The Role
Designs and implements the enterprise internal controls function, including risk and control frameworks, governance standards, monitoring, reporting, and performance metrics. Leads cross-functional risk assessments across operational, financial, regulatory, IT, cybersecurity, privacy, and strategic domains. Partners with business leaders and governance functions to address control deficiencies, support risk mitigation, and provide advisory services. Conducts special reviews, investigations, and program activities while preparing leadership and Board presentations.
Summary Generated by Built In
Job Summary & ResponsibilitiesPreferred Qualifications
- Based on the strategic direction developed by the CAE together with senior leadership, the Internal Controls Program Manager will design, develop, and implement the organization's Internal Control function by performing the following:[DB1.1][SY1.2]
- Be a key liaison for the co-sourced partner for the Internal Control function and ensure that any barriers are identified and addressed timely
- Establish and maintain methodologies, standards, templates, governance practices, and performance metrics for the enterprise internal control program
- Design and implement an enterprise-wide risk and control framework aligned with ERM practices and organizational strategy
- Lead cross-functional efforts to design internal controls and assist in implementation
- Support prioritization of internal control build work by communicating potential barriers and awareness of conflicting priorities
- Establish monitoring and reporting mechanisms that drive accountability for control effectiveness and sustainable risk mitigation
- Contribute to and develop presentations for senior leadership and the Board of Directors related to the internal control function, its work outcomes/deliverables and performance
- Be a valued business partner in risk advisory and consulting services
- Partner with business leaders to identify, assess, and prioritize risks within key business processes. [DB2.1][SY2.2]
- Lead enterprise and business process-level risk assessments across operational, financial, regulatory, information technology, cybersecurity, privacy, and strategic domains
- Evaluate complex business processes and operating models to identify control deficiencies and opportunities for improvement
- Align risk identification and categorization activities within the ERM framework and risk taxonomy
- Coordinate alignment among governance functions, such as Internal Audit, Compliance and Ethics, Privacy, and IT Security, to achieve integrated risk management outcomes
- Independently lead and/or conduct special reviews, risk management program activities, consulting engagements, and investigations under the direction of the Director, ERM and/or the VP and CAE[D
- Perform administrative duties such as preparing status reports, organizing and backing up files, participating in planning, training and other departmental and organizational activities.
- Perform other tasks as assigned by the Director, ERM.
#LI-Hybrid
- Bachelor's degree in related field (example: Accounting, General Business, Finance) and six years of related work experience; or equivalent combination of education and related work experience
- Knowledge of healthcare industry practices and risks, healthcare related rules and regulations
- Center for Medicare & Medicare Services (CMS), Office of Personnel Management (OPM), National Association of Insurance Commissioners (NAIC), or National Committee for Quality Assurance (NCQA), American Institute of Certified Public Accountants (AICPA) and Institute of Internal Auditors (IIA) Standards.
- Strong program management capabilities, including prioritization of resources, management of competing demands, and delivery of outcomes
- Demonstrated expertise in evaluating complex risk and control issues.
- Expertise with general internal audit issues.
- Experience dealing in a regulated environment involving compliance with federal, state, and local laws and regulations.
- Knowledge of common business and functional procedures as well as common business, financial, operational and management controls.
- Basic working knowledge of Microsoft Office applications. Including but not limited to Word, Excel, and Outlook
- Candidate must have one of the following certifications or must agree to obtain one of the following certifications within two years of employment. Certified Internal Auditor (CIA) or Certified Public Accountant (CPA), or other agreed upon certification.
Skills Required
- Bachelor's degree in a related field such as Accounting, General Business, or Finance, plus six years of related work experience, or an equivalent combination of education and experience
- Knowledge of healthcare industry practices, risks, and healthcare-related rules and regulations
- Knowledge of CMS, OPM, NAIC, NCQA, AICPA, or IIA standards
- Strong program management capabilities, including resource prioritization, competing-demand management, and outcome delivery
- Demonstrated expertise evaluating complex risk and control issues
- Expertise with general internal audit issues
- Experience working in a regulated environment involving federal, state, and local laws and regulations
- Knowledge of common business, financial, operational, and management controls and functional procedures
- Basic working knowledge of Microsoft Office applications, including Word, Excel, and Outlook
- Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or another agreed-upon certification, or willingness to obtain one within two years of employment
HMSA Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about HMSA and has not been reviewed or approved by HMSA.
-
Healthcare Strength — Medical and dental coverage are described as solid, with preventive services and select zero‑cost features adding value in recent plan years. Employer-sponsored plans can have affordable premiums in certain groups and broad access options.
-
Retirement Support — A 401(k) with company match and potential discretionary contributions forms a strong component of total rewards. Retirement support complements the core medical and dental package.
-
Leave & Time Off Breadth — Paid holidays and PTO that increases with tenure provide meaningful time‑off flexibility. Time‑away benefits scale with service length.
HMSA Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
The Hawaii Medical Service Association (HMSA), an independent licensee of the Blue Cross and Blue Shield Association, is a reliable name in Hawaii health care. Established in 1938, we are the largest and most experienced provider of health care coverage in the state. Over half of Hawaii’s population have chosen HMSA for their health care coverage. We are dedicated to providing quality, affordable health plans; employee benefit services; and worksite wellness programs. HMSA also offers a variety of programs, services and support to help improve the health and well-being of our members and community.
