{"id":1978069,"url":"https://alion.io/job/openloop-health-senior-it-audit-manager","title":"Senior IT Audit Manager","company":{"id":678301,"name":"OpenLoop Health","domain":"openloophealth.com","url":"https://alion.io/company/openloophealth","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":84,"open_postings":8,"ghost_share":0,"stale_share":0.625,"repost_share":0,"time_to_fill_p50_days":34,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Management","role_family":"Management","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Des Moines, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":85000,"max_usd":158000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":4158},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST 800-53","optional":false}],"status":"live","first_seen_at":"2026-10-06T19:52:55Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-19T10:57:41Z","board_verified":true,"closed_at":null,"days_open":12,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":12},"description":"About OpenLoop\nOpenLoop was co-founded by CEO, Dr. Jon Lensing, and COO, Christian Williams, with the vision to bring care anywhere. Our telehealth support solutions are thoughtfully designed to streamline and simplify go-to-market care delivery for companies offering meaningful virtual support to patients across an expansive array of specialties, in all 50 states.\nAbout The Role\nOpenLoop’s mission is to bring care anywhere by powering telehealth solutions at scale. OpenLoop is looking for a Senior IT Audit Manager to join its Internal Audit function and own the IT controls audit program. Reporting to the Head of Internal Audit, you will assess and validate the design and effectiveness of IT general controls, cybersecurity, data privacy, and emerging technology controls across a cloud-based infrastructure, EHR and EMR systems, and a broad ecosystem of third-party SaaS integrations. The work spans the full IT risk landscape, from SOX ITGC readiness to HIPAA security, AI governance, and data security, in a multi-entity, heavily regulated telehealth environment that is scaling rapidly and preparing for a significant next step in its growth trajectory. This role partners directly with technology and business leadership to design, remediate, and validate controls, ensuring systems and data are secure, reliable, and compliant.\nWhat You’ll Do\nDevelop and maintain a risk-based IT audit plan, conducting periodic IT risk assessments across systems, applications, infrastructure, and emerging technology domains to establish audit priorities\n\nLead end-to-end IT audit engagements, from planning and scoping through fieldwork, reporting, and issue closure\n\nFacilitate kickoff, status update, and closing meetings with IT process owners, system owners, and senior management\n\nDesign and execute IT control testing procedures independently, including ITGC testing across access management, change management, computer operations, and system development life cycle (SDLC)\n\nAssess and validate cybersecurity controls, including network security, identity and access management, vulnerability management, and incident response\n\nEvaluate cloud infrastructure controls (including AWS environments) for security, reliability, and compliance with applicable frameworks and regulatory requirements\n\nConduct audits of EHR and EMR systems and clinical application controls, and assess data privacy controls for compliance with HIPAA Security Rule, CCPA, and applicable state-level regulations\n\nSupport the governance of AI governance frameworks and controls, including model governance, data quality, bias risk, and compliance with emerging AI regulations\n\nPrepare and maintain IT audit documentation including process narratives, system flowcharts, risk and control matrices (RCMs), testing workpapers, and audit reports\n\nPartner with management to design, remediate, and validate IT controls, providing practical and prioritized recommendations to address identified gaps and process weaknesses\n\nTrack open IT audit issues and remediation plans through closure, validating the effectiveness of corrective actions\n\nMonitor the evolving IT risk, cybersecurity, and regulatory landscape to keep the IT audit plan current and relevant\n\nWho You Are\nRequired\nBachelor's degree in Information Systems, Information Technology, Computer Science, or equivalent technical field and active Certified Information Systems Auditor (CISA) designation\n\n7+ years of progressive IT audit experience in business risk advisory consulting or internal audit IT specialization\n\nDemonstrated hands-on experience with IT general controls (ITGC) testing, including access management, change management, computer operations, and SDLC\n\nStrong knowledge of IT governance and control frameworks (COBIT, COSO, NIST 800-53, ISO 27001) and ISACA IT audit standards and professional practices\n\nDemonstrated experience auditing cybersecurity and cloud infrastructure controls, including network security, identity and access management, vulnerability management, incident response, and cloud environments such as AWS, Azure, or GCP\n\nFamiliarity with HIPAA Security Rule requirements, including technical safeguards, risk analysis, and security incident procedures\n\nExperience auditing application controls across SaaS platforms and regulated healthcare technology environments, including EHR and EMR systems, with hands-on testing of input, processing, and output controls, data integrity, and access controls\n\nDemonstrated use of AI tools to enhance audit execution, accelerate control testing, and improve efficiency across the audit lifecycle\n\nAbility to execute IT audit engagements independently, manage multiple concurrent engagements, and deliver on time without close supervision\n\nClear, concise written and verbal communication skills; able to translate complex technical findings into practical, actionable recommendations for both IT and non-IT audiences\n\nPreferred\nPublic accounting background (Big 4 or regional firm) with an IT audit or technology risk advisory focus\n\nAdditional certifications such as CRISC, CISSP, CISM, or CIA\n\nPrior experience supporting SOX ITGC compliance in a pre-IPO, newly public, or high-growth company environment\n\nExperience auditing or assessing AI governance frameworks, including model governance, data quality controls, and compliance with emerging AI regulations\n\nFamiliarity with data privacy frameworks beyond HIPAA, including CCPA or other applicable state-level regulations\n\nKnowledge of DevOps practices and SDLC security controls relevant to software development and deployment pipelines\n\nProficiency with GRC platforms (e.g., AuditBoard, Workiva, or Vanta) for IT audit management and evidence collection\n\nExperience in digital health, telehealth, or multi-state healthcare services environments, including familiarity with pharmacy management systems, dispensing technology, or regulated pharmaceutical IT environments\n\nWhat We Offer\nCompetitive compensation\n\nMedical, Dental & Vision\n\nFlexible Spending / Health Savings Accounts\n\nGenerous PTO and hybrid-work flexibility\n\n401(k) with Company Match\n\nLife Insurance, Pet Insurance, and more\n\nOur Company\nWe have a relatively flat organizational structure here at OpenLoop. Everyone is encouraged to bring ideas to the table and make things happen. This fits in well with our core values of Autonomy, Competence and Belonging, as we want everyone to feel empowered and supported to do their best work.\nSound like a good fit? We’d love to meet you.","description_format":"text","description_chars":6517,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Telemedicine & Virtual Care","Information Security","Pharmacies"],"lifecycle":[{"event":"open","at":"2026-10-06T22:07:36Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 2","filings_12m":2,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":172500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":80,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.889,"p_room":0.9,"age_days":12,"expected_fill_days":34,"reasons":["conf:2","velocity","win:mid"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/openloop-health-senior-it-audit-manager","json_url":"https://alion.io/job/openloop-health-senior-it-audit-manager.json","meta":{"generated_at":"2026-10-19T14:52:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10993,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678301},"rest":"https://alion.io/mcp/rest/get_company?id=678301"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fopenloop-health-senior-it-audit-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fopenloop-health-senior-it-audit-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fopenloop-health-senior-it-audit-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/openloop-health-senior-it-audit-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fopenloop-health-senior-it-audit-manager"}]}