How Is This Role Important to Our Work?

Blue Cross Blue Shield of MN is hiring an IT Internal Auditor II in Eagan, MN. The IT Internal Auditor II position is responsible for supporting complex internal audit projects, Internal Controls over Financial Reporting (ICOFR) test work, and the Service Organization Control (SOC) report for the organization. The position will work closely with IT Audit team members and Internal Audit management to execute audit projects over business processes and controls, as well as IT processes, general controls and supporting technologies of the Company. This position will be required to complete audit fieldwork timely and accurately per stated audit standards. This position will report to the Internal Audit IT Manager.

The ideal candidate will have 3+ years of IT Internal Auditing experience with proven experience with ICOFR, SOC and leading/participating in audit activities. This is a hybrid role, 2 days a week in the office; based out of Eagan, MN.

A Day in the Life:

• Completes audits in accordance with departmental policies and procedures and stated professional standards.

• Prepares timely and accurate documentation of audit findings.

• Communicates audit results and significance of audit findings to audit management.

• Maintains confidentiality over audit information and audit results.

• Writes clear and concise descriptions of audit findings including overall condition, cause and effect and when appropriate supplies value added recommendations for correction.

• Contributes in the development of audit work plans.

• Completes special projects as assigned by management.

• Represents the Internal Audit department in a professional manner.

Nice to Have:

• Bachelor's degree.

• Previous experience performing internal audits and IT general controls testing.

• Current knowledge of healthcare or insurance industry, as well as knowledge of auditing standards.

• Knowledge and understanding of information technology operations that includes multi-platform technologies, related infrastructures and support processes such as logical and physical security, SDLC methodologies, change management, release management, configuration management, incident/problem management, disaster recovery and business continuity planning.

• Knowledge and understanding of IT process and control frameworks and regulations (e.g. COBIT, NIST, HITRUST, CSF, HIPAA, PCI, etc.).

• Experience working with or auditing SAP environments.

• Proficient in the use of data analytics tools (e .g . Power BI, Access, ACL, Tableau)