Senior Manager, IT Audit

The role

The Senior IT Audit Manager will own the IT controls audit program. This person will assess and validate IT general controls, cybersecurity, data privacy, and emerging technology controls across cloud infrastructure, EHR/EMR systems, and third-party SaaS integrations.

What you will do

• Develop and maintain a risk-based IT audit plan
• Lead end-to-end IT audit engagements from planning through issue closure
• Facilitate kickoff, status update, and closing meetings
• Design and execute IT control testing procedures independently
• Assess and validate cybersecurity controls
• Evaluate cloud infrastructure controls for security and compliance
• Conduct audits of EHR and EMR systems and clinical application controls
• Support the governance of AI governance frameworks and controls
• Prepare and maintain IT audit documentation
• Partner with management to design, remediate, and validate IT controls

Required qualifications

• Bachelor's degree in Information Systems, Information Technology, Computer Science, or equivalent technical field
• Active Certified Information Systems Auditor (CISA) designation
• 7+ years of progressive IT audit experience in business risk advisory consulting or internal audit IT specialization
• Hands-on experience with IT general controls (ITGC) testing
• Strong knowledge of IT governance and control frameworks (COBIT, COSO, NIST 800-53, ISO 27001) and ISACA IT audit standards
• Experience auditing cybersecurity and cloud infrastructure controls including AWS, Azure, or GCP
• Familiarity with HIPAA Security Rule requirements
• Experience auditing application controls across SaaS platforms and regulated healthcare technology environments
• Demonstrated use of AI tools to enhance audit execution
• Ability to execute IT audit engagements independently and manage multiple concurrent engagements
• Clear, concise written and verbal communication skills

Nice to have

• Public accounting background (Big 4 or regional firm) with an IT audit or technology risk advisory focus
• Additional certifications such as CRISC, CISSP, CISM, or CIA
• Prior experience supporting SOX ITGC compliance in a pre-IPO, newly public, or high-growth company environment
• Experience auditing or assessing AI governance frameworks
• Familiarity with data privacy frameworks beyond HIPAA, including CCPA or other applicable state-level regulations
• Knowledge of DevOps practices and SDLC security controls
• Proficiency with GRC platforms (e.g., AuditBoard, Workiva, or Vanta)
• Experience in digital health, telehealth, or multi-state healthcare services environments

Benefits

• Competitive compensation
• Medical, Dental & Vision
• Flexible Spending / Health Savings Accounts
• Generous PTO
• hybrid-work flexibility
• 401(k) with Company Match
• Life Insurance
• Pet Insurance

About the company

OpenLoop provides telehealth support solutions designed to streamline and simplify go-to-market care delivery for companies offering virtual support to patients across 50 states. The company has a flat organizational structure with core values of Autonomy, Competence and Belonging.