Internal Controls
About the role
Our client is a leading healthcare insurer delivering high-quality, affordable healthcare to nearly 2 million members. The organization offers excellent benefits and a culture that values professionalism and work/life balance. The organization is recruiting for an Internal Controls Manager. The Internal Controls Manager reports to an Audit Senior Manager and leads the evaluation, execution, maintenance, and continuous improvement of the organization's Model Audit Rule (MAR) and Service Organization Control (SOC) reporting programs. This role serves as a key control advisor and partner to Finance, IT, Operations, and Compliance, ensuring control integrity, audit readiness, and alignment with regulatory and customer assurance expectations. The Internal Controls Manager also partners with external auditors and regulators to maintain that alignment. The role follows a predictable annual cycle centered on reviewing and testing the organization's 200+ internal controls and nearly 70 SOC controls. Much of the SOC work is performed on behalf of members, who rely on these controls for assurance that their insurance claims are processed accurately and properly. The Annual Cycle Q1 Planning: Scope and plan the year's MAR and SOC audits. Q2 Review & Testing: Review existing controls and begin testing. Q3 Peak Testing: The busiest testing period of the year; because testing spans roughly nine months, this work regularly spills into adjacent quarters. Q4 Reporting & Remediation: Finalize audit reporting and drive remediation of identified issues. Three statutory reporting months January, June, and September intersect with this quarterly cycle and shape deadlines throughout the year.
Responsibilities
- Oversee delivery of MAR and SOC program activities, including creation and maintenance of process documentation, walk-throughs, testing, and reporting