Overview

Job description: Internal Controls ManagerOur client is a leading healthcare insurer delivering high-quality, affordable healthcare to nearly 2 million members. The organization offers excellent benefits and a culture that values professionalism and work/life balance. The organization is recruiting for an Internal Controls Manager. The Internal Controls Manager reports to an Audit Senior Manager andleads the evaluation, execution, maintenance, and continuous improvement of the organization's Model Audit Rule (MAR) and Service Organization Control (SOC) reporting programs. This role serves as a key control advisor and partner to Finance, IT, Operations, and Compliance, ensuring control integrity, audit readiness, and alignment with regulatory andcustomer assurance expectations. The Internal Controls Manager also partners with external auditors and regulators to maintain that alignment.The role follows a predictable annual cycle centered on reviewing and testing the organization's 200+ internal controls and nearly 70 SOC controls. Much of the SOC work is performed on behalf of members, who rely on these controls for assurance that their insurance claims are processed accurately and properly.The Annual Cycle- Q1 Planning: Scope and plan the year's MAR and SOC audits.- Q2 Review & Testing: Review existing controls and begin testing.- Q3 Peak Testing: The busiest testing period of the year; becausetesting spans roughly nine months, this work regularly spills intoadjacent quarters.- Q4 Reporting & Remediation: Finalize audit reporting and driveremediation of identified issues.Three statutory reporting months January, June, and September intersect with this quarterly cycle and shape deadlines throughout theyear.Key Responsibilities- Oversee delivery of MAR and SOC program activities, includingcreation and maintenance of process documentation, walk-throughs,testing, and reporting.- Coordinate management's risk assessment of internal control overfinancial reporting (ICFR) in accordance with MAR requirements.- Maintain and enhance MAR control frameworks, process narratives,risk and control matrices (RCMs), and testing protocols.- Manage the annual SOC examination lifecycle, including scopedefinition, mapping controls to relevant control objectives, andorganizational readiness.- Review and validate SOC deliverables, including updating SOC reportsand coordinating and monitoring external auditors throughwalk-throughs, testing, and reporting.- Track and manage MAR and SOC deficiencies, including root causeanalysis, remediation plans, and validation of corrective actions.- Serve as the primary liaison with management and external auditorson MAR and SOC inquiries, testing, and project management.- Monitor changes in MAR and SOC standards and assess their impact onthe program and organization.- Direct and oversee audit staff assigned to MAR and SOC activities,providing performance and development feedback.- Communicate with Audit Plan Managers on budget, timelines, andstatus of MAR and SOC activities to ensure timely delivery througheach phase of the annual cycle.QualificationsEducation, Certification and Licensure- Bachelor's degree required; advanced degree preferred.- CPA or CIA certification preferred.Experience (minimum required)- 4+ years of progressive audit experience, preferably including ModelAudit Rule/SOX 404 and SOC reporting.- Knowledge of insurance operations; healthcare insurance experiencepreferred.- Experience in a financial services organization and/or publicaccounting is a plus.- Experience with audit sampling and internal controls testingmethodologies.- Familiarity with AuditBoard or an equivalent audit managementplatform.Skill Requirements- Strong understanding of SOX frameworks, including Model AuditRule/ICFR and SOC reporting.- Data analytics experience preferred. Qualifications: QualificationsEducation, Certification and Licensure- Bachelor's degree required; advanced degree preferred.- CPA or CIA certification preferr