This role provides value-added audit and consulting services, with a focus on cybersecurity, technology governance, and emerging technology risks across a large, technically complex enterprise. The position evaluates application, infrastructure, and cloud environments, including complex systems and distributed architectures. The auditor assesses whether controls are appropriately designed, operating effectively, and aligned with Humana’s policies and strategic objectives. The role also evaluates emerging risks associated with AI/ML, cloud transformation, identity modernization, data governance, and evolving threat vectors. The Senior IT Internal Auditor identifies control weaknesses, vulnerabilities, misconfigurations, and root causes; recommends security-focused improvements; and communicates risk-focused findings to management through reports and presentations. The role also uses AI and automation tools to improve audit risk assessment and testing, and documents process improvements for department-wide adoption. Candidates must live within commuting distance of a Humana office because occasional onsite work is required.

Requirements

Bachelor's degree in computer science, Information Systems, or a related field.
At least 3 years of IT risk audit or consulting experience, or IT experience focused on systems operations, software development, cybersecurity, cloud, AI, or infrastructure.
Foundational knowledge of AI concepts, risks, and controls, including how AI/ML models affect data integrity, security, and governance.
Successful track record facilitating and consulting across teams and managing projects.
Ability to manage multiple or competing priorities effectively.
Self-starter able to work independently with minimal supervision.
Must reside within commuting distance of a Humana office because occasional onsite work is required.

Nice To Haves

Certification related to IT audit, such as CISA, CISM, or CISSP.

Responsibilities

Perform IT audit and cybersecurity-focused consulting engagements across application, infrastructure, and cloud environments using established audit methodology and within budgeted timeframes.
Execute audit procedures, including planning, walkthroughs, control testing, data analysis, and documentation of results.
Apply IT audit concepts, cybersecurity frameworks such as NIST CSF, and established technologies alongside standard audit techniques.
Review and interpret IT, security, and operational data to identify control gaps, technology risks, and vulnerabilities.
Evaluate cybersecurity controls across cloud platforms, identity and access management systems, distributed infrastructure, network architectures, and enterprise applications.
Assess emerging risks related to AI/ML technologies, cloud transformation, identity modernization, data governance, and evolving threat vectors.
Identify control weaknesses, cybersecurity vulnerabilities, misconfigurations, and root causes, and prepare actionable draft audit issues aligned to impact, likelihood, and risk.
Recommend security-focused improvements to mitigate risks.
Communicate audit and cybersecurity engagement results through clear written reports and presentations, translating technical risks into business-relevant impact.
Use AI and automation tools to improve audit risk assessment and testing, and document process improvements for department-wide adoption.