Senior IT Internal Auditor

Humana•Louisville, KY

1d•Hybrid

About The Position

The Senior IT Internal Auditor provides value-added services by evaluating the efficiency and effectiveness of Humana’s operational processes. The role assesses and strengthens cybersecurity, technology governance, and emerging technology risk across a large, diverse, and technically complex enterprise. It evaluates complex systems, distributed architectures, and evolving technologies to help ensure controls are effectively designed, operate as intended, and align with Humana’s policies and strategic objectives. The position performs IT audit and cybersecurity consulting engagements across application, infrastructure, and cloud environments. It applies established audit methodology and professional IT audit concepts, cybersecurity frameworks such as NIST CSF, and standard audit techniques. The role evaluates risks and controls across cloud platforms, identity and access management, distributed infrastructure, network architectures, and enterprise applications, including emerging risks involving AI/ML, cloud transformation, identity modernization, data governance, and evolving threats. The Senior IT Internal Auditor identifies control weaknesses, vulnerabilities, misconfigurations, and root causes; develops actionable, risk-focused audit issues and recommendations; and communicates technical findings in business-relevant reports and presentations. The role also uses AI and automation tools to improve audit risk assessment and testing and documents process improvements for department-wide adoption. Candidates must reside within commuting distance of a Humana office because occasional onsite work is required. Listed offices are in Louisville, Kentucky; Washington, DC; and New York, New York. The position is scheduled for 40 hours per week and is eligible for a bonus incentive plan based on company and/or individual performance.

Requirements

Bachelor’s degree in computer science, information systems, or a related field.
At least 3 years of IT risk audit or consulting experience, or IT experience focused on systems operations, software development, cybersecurity, cloud, AI, or infrastructure.
Foundational knowledge of AI concepts, risks, and controls, including how AI/ML models affect data integrity, security, and governance.
Demonstrated ability to facilitate and consult across teams and manage projects.
Ability to manage multiple or competing priorities effectively.
Self-starter able to work independently with minimal supervision.
Must reside within commuting distance of a Humana office because occasional onsite work is required.

Nice To Haves

IT audit-related certification such as CISA, CISM, or CISSP.

Responsibilities

Perform IT audit and cybersecurity-focused consulting engagements across application, infrastructure, and cloud environments, following established audit methodology and budgeted timeframes.
Plan and execute IT audit procedures, including walkthroughs, control testing, data analysis, and documentation of results in complex environments.
Apply professional IT audit concepts, cybersecurity frameworks such as NIST CSF, and established technologies and audit techniques.
Review and interpret IT, security, and operational data to identify control gaps, technology risks, and vulnerabilities, primarily in cybersecurity and technology operations.
Audit cybersecurity controls across cloud platforms, identity and access management systems, distributed infrastructure, network architectures, and enterprise applications.
Assess emerging risks related to AI/ML technologies, cloud transformation, identity modernization, data governance, and evolving threat vectors.
Identify control weaknesses, cybersecurity vulnerabilities, misconfigurations, and root causes; prepare actionable draft audit issues that reflect impact, likelihood, and risk alignment.
Recommend security-focused improvements to mitigate risks.
Communicate audit results through clear reports and presentations, translating technical risks into business-relevant impacts and insights.
Use AI and automation tools to improve audit risk assessment and testing, and document process improvements for department-wide adoption.
Facilitate and consult across teams and manage projects while balancing multiple or competing priorities.