Sr. IT Auditor

US-IA-Des Moines
Job ID
Internal Audit
Requires Non-Compete?

Job Summary

Wellmark is currently recruiting for a Sr. IT Auditor to join our team! In this role, you will manage multiple, highly complex IT/financial/compliance/ operational risk assurance projects. Provide subject matter expertise in the area of risk assurance/ internal controls primarily focused on IT audits. You will serve as a corporate resource to other departments or divisions by performing special projects at the request of department leadership including evaluations of risk and controls in processes or activities under development. You will lead projects within Internal Audit in helping to accomplish the departments Master Audit Plan.


Core Competencies:

  • Accountability: Owning and taking responsibility for one’s actions.
  • Business Acumen: Understanding industry, market, financial and company specific operations.
  • Collaboration and Communication: Working together; listen to other’s ideas; communicate accurately and concisely.
  • Decision Making: Consider all facts and impacts when making decisions.
  • Focus on the Customer: Consistently doing what is in the best interest of our customer. Leaving a positive impression on the customer by elevating their experience; making it simpler and educating to helping them understand.

Minimum Qualifications Required (all must be met to be considered)

  • Bachelor’s Degree in related field
  • Minimum 4 years of IT audit experience, including strong technical understanding of system interdependencies and risks associated with IT systems and controls
  • Demonstrated understanding and application of applicable relevant regulations and business rules
  • Strong detail orientation, with the ability to manage multiple projects simultaneously
  • Proven communication skills, both verbal and written, with the ability to concisely communicate findings of an audit to all levels of the organization
  • Ability to lead/coach/mentor junior audit professionals toward the achievement of business results
  • Strong interpersonal skills, with the ability to develop strong relationships of collaboration and trust

Hiring Specifications Preferred

  • Professional Certification - e.g., CISA, CISSP, CIPP, CISM, CITP, CRISC, CIA, and/or CGEIT
  • Previous experience in the health insurance or financial services industry

Job Accountabilities

a. Responsible for identifying and assessing information technology risk apply the assessment to prioritize areas of highest risk in the audit scope and objectives.

b. Develop basic audit programs that test the level to which such risk has been addressed in the area audited. Identify core risks associated with technology implementations and deployed controls. Recommend and influence strategies and process changes to resolve audit and compliance issues.

c. Contribute to the technical understanding and adoption of technology control standards, solutions and tools. Demonstrate a deep understanding of application security and software quality assurance. Work with financial/operational auditors to appropriately address and assess key technology risks.

d. Execute the audit process e.g. perform detail testing and analysis on a wide variety of computing environments. Create clear and accurate work paper documentation as well as testing results and exceptions in such a manner that other reviewers can follow the auditors logic, methodology and conclusions.

e. Independently apply internal control concepts in information technology and appropriately assess the exposures resulting from ineffective or missing control practices. Work in partnership with customers to validate audit testing results.

f. Write audit reports and negotiate audit issues with all levels of management. Formulate recommendations which are appropriate, practical, and cost effective. Lead exit conferences as appropriate and follow up to ensure issues are resolved.

g. Maintain and continually improve understanding of Wellmark's information technology environment including compliance with laws and regulations, new products and services offered by Wellmark, organization structure, corporate policies, and Wellmark's strategic direction.

h. Provide assistance to external auditors during their interim and/or yearend audit. Test controls for the WellSOX program as well as the Service Organization Control SOC report to ensure controls are operating effectively.

i. Maintain a current understanding of emerging trends and risks associated with changes and increased sophistication in technology. Provide guidance to team members on information technology and business issues, as needed.

j. Mentor and coach staff through project, including helping staff with risk assessment and scoping of project, setting budgets and target dates, resolving conflict, prioritization of issues and navigating the organization. Evaluate staff on project performance after each audit.

k. Other duties as assigned.


Sorry the Share function is not working properly at this moment. Please refresh the page and try again later.
Share on your newsfeed