Senior IT Internal Auditor II - Hybrid

Awarded a Healthiest Employer, Blue Cross Blue Shield of Arizona aims to fulfill its mission to inspire health and make it easy.AZ Blue offersa variety of health insurance products and services to meet the diverse needs of individuals, families, and small and large businesses as well as providing information and tools to help individuals make better health decisions.

At AZ Blue, we have a hybrid workforce strategy, called Workability, that offers flexibility with how and where employees work. Our positions are classified as hybrid, onsite or remote. While the majority of our employees are hybrid, the following classifications drive our current minimum onsite requirements:

• Hybrid People Leaders: must reside in AZ, required to be onsite at least twice per week
• Hybrid Individual Contributors: must reside in AZ, unless otherwise cited within this posting, required to be onsite at least once per week
• Hybrid 2 (Operational Roles such as but not limited to: Customer Service, Claims Processors, and Correspondence positions): must reside in AZ, unless otherwise cited within this posting, required to be onsite at least once per month
• Onsite: daily onsite requirement based on the essential functions of the job
• Remote: not held to onsite requirements, however, leadership can request presence onsite for business reasons including but not limited to staff meetings, one-on-ones, training, and team building

Please note that onsite requirements may change in the future, based on business need, and job responsibilities. Most employees should expect onsite requirements and at a minimum of once per week.

This position is hybrid within the state of AZ only.This hybrid work opportunity requires residency, and work to be performed, within the State of Arizona., Plans, performs, reports on, and follows up on IT audit assignments to evaluate whether information technology systems and related processes comply with corporate policies; whether controls over access management, change management, system operations, and other key IT processes are designed and operating effectively; and whether risks to Company assets, data, and operations are appropriately managed., LEVEL 1 - Senior Internal Auditor I

• Formulate plans for performing IT audit assignments. Recommend areas for future IT audit efforts.
• Prepare or revise IT audit programs to accomplish audit objectives and perform field work accordingly.
• Prepare time budgets for completion of various audit steps.
• Draft IT audit reports and document audit work. Compile audit work-papers to support audit results and conclusion.
• Review report draft findings and recommendations with company management.
• Evaluate responses to reports to determine reasonableness and suggest follow-up actions.
• Participate in project teams as necessary.
• Assist Internal Audit management and external auditors as required. Assist teams in meeting project deadlines.
• Keep current with developments in field of expertise.

Level 2 - Senior Internal Auditor II

• Assist IA management with special projects.
• Conduct the Annual IT Risk Assessment.
• Lead external audit coordination.
• Participate in interdepartmental teams as directed by IA management.
• Work closely with other departments resolving questions or discrepancies.

Level 3 - Aenior Internal Auditor III

• Perform continuous IT risk assessments as needed to determine where audit efforts should be focused.
• Assist leads and managers in formulating IT audit plan for presentation to the board
• Perform sensitive high level projects
• Analyze and assess the controls environment of the business processes in accordance with the IT audit program.
• Assist other junior level auditors as needed.
• Be seen as the SME of the Internal IT Audit department

ALL LEVELS

• Each progressive level includes the ability to perform the essential functions of any lower levels and assist / mentor employees in those levels.
• The position has an onsite expectation of 1 day per week and requires a full-time work schedule. Full-time is defined as working at least 40 hours per week, plus any additional hours as requested or as needed to meet business requirements
• Perform all other duties as assigned.

Required Work Experience

• 3 Years: Experience auditing IT systems, including access controls, change management, and implementation governance.
• 3 Years: Experience auditing IT systems, including access controls, change management, and implementation governance.
• 2 Years: Experience assisting with or coordinating external IT audits.
• 2 Years: Experience assisting with or coordinating external IT audits.
• 5 Years: Hands-on technical experience with enterprise IT environments, applications, databases, infrastructure, or cybersecurity technologies.
• 5 Years: Hands-on technical experience with enterprise IT environments, applications, databases, infrastructure, or cybersecurity technologies.

Required Education

• High School Diploma or GED in general field of study, Preferred Work Experience
• 3 years of healthcare experience
• 8 Years: Experience auditing IT systems, including access controls, change management, and implementation governance.
• 5 Years: Experience assisting with or coordinating external IT audits.
• 10 Years: Hands-on technical experience with enterprise IT environments, applications, databases, infrastructure, or cybersecurity technologies.

Preferred Education

• Bachelor’s or master’s degree in business or related field of study

Preferred Licenses

• N/A

Preferred Certifications

• Certified Internal Auditor (CIA)
• Certified Information Systems Auditor (CISA)
• Relevant Technical Certifications, Required Job Skills (Applies to All Levels)
• Intermediate PC proficiency
• Intermediate proficiency in spreadsheet, database and word processing software

Required Professional Competencies

• Analytical skills to support independent and effective decisions

• Prioritize tasks and work with multiple priorities, sometimes under limited time constraints.

• Perserverance in the face of resistance or setbacks.

• Effective interpersonal skills and ability to maintain positive working relationship with others.

• Verbal and written communication skills and the ability to interact professionally with a diverse group, executives, managers, and subject matter experts.

• Working knowledge of HIPAA and privacy requirements

• Maintain confidentiality and privacy

• Analytical knowledge necessary to generate reports based on available data and then make decisions based on reported data, * Advanced PC proficiency

• Advanced proficiency in spreadsheet, database and word processing software

• Use of AI tools such as Microsoft Copilot and Anthropic Claude.

• Use of Optro Audit board

Preferred Professional Competencies

• Identify solutions to meet customer needs
• Work with ambiguous and conflicting information while keeping focused on the end goal.