IT Audit Analyst

Your Future Evolves Here

Evolent Health has a bold mission to change the health of the nation by changing the way health care is delivered. Our pursuit of this mission is the driving force that brings us to work each day. We believe in embracing new ideas, challenging ourselves and failing forward. We respect and celebrate individual talents and team wins. We have fun while working hard and Evolenteers often make a difference working in everything from scrubs to jeans.

Are we growing? Absolutely and Globally. In 2021 we grew our teams by almost 50% and continue to grow even more in 2022. Are we recognized as a company you are supported by for your career and growth, and a great place to work? Definitely. Evolent Health International (Pune, India) has been certified as “Great Places to Work” in 2021. In 2020 and 2021 Evolent in the U.S. was both named Best Company for Women to Advance list by Parity.org and earned a perfect score on the Human Rights Campaign (HRC) Foundation’s Corporate Equality Index (CEI). This index is the nation's foremost benchmarking survey and report measuring corporate policies and practices related to LGBTQ+ workplace equality.

We recognize employees that live our values, give back to our communities each year, and are champions for bringing our whole selves to work each day. If you’re looking for a place where your work can be personally and professionally rewarding, don’t just join a company with a mission. Join a mission with a company behind it.

What You’ll Be Doing:

Job Title: IT Audit Analyst

__________________________________________________

We are seeking a highly skilled IT Audit Analyst with a strong technical background and excellent communication skills. This role involves coordinating Hi-Trust, SOC 2, and SOX audits, ensuring regulatory compliance, and maintaining a robust audit process across hybrid (cloud and on-prem) IT infrastructure environments.

• Coordinate and manage Hi-Trust, SOC 2, and SOX audits for Infrastructure teams.
• Develop and implement audit plans and required documentation.
• Work with IT teams to create and maintain audit documentation.
• Develop automated solutions for documenting known requirements.
• Test IT audit controls periodically to ensure compliance.
• Serve as a subject matter expert for InfoSec and IT leadership regarding audit controls.
• Maintain and update audit documentation/SOP repositories.
• Provide guidance to stakeholders to mitigate IT risk and enhance internal controls.
• Maintain a centralized repository of technical configurations, architecture diagrams, and infrastructure inventories across cloud and on-prem environments.
• Ensure secure storage of audit artifacts including logs, screenshots, and system configurations.
• Track compliance posture and configuration drift across hybrid IT environments.
• Collaborate with infrastructure teams to document control implementations including IAM, firewalls, and patching.

• 3+ years of experience with IT audits.
• 3+ years of experience with SOX or SOC audit control management.
• Strong technical background in system administration, IT infrastructure, or related fields.
• Good understanding of user access management (IAM) and compliance, including provisioning, de-provisioning, access reviews, and adherence to audit and security policies.
• Strong understanding of IT infrastructure change management processes, including change approvals, implementation, and audit compliance.
• Hands-on experience with cloud platforms (Azure, AWS).
• Knowledge of on-prem infrastructure including servers, virtualization, storage, databases and networks.
• Experience with documentation and configuration repositories (ServiceNow, Confluence, SharePoint, Git).
• Familiarity with SIEM and monitoring tools such as SolarWinds or Datadog.
• Familiarity with patch management and deployment tools such as ManageEngine, SCCM, WSUS, or similar solutions for maintaining system compliance and audit readiness.
• Strong understanding of Hi-Trust, SOC 2, and SOX audit processes.
• Excellent written and verbal communication skills.
• Strong analytical and problem-solving skills.
• Ability to work collaboratively with cross-functional teams.
• Awareness of vulnerability management and compliance requirements.

• Experience with hybrid environments combining cloud and on-prem systems.
• Familiarity with Infrastructure as Code tools such as Terraform.
• Knowledge of cloud compliance tools such as Azure Policy or AWS Config.
• Experience with data visualization tools for audit reporting.
• Ability to design audit programs and test plans for internal controls.
• Understanding data classification and secure storage practices for audit evidence.

To ensure a secure hiring process we have implemented several identity verification steps, including submission of a government issued photo ID. We conduct identity verification during interviews, and final interviews may require onsite attendance. All candidates must complete a comprehensive background check, in-person I-9 verification, and may be subject to drug screening prior to employment. The use of artificial intelligence tools during interviews is prohibited and monitored. Misrepresentation will result in immediate disqualification from consideration.

Mandatory Requirements:

Employees must have a high-speed broadband internet connection with a minimum speed of 50 Mbps and the ability to set up a wired connection to their home network to ensure effective remote work. These requirements may be updated as needed by the business.

​

Evolent Health is an equal opportunity employer and considers all qualified applicants equally without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, or disability status.