Highmark Inc logo

Manager IT Audit

Highmark Inc
  • Pittsburgh, PA
    2 days ago
    Highmark Inc

    Job Description

    Apply for Manager IT Audit in Home | Careers at Highmark Health Skip to content

    Careers

    search jobs

    • Working Here Open Working Here subnav menu

    • Our Companies Open Our Companies subnav menu

    • Career Areas Open Career Areas subnav menu

    • Talent Community

    search jobs

    • Working Here

    • Total Rewards

    • Team Member Stories

    • Early Careers

    • Veterans & Military

    • Our Companies

    • AHN

    • Highmark, Inc.

    • enGen

    • United Concordia Dental

    • Helion

    • HM Insurance Group

    • Career Areas

    • Allied Health

    • Corporate

    • Nursing

    • Support Services & Clinical Care

    • Sales

    • Technology

    • Talent Community

    • search jobs

    • Total Rewards

    • Team Member Stories

    • Early Careers

    • Veterans & Military

    • AHN

    • Highmark, Inc.

    • enGen

    • United Concordia Dental

    • Helion

    • HM Insurance Group

    • Allied Health

    • Corporate

    • Nursing

    • Support Services & Clinical Care

    • Sales

    • Technology

    Manager IT Audit

    Work At Home - Pennsylvania, Home PA 90001, United States

    Full time

    Apply Now

    Job DescriptionWorking with UsBenefits & PerksHear From Our TeamHow We Hire

    Job Details

    Category Audit & Compliance

    Type Full time

    Location(s) Work At Home - Pennsylvania, Home PA 90001, United States

    Brand Highmark Health

    Posted 11/10/2026

    Req ID J285597

    Apply Now

    Share

    • Share on LinkedIn
    • Share on Facebook
    • Copy link

    Job Description

    Company :

    Highmark Health

    Job Description :

    JOB SUMMARY

    This job is accountable for the direction and implementation for the technology component of the comprehensive, risk-based information systems audit, advisory, and compliance plan for the Highmark Health Enterprise board-approved annual audit plan. Interacts with a wide spectrum of stakeholders including, but not limited to, executive leadership, subsidiary management, state and federal governments, external auditors, employer groups, and partner plan customers. Ensures that the respective risk management and compliance programs address applicable laws, rules, regulations and relevant business risks as well as corporate requirements, recommending and/or implementing improvements in line with corporate standards, applicable regulations, and/or best practice frameworks. All employees must comply with the Health Insurance Portability Accountability Act of 1996 (HIPAA) as it pertains to disclosures of protected health information (PHI) as described in the Notice of Privacy Practices and Privacy Policies and Procedures. As a component of job roles and responsibilities, employees in this role may have access to covered information, cardholder data, or other confidential customer information which must be protected at all times. In connection with this responsibility, employees in this role must adhere to all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy.

    ESSENTIAL RESPONSIBILITIES

    • Perform management responsibilities to include, but are not limited to: involved in hiring and termination decisions, coaching and development, rewards and recognition, performance management and staff productivity. Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.

    • Define and coordinate the IT audit and advisory process with key organizational leaders and review and establish a program to ensure the quality of work performed consistently meets Institute of Internal Auditor (IIA) and Information Systems Audit and Control Association (ISACA) guidelines. Develop and present audit reports and ensure that agreement has been obtained regarding any findings and proposed actions with business owners. Assist in preparation of materials for presentation to senior and executive management, the Highmark Health Audit Committee, and subsidiary boards of directors as required.

    • Collaborate with internal assurance partners to ensure that risk assessment and audit activities consider relevant regulatory requirements and industry standards. Proactively identify areas requiring attention or strengthening and work collaboratively with business and technology management to implement improvements in line with corporate standards, applicable regulations, and/or best practice frameworks.

    • Provide proactive risk, control and governance counsel to business leadership as required. Interact with and must be able to influence senior management and matrix partners on matters of significance.

    • Participate in annual technology audit and advisory risk assessment process with enterprise-wide senior leadership, identifying key strategic and operational risks. Leveraging the risk assessment outcomes, collaboratively assist with the development of the comprehensive, annual, Internal Audit plan with other senior leaders in the Enterprise Risk & Governance department for presentation to and approval from the Highmark Health Audit Committee of the Board of Directors.

