Manager, IT Audit and Assurance

Inovalon was founded in 1998 on the belief that technology, and data specifically, would empower the transformation of the entire healthcare ecosystem for the better, improving both outcomes and economics. At Inovalon, we believe that when our customers are successful in their missions, healthcare improves. Therefore, we focus on empowering them with data-driven solutions. And the momentum is building.

Together, as ONE Inovalon, we are a united force delivering solutions that address healthcare’s greatest needs. Through our mission-based culture of inclusion and innovation, our organization brings value not just to our customers, but to the millions of patients and members they serve.

Overview:  The Manager, IT Audit and Assurance scope focuses on the technology and security audit programs and activities for Inovalon. The manager will execute the HITRUST program across the organization. Additional activities include supporting strategic and technical initiatives, supporting leadership in planning, implementation, and execution of the internal audit strategy delivering and driving focused compliance and controls programs.

Duties and Responsibilities:

• Leads and executes both moderately and highly complex reviews for HITRUST CSF validated and certified assessments and Interim assessments;
• Support the delivery of professional services projects by participating in the planning, execution, and reporting of the HITRUST validated assessment and final report;
• Evaluate the design and effectiveness of technology controls throughout the business cycle;
• Identify and communicate technology audit and assessment findings to senior management and support remediation effort;
• Identify performance improvement opportunities for assigned projects;
• Supervise and provide performance management for risk and compliance team working on audit projects;
• Actively participate in the continuous enhancement of the Security Compliance Program by Identifying opportunities to improve and implement automated processes;
• Contribute to, and improve, the operations of Security Compliance by identifying and managing the security controls at Inovalon;
• Plan and support the execution of risk mitigation actions established as the result of audit findings, gaps and related analysis;
• Contribute to the production and improvement of the content, quality, and timing of audit and compliance analysis and reporting;
• Develop project plans, estimations, specifications, flowcharts, and presentations;
• Manage relationship and work with third party audit firms on audit specific projects;
• Perform tasks as set forth by the Security, Risk and Compliance Head;
• Contribute to regular audit project and program reviews and accurately communicates the status of projects in both formal and informal settings throughout project lifecycle;
• Contribute towards the execution of activities including the identification of audit gaps, the development of remediation plans, documentation, monitoring compliance status, and ultimately provide attestation of compliance;
• Create governance for HITRUST program. Validate, support, and improve its operations;
• Work with external teams to ensure compliance with the HITRUST program audit controls;
• Document and track all gaps identified during ongoing control monitoring to meet audit, compliance, and legal requirements;
• Build rapport, credibility, and cohesion across all business unit teams and IT teams while managing the audit projects
• Support the assurance that external teams have the required audit control details to meet the control requirements;
• Periodically report progress to management, and assesses and measures results related to audit activities;
• Maintain compliance with Inovalon’s policies, procedures and mission statement;
• Adhere to all confidentiality and HIPAA requirements as outlined within Inovalon’s Operating Policies and Procedures in all ways and at all times with respect to any aspect of the data handled or services rendered in the undertaking of the position; and
• Fulfill those responsibilities and/or duties that may be reasonably provided by Inovalon for the purpose of achieving operational and financial success of the Employer.

Job Requirements:

• Minimum of 8 years of experience with a thorough understanding of IT audit principles and practices;
• Proficiency and experience in the execution of dynamic controls frameworks and regulatory standards to include but not limited to ISO, SOX, SSAE 18, COBIT, NIST, HIPAA, PCI, HITRUST, and other relevant industry regulations, standards, and guidelines;
• Proficiency, and experience, devising and using information security risk management tools and related methodologies to include GRC tools and applications;
• Excellent written and verbal communication and organizational skills;
• Outstanding work ethic, proactive mind-set, self-motivated, inspirational, enthusiastic, reliable, adaptable, and a promoter of information security;
• Strong team player that collaborates well with others to solve problems and actively incorporate input from various sources;
• Demonstrable strong leadership skills;
• Ability to think strategically, work with a sense of urgency and attention-to-detail;
• Independent thinking, willingness to "step outside the box" and take reasonable, calculated risks; and
• Strong intellect and analytical skills.

Education:

• Bachelor’s Degree in Technology, Business, Finance/Accounting, or related field, equivalent experience may be considered.

Physical Demands and Work Environment:

• Sedentary work (i.e. sitting for long periods of time);
• Exerting up to 10 pounds of force occasionally and/or negligible amount of force;
• Frequently or constantly to lift, carry push, pull or otherwise move objects and repetitive motions;
• Subject to inside environmental conditions; and
• Travel for this position will include less than 5% locally usually for training purposes.

This position is not eligible for immigration sponsorship (e.g. H-1B, TN, or E-3). Applicants must be authorized to work in the United States as a condition of employment. (This is only applicable for US-based positions)

If you don’t meet every qualification listed but are excited about our mission and the work described, we encourage you to apply.  Inovalon is most interested in finding the best candidate for the job, and you may be just the right person for this or other roles. 

By embracing inclusion, we enhance our work environment and drive business success. Inovalon strives to provide equal opportunities to the communities where we operate and to our clients and everyone whom we serve. We endeavor to create a culture of inclusion in which our associates feel empowered to bring their full, authentic selves to work and pursue their professional goals in an equitable setting. We understand that by fostering this type of culture, and welcoming different perspectives, we generate innovation and growth. 

Inovalon is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirement. 

To review the legal requirements, including all labor law posters, please visit this link

To review the California Consumer Privacy Statement: Disclosures for California Residents, please visit this link