The VP, Internal Audit is a highly visible senior leadership role responsible for directing the internal audit function at Alignment Healthcare, Inc., with accountability for SOX compliance, enterprise risk management, and regulatory oversight across all business operations. This leader works in close partnership with the Audit Committee, CFO, CAO, executive leadership, legal, compliance, finance, and business unit leaders to strengthen the overall control environment and position internal audit as a trusted advisor-not merely a compliance function. Drawing on deep expertise in Medicare Advantage risk adjustment, RADV compliance, and encounter data integrity, this role drives continuous improvement of internal controls, proactively surfaces emerging risks, and ensures the organization operates with the highest standards of accountability. This is a critical enterprise function whose outcomes directly protect patients, maintain regulatory standing, and support the organization's mission of delivering high-quality, cost-effective care to Medicare Advantage-enrolled seniors.

Job Profile Summary

The VP, Internal Audit is a highly visible senior leadership role responsible for directing the internal audit function at Alignment Healthcare, Inc., with accountability for SOX compliance, enterprise risk management, and regulatory oversight across all business operations. This leader works in close partnership with the Audit Committee, CFO, CAO, executive leadership, legal, compliance, finance, and business unit leaders to strengthen the overall control environment and position internal audit as a trusted advisor-not merely a compliance function. Drawing on deep expertise in Medicare Advantage risk adjustment, RADV compliance, and encounter data integrity, this role drives continuous improvement of internal controls, proactively surfaces emerging risks, and ensures the organization operates with the highest standards of accountability. This is a critical enterprise function whose outcomes directly protect patients, maintain regulatory standing, and support the organization's mission of delivering high-quality, cost-effective care to Medicare Advantage-enrolled seniors.

Job Duties / Responsibilities

SOX Program Leadership & Internal Control Governance

• Lead the design, execution, and continuous improvement of the company's SOX 404 program, including scoping, risk assessment, control design, testing, and documentation.

• Drive governance over the outsourced internal audit partner, holding them accountable for quality, timelines, and professional standards.

• Ensure all SOX documentation and testing results are complete, accurate, and maintained in accordance with PCAOB standards and internal policy.

Enterprise Risk Assessment ("ERM") & Audit Planning

• Oversees the Company's ERM process by developing and executing a risk-based annual audit plan that provides comprehensive coverage of financial, operational, IT, and regulatory risks across the organization.

• Proactively identify control environment gaps and emerging risks before they escalate, and communicate findings with timeliness and transparency to senior management and the Audit Committee when needed.

Medicare Advantage Regulatory Compliance Oversight

• Assess compliance requirements specific to the Medicare Advantage regulatory landscape, including the Model Audit Rule, RADV readiness, and encounter data integrity.

• Partner with compliance, legal, and actuarial leaders to ensure audit programs reflect current CMS regulations.

Control Deficiency Remediation & Management Accountability

• Oversee the identification of root causes behind control failures, monitor remediation efforts, and hold management accountable for timely and durable resolution of deficiencies.

• Deliver regular, clear status updates to executive leadership and the Audit Committee-translating complex audit findings into actionable business intelligence.

Operational Audit Leadership

• Lead operational audits across all functional areas-finance, HR, claims, medical management, pharmacy, and technology-applying a consistent, risk-based methodology to evaluate process integrity and identify efficiency opportunities.

• This includes overseeing IT general controls (ITGCs) and system-level controls related to ERP, claims, and data migration initiatives.

Control Culture & Business Partnership

• Embed a culture of accountability by serving as a trusted advisor to business leaders on effective control design, helping them understand what "good" looks like in practice.

• Move the organization from a compliance-driven mindset to one of ownership, where controls are embedded in daily operations rather than layered as an after-thought.

Audit Committee Engagement & Executive Reporting

• Serve as the primary liaison to the Audit Committee Chair, providing regular reporting on audit results, risk exposure, program quality, and remediation progress.

• Apply strong executive presence and communication skills to translate audit data into strategic insights for the Board and senior leadership.

Supervisory Responsibilities

This role carries supervisory responsibility over the Company's third-party external audit team, including oversight of quality, work standards, timelines, reporting, and cost management.

Supervisory Requirements: Fulfill supervisory responsibilities in accordance with organization policies and applicable laws. Responsibilities include interviewing, hiring, and training employees; planning, assigning, and directing work; appraising performance; rewarding and disciplining employees; addressing complaints and resolving problems.

