Internal Controls

Internal Controls Manager

Our client is a leading healthcare insurer delivering high-quality, affordable healthcare to nearly 2 million members. The organization offers excellent benefits and a culture that values professionalism and work/life balance. The organization is recruiting for an Internal Controls Manager. The Internal Controls Manager reports to an Audit Senior Manager and

leads the evaluation, execution, maintenance, and continuous improvement of the organization's Model Audit Rule (MAR) and Service Organization Control (SOC) reporting programs. This role serves as a key control advisor and partner to Finance, IT, Operations, and Compliance, ensuring control integrity, audit readiness, and alignment with regulatory and

customer assurance expectations. The Internal Controls Manager also partners with external auditors and regulators to maintain that alignment.

The role follows a predictable annual cycle centered on reviewing and testing the organization's 200+ internal controls and nearly 70 SOC controls. Much of the SOC work is performed on behalf of members, who rely on these controls for assurance that their insurance claims are processed accurately and properly.

The Annual Cycle

• Q1 Planning: Scope and plan the year's MAR and SOC audits.
• Q2 Review & Testing: Review existing controls and begin testing.
• Q3 Peak Testing: The busiest testing period of the year; because

testing spans roughly nine months, this work regularly spills into

adjacent quarters.

• Q4 Reporting & Remediation: Finalize audit reporting and drive

remediation of identified issues.

Three statutory reporting months January, June, and September

intersect with this quarterly cycle and shape deadlines throughout the

year.

Key Responsibilities

• Oversee delivery of MAR and SOC program activities, including

creation and maintenance of process documentation, walk-throughs,

testing, and reporting.

• Coordinate management's risk assessment of internal control over

financial reporting (ICFR) in accordance with MAR requirements.

• Maintain and enhance MAR control frameworks, process narratives,

risk and control matrices (RCMs), and testing protocols.

• Manage the annual SOC examination lifecycle, including scope

definition, mapping controls to relevant control objectives, and

organizational readiness.

• Review and validate SOC deliverables, including updating SOC reports

and coordinating and monitoring external auditors through

walk-throughs, testing, and reporting.

• Track and manage MAR and SOC deficiencies, including root cause

analysis, remediation plans, and validation of corrective actions.

• Serve as the primary liaison with management and external auditors

on MAR and SOC inquiries, testing, and project management.

• Monitor changes in MAR and SOC standards and assess their impact on

the program and organization.

• Direct and oversee audit staff assigned to MAR and SOC activities,

providing performance and development feedback.

• Communicate with Audit Plan Managers on budget, timelines, and

status of MAR and SOC activities to ensure timely delivery through

each phase of the annual cycle.

Qualifications Education, Certification and Licensure

• Bachelor's degree required; advanced degree preferred.
• CPA or CIA certification preferred.

Experience (minimum Required)

• 4+ years of progressive audit experience, preferably including Model

Audit Rule/SOX 404 and SOC reporting.

• Knowledge of insurance operations; healthcare insurance experience

preferred.

• Experience in a financial services organization and/or public

accounting is a plus.

• Experience with audit sampling and internal controls testing

methodologies.

• Familiarity with AuditBoard or an equivalent audit management

platform.

Skill Requirements

• Strong understanding of SOX frameworks, including Model Audit

Rule/ICFR and SOC reporting.

• Data analytics experience preferred.

Qualifications: Why is This a Great Opportunity:

Very professional and well-managed organization. Everyone is in office on Tuesdays; prefer everyone to come to the office one other day. Experience matters.the desired candidate has a strong controls risk background. With technology evolving rapidly and a need make sure that the organization has all the proper controls in place, demonstrated controls experience is valuable to this organization. This is a new position.

Salary Type : Annual Salary

Salary Min : $ 110000

Salary Max : $ 120000

Currency Type : USD