Assistant Vice President-Internal Audit

Key Responsibilities Develop and implement risk-based IT audit plans covering systems, applications, infrastructure, and processes. Conduct IT risk assessments to identify vulnerabilities, control gaps, and operational inefficiencies. Evaluate compliance with internal policies, regulatory requirements, and industry standards. Lead the execution of IT audits, control reviews, and special audit engagements. Assess the effectiveness of IT governance, cybersecurity, data security, and IT general controls. Prepare and present comprehensive audit reports, including audit findings, recommendations, and management action plans, to senior management and the Audit Committee. Collaborate with Internal Audit and cross-functional teams to execute integrated audits and strengthen enterprise risk management. Monitor emerging technology risks, cybersecurity trends, and regulatory developments to continuously enhance audit methodologies and practices. Provide strategic leadership by supervising, coaching, mentoring, and developing the IT Audit team. Promote fraud prevention, risk awareness, and the continuous improvement of IT controls, governance, and security frameworks. Experience Minimum of 10 years of progressive experience in IT auditing, IT risk management, and compliance , including people leadership and team management . Preferably with experience in the healthcare, HMO, insurance, financial services, or medical provider industry. Demonstrated experience leading enterprise-wide IT audits, cybersecurity assessments, and technology risk initiatives. Certifications Professional certification such as Certified Information Systems Auditor (CISA) is highly preferred. Additional certifications such as Certified Information Systems Security Professional (CISSP) , Certified in Risk and Information Systems Control (CRISC) , Certified Internal Auditor (CIA) , or other globally recognized IT audit, cybersecurity, or risk management certifications are an advantage. Skills Strong knowledge of IT governance, cybersecurity, information security, data privacy, IT general controls (ITGC), and application controls . In-depth understanding of IT audit methodologies, risk assessment frameworks, regulatory compliance, and industry standards (e.g., COBIT, ISO 27001, NIST). Strong analytical, critical thinking, problem-solving, and decision-making skills. Excellent written and verbal communication, presentation, and stakeholder management abilities. Proven leadership, coaching, and team development capabilities. Ability to influence senior stakeholders and provide strategic recommendations to strengthen IT governance and risk management. High level of integrity, professional judgment, and attention to detail.