    • Participate in industry-related forums and training activities to stay current with risk management practices, assurance and attest practices, and specialized technology subject matter risks (e.g. cybersecurity, data governance, etc.).

    • Other duties as assigned or requested.

    EDUCATION

    Required

    • Bachelor's degree in Finance, Business Administration, Accounting, Information Technology, Computer Science or related field or relevant experience and/or education as determined by the company in lieu of bachelor"s degree.

    Preferred

    • None

    EXPERIENCE

    Required

    • 7 years in Information Systems auditing or a combination of experience in audit and an Information Systems related discipline, such as Information Security, Change Management, Systems Development, etc.
    • 3 years in a management or leadership role, preferably in an audit or information systems discipline in a healthcare or healthcare-related industry

    Preferred

    • Familiarity with a wide variety of computer application platforms, including but not limited to: Oracle, SQL Server, DB2, RACF, Linux, and Windows.
    • Experience evaluating risks and controls across enterprise technology environments, including cloud platforms, identity and access management, cybersecurity, and emerging technologies.
    • Experience leading or performing technology risk, cybersecurity, compliance, or assurance reviews.
    • Experience with Archer Governance, Risk, and Compliance (GRC) suite of products.
    • Experience leveraging data analytics, automation, or AI-enabled audit techniques to enhance audit effectiveness and efficiency.

    LICENSES or CERTIFICATIONS

    Required

    • None

    Preferred

    • Certified Information System Auditor (CISA)
    • Certified Internal Auditor (CIA)
    • Certified Public Accountant (CPA)

    SKILLS

    • Demonstrate expert knowledge of processes, risk and control frameworks, and audit methodology relating to Information Technology, Information Security, Cybersecurity, System Implementations, and Data Privacy, particularly as applied to application and infrastructure security/controls and the application of technology to support operational control in healthcare (payer and provider) business processes
    • Demonstrate expert ability to apply risk-based auditing techniques to the evaluation of systems environments and processes (i.e., data center operations, information security, input, output and processing controls, back-up and recovery, business contingency planning, systems development, and the implementation of advanced technologies)
    • Excellent resource and project planning capabilities, decision making skills, history of results-oriented delivery, and effective team building across a cross-campus and diverse team of management and staff
    • Strong written and verbal communication skills for diverse audiences (senior management, board, peer, and team)
    • Strong relationship building skills and ability to influence with and without authority in a matrixed organization
    • Highly developed leadership qualities with an ability to motivate and inspire a group of individuals to achieve superior results
    • High capacity to think analytically, interpret information / observations, apply judgment and make effective, strategic decisions
    • Ability to interact, build credibility and long-term relationships with senior management to understand the company's culture, strategic direction, and goals
    • Ability to manage multiple projects, meet deadlines while ensuring quality and exceeding client expectations

    Language (Other than English):

    None

    Travel Requirement:

    0% - 25%

    PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS

    Position Type

    Office-based

    Teaches / trains others regularly

    Frequently

    Travel regularly from the office to various work sites or from site-to-site

    Rarely

    Works primarily out-of-the office selling products/services (sales employees)

    Never

    Physical work site required

    Yes

    Lifting: up to 10 pounds

    Constantly

    Lifting: 10 to 25 pounds

    Occasionally

    Lifting: 25 to 50 pounds

    Rarely

    Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.

    Compliance Requirement: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.

    As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy.

    Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.

    Pay Range Minimum:

    $108,600.00

    Pay Range Maximum:

    $180,600.00

    Base pay is determined by a variety of factors including a candidate's qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets.

    Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.

    California Consumer Privacy Act Employees, Contractors, and Applicants Notice

    Why Choose Highmark Health?

    At Highmark Health, we are on a mission to reinvent healthcare for everyone. When you bring your curiosity and drive to our award-winning team, you will find continuous opportunities to grow your career, break down barriers in the industry, and make a meaningful impact every day.

    Benefits & Perks

    Taking Care of You

    Your Benefits at a Glance

    • Health: Complete medical, dental, vision, prescription, HSA, and FSA coverage.
    • Time Off: Paid vacation, holidays, and dedicated volunteer time.
    • Finance: Employer-sponsored 401(k), life/disability insurance, and tuition reimbursement.
    • Perks: Exclusive team discounts on shopping, memberships, and events.