Job Requirements

Experience

Required:

• 15+ years of progressive internal audit, external audit, or financial controls experience, with at least 5 years in a senior leadership role

• 8+ years of experience with a publicly traded company, including demonstrated knowledge of SEC reporting requirements and PCAOB auditing standards

• Deep expertise in Medicare Advantage plans, risk adjustment, and healthcare operations, including familiarity with CMS regulations, RADV, and the Model Audit Rule

• Experience leading audit work in complex, regulated healthcare or insurance environments with strong emphasis on SOX and COSO framework application

• Demonstrated experience directing and governing outsourced or co-sourced audit partnerships, including vendor management and quality oversight

Preferred:

• Experience supporting Audit Committee reporting and direct interaction with Board-level governance bodies

• Prior experience at a Big 4 public accounting firm or national advisory firm within a healthcare or managed care practice

• Exposure to ERP implementation controls, data migration audits, and IT general controls in a healthcare setting

Education

Required:

• Bachelor's degree in Accounting, Finance, Business Administration, or a closely related field

Preferred:

• Master's degree in Accounting, Business Administration (MBA), or Healthcare Administration

• Graduate coursework or certification in risk management, internal auditing, or healthcare compliance

Training

Required:

• Ongoing professional development in internal auditing standards, including IIA (Institute of Internal Auditors) standards and the COSO Internal Control Integrated Framework

• Demonstrated working knowledge of PCAOB standards, SEC reporting requirements, and SOX Section 404 implementation

Preferred:

• Training in Medicare Advantage regulatory compliance, including CMS audit readiness, RADV methodologies, and encounter data management

• Coursework or training in enterprise risk management frameworks (e.g., COSO ERM, ISO 31000)

• Data analytics and audit technology training (e.g., ACL/Galvanize, TeamMate, or similar audit management tools)

Skills & Competencies

Technical / Role-Specific Skills

• SOX 404 Program Management (Advanced): Demonstrated mastery of scoping, risk assessment, control design, testing methodology, and PCAOB-compliant documentation across financial and IT controls

• Medicare Advantage & Healthcare Regulatory Compliance (Advanced): In-depth knowledge of CMS regulations, risk adjustment methodology, RADV audit processes, encounter data integrity, and the Model Audit Rule as they apply to Medicare Advantage health plans

• Enterprise Risk Management (Advanced): Ability to design and execute risk-based audit plans that address financial, operational, IT, and regulatory risks across complex, multi-functional organizations; fluency with COSO ERM framework

• IT General Controls & Systems Audit (Intermediate to Advanced): Working knowledge of IT general controls, ERP control environments, data migration oversight, and systems implementation auditing-particularly in claims, pharmacy, and financial systems

• Audit Committee & Executive Communication (Advanced): Exceptional written and verbal communication skills; ability to translate complex audit findings into concise, strategic narratives for Board-level and C-suite audiences while maintaining full independence from management decision-making

• Remediation Management & Root Cause Analysis (Advanced): Systematic approach to identifying root causes of control breakdowns, designing corrective action plans, and driving sustainable resolution with measurable outcomes

• Data-Driven Audit Analytics (Intermediate): Familiarity with audit analytics tools (e.g., ACL, IDEA, Tableau, or similar) to enhance audit coverage, identify anomalies, and improve audit efficiency across large data sets common in healthcare and claims environments.

Licensure

Required:

• No specific licensure is mandated; however, active professional standing in a recognized auditing or accounting credential is strongly expected at this level

Preferred:

• Certified Public Accountant (CPA) - strongly preferred; indicates technical grounding in financial reporting, accounting standards, and attestation

• Certified Internal Auditor (CIA) - preferred; the global standard for internal audit professionals, demonstrating proficiency in IIA Standards, risk management, and governance

• Certified Information Systems Auditor (CISA) - preferred, particularly given the IT controls and ERP oversight responsibilities of this role

Essential Physical Functions:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• While performing the duties of this job, the employee is regularly required to talk or hear. The employee regularly is required to stand, walk, sit, use hand to finger, handle or feel objects, tools, or controls; and reach with hands and arms.

• The employee frequently lifts and/or moves up to 10 pounds. Specific vision abilities required by this job include close vision and the ability to adjust focus.

Pay Range: $227,952.00 - $341,928.00
Pay range may be based on a number of factors including market location, education, responsibilities, experience, etc.