The Senior IT Audit Professional develops, plans and evaluates internal audit programs for us's information systems and related procedures to ensure compliance with our policies, procedures and standards. The Senior IT Audit Professional work assignments involve moderately complex to complex issues where the analysis of situations or data requires an in-depth evaluation of variable factors. You will report to Manager, IT Internal Audit.
As a Senior IT Audit Professional, you will play a critical role in assessing and strengthening Humana's cybersecurity, technology governance, and emerging technology risks. You will operate within a large, diverse, and technically challenging enterprise environment. This environment involves evaluating complex systems, distributed architectures, and rapidly evolving technologies. While doing so, you will help ensure that controls are designed effectively, operating as intended, and aligned with Humana's policy and strategic objectives.
Use your skills to make an impact
In this role, you will:
- Perform IT audit and cybersecurity-focused consulting engagements, evaluating application, infrastructure, and cloud environments following established audit methodology and within budgeted timeframes.
- Execute IT audit procedures, including planning, walkthroughs, control testing, data analysis, and documentation of results in complex environments requiring significant technical judgment.
- Apply professional IT audit concepts, cybersecurity frameworks (e.g., NIST CSF), and established technologies while consistently using standard audit techniques such as control testing, data analysis, and risk assessment.
- Review, analyze, and interpret IT, security, and operational data. This data analysis aims to identify control gaps, technology risks, and vulnerabilities within Humana's governance, risk, and control environment. The primary focus is on cybersecurity and technology operations.
- Audit and evaluate cybersecurity controls across a large and intricate technology landscape, spanning cloud platforms, identity and access management systems, distributed infrastructure, network architectures, and enterprise applications.
- Assess emerging risks, including those related to AI/ML technologies, cloud transformation, identity modernization, data governance, and evolving threat vectors.
- Identify control weaknesses, cybersecurity vulnerabilities, misconfigurations, and root causes, and prepare clear, actionable draft audit issues that reflect impact, likelihood, and risk alignment.
- Ensure risks are mitigated by recommending security-focused improvements.
- Clearly and concisely communicate the results of IT audit and cybersecurity engagements through written reports and presentations to management, translating technical risks into business relevant impact.
- Prepare and communicate clear, concise, and risk-focused audit reports and recommendations for management, translating deep technical issues into business relevant insights.
- You will leverage AI and automation tools to improve audit risk assessment, testing and document process improvements for department-wide adoption.
Required Qualifications
- Bachelor's degree in Computer Science, Information Systems, or related field.
- 3+ years of IT risk audit or consulting experience, or IT experience focusing on systems operations, software development, cybersecurity, cloud, AI, or infrastructure.
- IT risk or assurance audit experience
- Foundational knowledge of AI concepts, risks, and controls, including understanding how AI/ML models impact data integrity, security, and governance.
- Experience evaluating AI-enabled systems, including assessing algorithmic transparency, data quality, model monitoring, and emerging AI cybersecurity risks.
- Successful track record in facilitating and consulting across teams and managing projects.
Preferred Qualifications
- Certification relative to IT audit such as CISA, CISM, or CISSP are preferred. A certification is required for promotion to leadership.
Work at Home Requirements: To ensure Home or Hybrid Home/Office employees’ ability to work effectively, the self-provided internet service of Home or Hybrid Home/Office employees must meet the following criteria: At minimum, a download speed of 25 Mbps and an upload speed of 10 Mbps is required; wireless, wired cable or DSL connection is suggested. In certain roles, the minimum recommended internet speed required by Humana may not be sufficient for business needs. Humana reserves the right to require associates to upgrade their internet service if necessary. Work from a dedicated space lacking ongoing interruptions to protect member PHI / HIPAA information.Travel: While this is a remote position, occasional travel to Humana's offices for training or meetings may be required.
Scheduled Weekly Hours
40
Pay Range
The compensation range below reflects a good faith estimate of starting base pay for full time (40 hours per week) employment at the time of posting. The pay range may be higher or lower based on geographic location and individual pay will vary based on demonstrated job related skills, knowledge, experience, education, certifications, etc.
$94,900 - $130,500 per year
This job is eligible for a bonus incentive plan. This incentive opportunity is based upon company and/or individual performance.
Description of Benefits
Humana, Inc. and its affiliated subsidiaries (collectively, “Humana”) offers competitive benefits that support whole-person well-being. Associate benefits are designed to encourage personal wellness and smart healthcare decisions for you and your family while also knowing your life extends outside of work. Among our benefits, Humana provides medical, dental and vision benefits, 401(k) retirement savings plan, time off (including paid time off, company and personal holidays, paid parental and caregiver leave), short-term and long-term disability, life insurance and many other opportunities.
Application Deadline: 07-25-2026