    Medical Coverage

    Medical, prescription drug, dental, and vision coverage

    Paid Time Off

    Vacation, holidays, volunteering

    Retirement Package

    Employer-sponsored 401(k) plan

    Insurance & Coverage

    Life, AD&D and disability insurance

    Onsite & Preventative Care

    We make staying healthy easy with 100% covered preventative exams (including flu shots) and onsite pharmacy services at major campuses. Plus, stay active with free fitness center access at major Highmark campuses, Allegheny General, and West Penn Hospital.

    Make Mindful Changes

    Secure bicycle parking at major campuses. Healthy food options at onsite cafeterias. Stress management classes including yoga, mindfulness, and meditation.

    Holistic Support, 24/7

    Work-life resources including assistance programs and financial counseling services. 24/7 telephone access to health and wellness coaching.

    Get Rewarded for Giving Back

    Health incentive program that rewards team members. Team member networks to gather in the name of health. Paid volunteer time and incentives for making a difference.

    Hear from Our Team

    Real people, real stories

    "I have met some really great people over the years at Highmark Health and the company has treated me really well. I get really good benefits. I"ve always been rewarded for working hard. That"s what keeps me here."

    Victoria T.

    Associate Strategy Analyst, enGen

    "I love participating with the PRIDE BRG. It"s an engaged, dynamic group of almost 400 people. I also love to turn on the digital hub on my computer and see what"s going on with any of the Business Resource Groups. It"s really neat to be able to support other BRGs and see others support PRIDE. Every time I go to a different BRG event, I always feel welcome, even if I"m not part of that group."

    Amanda M.

    Director of Social Determinants of Health | Vice Chair of PRIDE

    Our Hiring Process: Step-by-Step

    1. Apply

    Find a role that sparks your passion and submit your application! We'll send an immediate confirmation email, and our team will review your qualifications over the next 1-2 weeks.

    1. Interview

    If your profile is a great match, we'll reach out to schedule your interview-whether by phone, video, or in person. Don"t worry, we'll provide all the prep details in advance so you can shine.

    1. Job Offer

    The moment you've been waiting for! If selected, we'll connect to celebrate and walk you through the details: compensation, benefits, paid time off, and all the perks of joining the team.

    1. Pre-Employment

    After you accept online, we'll guide you through standard screening (including a background check and drug screen, plus health screenings for certain clinical roles). Once cleared, we"ll officially confirm your start date!

    1. Onboarding

    Welcome aboard! Before Day 1, we'll send everything you need to hit the ground running-including your schedule, location, and the required identification documents to bring with you.

    Bonus Fast-Track Tip

    Applying for EVS, Dietary, or Customer Service roles? You can skip the traditional line and chat with Bridget, our AI recruiting assistant, to find open roles and schedule an eligible interview instantly.

    Apply Now

    Careers

    Follow us:

    Featured Links

    • Careers Home
    • Working at Highmark
    • Our Companies
    • Career Areas
    • Sitemap
    • Competitively Sensitive Information
    • Cyber Security
    • Notice at Collection
    • E-Verify English
    • E-Verify - Employee Rights and Responsibilities
    • Data Protection
    • Terms of Service
    • Do Not Sell/Share
    • E-Verify Spanish
    • Digital Privacy Policy

    Highmark Health is an independent licensee of the Blue Cross Blue Shield Association.

    Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, age, religion, sex, national origin, sexual orientation/gender identity or any other category protected by applicable federal, state or local law. Highmark Health and its affiliates take action to employ and advance in employment individuals without regard to race, color, age, religion, sex, national origin, sexual orientation/gender identity, protected veteran status or disability.

    We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below. For accommodation requests, please contact HR Services Online at HRServices@highmarkhealth.org

    Highmark Health. All Rights Reserved.

    Numbers & Facts

    LocationPittsburgh, PA
    IndustryHealthcare Services
    Company Size1,000 to 1,499 employees
    Year Founded1996
    Websitehttps://www.highmark.com/hmk2/index.shtml

    About Company

    Highmark provides millions of people with the security of quality health insurance

    Our history of helping families and companies with their health insurance needs dates to the 1930s, when our predecessor companies were established to help Pennsylvania's residents pay for health care.

