Blue Cross Blue Shield of Michigan Mutual Insurance Company is hiring a Senior IT Auditor to act as a key technology risk advisor. You will conduct internal IT audits and reviews, provide risk education and project risk assessments, and evaluate the control environment to mitigate organizational risk. This role involves developing and communicating risks and recommended controls for leadership while providing guidance for audit staff.
What You'll Do
- Assess risks across cybersecurity, cloud technologies, enterprise platforms, data governance, and digital transformation initiatives.
- Provide advisory support to technology and business teams on emerging risks, control design, and risk mitigation strategies during new initiatives and projects.
- Conduct internal audits and reviews to identify risks, document established controls, and assess the control environment of each auditable unit.
- Communicate issues, audit results, and recommendations to operating, IT, and executive management, including the Audit Committee of the Board of Directors.
- Assist in the development of the annual audit plan through risk universe identification.
- Facilitate project risk assessments and lessons learned sessions. Conduct management action planning workshops to discuss business risks, prioritize control issues, and develop corrective action plans.
- Develop, maintain, and report against a work plan. Prepare complete and accurate audit workpapers in a timely manner.
- Identify, develop, and advocate for improvements to audit methodologies, policies, and procedures.
- Educate employees and management about IT controls and encourage change that promotes an effective and efficient control environment.
- Participate in divisional or departmental infrastructure projects as assigned.
- Assist in training and educating audit IT staff.
What We're Looking For
- Bachelor's Degree in Information Technology, Information Security, Computer Sciences or Engineering, Management Information Systems, or a closely related field.
- Six years of related experience, including three years of IT auditing or related experience (e.g., Information security).
- Strong understanding of project management and information technology.
- Professional Audit Certifications: CIA, CISA, CISM, CISSP, CGEIT, or HITRUST.
- Advanced analytical and critical thinking skills to identify relevant datasets and connect risks to data.
- Ability to leverage data analytics and visualization tools to identify risks, evaluate controls, and enhance audit insights.
- Advanced oral communication skills, including presentations, to effectively communicate audit information to financial and non-financial individuals, including senior levels.
- Strong written communication skills, including the proven ability to tell a relevant business story using data and visualizations.
- Intermediate problem-solving ability to solve problems in a dynamic team environment and handle multiple assignments in a timely manner.
- Advanced conflict management skills.
- Intermediate proficiency using Microsoft Word, Excel, and Project.
- Intermediate proficiency in the use of data analytics or visualization tools such as Tableau, ACL/HighBond, Power BI, or similar platforms.
- Strong interpersonal skills to effectively interface with various levels of management as well as contacts outside the organization.
- Knowledge of project audit methodologies, risk management and project management techniques to detect and resolve complex multidisciplinary issues.
- Demonstrate strong professional judgment, independence, and integrity consistent with IIA Standards and the Internal Audit Code of Ethics.
- Ability to travel to vendor locations to meet with operational and audit personnel.
Nice to Have
- Prior BCBSM experience.
Technical Stack
- Microsoft Word, Excel, Project
- Tableau, ACL/HighBond, Power BI
Blue Cross Blue Shield of Michigan is an equal opportunity employer.