    Highmark was created in 1996 by the consolidation of two Pennsylvania licensees of the Blue Cross and Blue Shield Association — Pennsylvania Blue Shield (now Highmark Blue Shield) and Blue Cross of Western Pennsylvania (now Highmark Blue Cross Blue Shield). We are now one of the largest health insurers in the United States.

    Highmark's officers and board of directors set the company's strategic direction and corporate policies. They are guided by our mission, vision and values.

    Skills

    • Accountingunmatched
    • Applications Securityunmatched
    • Artificial Intelligence (AI)unmatched
    • Auditingunmatched
    • Automationunmatched
    • Background Investigationunmatched
    • Best Practicesunmatched
    • Business Administrationunmatched
    • Business Planunmatched
    • Business Processesunmatched
    • CISA - Certified Information Systems Auditorunmatched
    • Capacity Analysisunmatched
    • Certified Internal Auditor (CIA)unmatched
    • Certified Public Accountant (CPA)unmatched
    • Change Managementunmatched
    • Clinical Medicineunmatched
    • Cloud Computingunmatched
    • Coachingunmatched
    • Communication Skillsunmatched
    • Computer Scienceunmatched
    • Computer Securityunmatched
    • Contingency Plansunmatched
    • Corporate Policiesunmatched
    • Customer Support/Serviceunmatched
    • Data Analysisunmatched
    • Data Recoveryunmatched
    • Emerging Technologyunmatched
    • English Languageunmatched
    • External Auditunmatched
    • Federal Governmentunmatched
    • Federal Laws and Regulationsunmatched
    • Financeunmatched
    • Financial Servicesunmatched
    • Fitnessunmatched
    • Flexible Spending Accountsunmatched
    • HIPAA (Health Insurance Portability and Accountability Act)unmatched
    • Health Insuranceunmatched
    • Health Planunmatched
    • Healthcareunmatched
    • Hospitalunmatched
    • IBM DB2unmatched
    • ISACA (Information Systems Audit and Control Association)unmatched
    • Identity Data Managementunmatched
    • Incentive Programsunmatched
    • Industry Standardsunmatched
    • Information Technology & Information Systemsunmatched
    • Information Technology/Systems Auditunmatched
    • Information/Data Security (InfoSec)unmatched
    • Input/Outputunmatched
    • Institute of Internal Auditors (IIA)unmatched
    • Insuranceunmatched
    • Internal Auditunmatched
    • Internet Securityunmatched
    • Leadershipunmatched
    • Legal Standardsunmatched
    • LinkedInunmatched
    • Linux Operating Systemunmatched
    • Management of Information Systems/Technology (MIS)unmatched
    • Matrix Managementunmatched
    • Microsoft SQL Serverunmatched
    • Microsoft Windows Operating Systemunmatched
    • Multitaskingunmatched
    • Network Operations Centerunmatched
    • On Site Supportunmatched
    • Operational Controlunmatched
    • Operational Strategyunmatched
    • Oracle Databaseunmatched
    • Performance Managementunmatched
    • Pharmacyunmatched
    • Policy Developmentunmatched
    • Policy Implementationunmatched
    • Prescription Drugsunmatched
    • Presentation/Verbal Skillsunmatched
    • Productivity Managementunmatched
    • Project Planningunmatched
    • Project/Program Managementunmatched
    • RACF (Resource Access Control Facility)unmatched
    • Regulationsunmatched
    • Regulatory Complianceunmatched
    • Regulatory Requirementsunmatched
    • Riskunmatched
    • Risk Analysisunmatched
    • Risk Managementunmatched
    • Salesunmatched
    • Security Policyunmatched
    • State Governmentunmatched
    • State Laws and Regulationsunmatched
    • Strategic Analysisunmatched
    • Strategic Planningunmatched
    • Team Buildingunmatched
    • Technical Leadershipunmatched
    • Technical Supportunmatched
    • Time Managementunmatched
    • Willing to Travelunmatched
    • Work From Homeunmatched
    • Writing Skillsunmatched

    Level up your application

    Professional resume templates

    Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

    Free resume templates

    Resume Builder

    Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

    Resume Builder