Job Description
Assits in the development, maintenance, and ongoing improvement of the IT risk management, IT controls framework, training, and associated processes, including documentation. Assists the audit process within IT and the process for tracking open audit findings, test exceptions, and systemic issues. Supports internal and/or external audit as needed during audit engagements.What You’ll Do
Assists with the identification and assessment of risks to the organization, with an emphasis on IT, Security, and/or key initiative risks.
Provides support to business owners and project teams to increase awareness and understanding of risks and controls.
Assists in the development, assessment and monitoring of mitigation plans for IT-related risks, to ensure they are managed to an acceptable level.
Identifies, evaluates and escalates issues that conflict with BCBSNC’s risk tolerance.
Provides assistance and/or consulting on projects and other initiatives to ensure risks are considered and addressed appropriately.
Identifies and evaluates risks with business areas based on an assessment of the control environment. Works with business areas to enhance controls or develop action plans to address risks.
Works with business areas and process owners to ensure that risk related documentation is clear and accurate.
Develops processes and procedures to ensure documentation is properly maintained in accordance with company policies, industry standards and regulatory requirements.
Aids in developing and implementing plans and guidance (which may include formal and informal training) to increase awareness about IT and Security risk management.
What You Bring
Bachelor's degree or advanced degree (where required)
3+ years of experience in related field
In lieu of degree, 5+ years of experience in related field
Bonus Points
Technical fluency; prior IT Audit experience is highly beneficial
Control design and documentation, including process mapping and governance
CISSP, CISM, CISA or CRISC certification preferred
What You’ll Get
The opportunity to work at the cutting edge of health care delivery with a team that’s deeply invested in the community
Work-life balance, flexibility, and the autonomy to do great work
Medical, dental, and vision coverage along with numerous health and wellness programs
Parental leave and support plus adoption and surrogacy assistance
Career development programs and tuition reimbursement for continued education
401k match including an annual company contribution
Learn more
Where You’ll Work
Our Hybrid Flex approach is built on presence with a purpose – giving you flexibility to work remotely with intentional in-person connection – that supports a workplace that’s flexible, connected, and future focused.
In a Hybrid-Flex role, you’ll work in the office at least two days a week for collaboration and connection. In a Remote Flex role, you’ll work virtually, with a few in-office visits each year for meaningful moments that matter.
Whether your role is Hybrid Flex or Remote Flex depends on the nature of the work and distance from our Durham headquarters. We welcome candidates from outside the local area and in any states listed on this job posting. Onsite expectations will be discussed during the interview process.
Salary Range
At Blue Cross NC, we take great pride in a fair and equitable compensation package that reflects market-price and our starting salaries are typically planned near the middle of the range listed. Compensation decisions are driven by factors including experience and training, specialized skill sets, licensure and certifications and other business and organizational needs. Our base salary is part of a robust Total Rewards package that includes an Annual Incentive Bonus*, 401(k) with employer match, Paid Time Off (PTO), and competitive health benefits and wellness programs.
*Based on annual corporate goal achievement and individual performance.
Skills
_____________________________________________________________________
JOB ALERT FRAUD: We have become aware of scams from individuals, organizations, and internet sites claiming to represent Blue Cross and Blue Shield of North Carolina in recruitment activities in return for disclosing financial information. Our hiring process does not include text-based conversations or interviews and never requires payment or fees from job applicants. All our career opportunities are published on https://bcbsnc.wd5.myworkdayjobs.com/en-US/BCBSNC. If you have already provided your personal information that you suspect is fraudulent activity, please report it to your local authorities. Any fraudulent activity should be reported to: [email protected].
Skills Required
- Bachelor's degree or advanced degree
- 3+ years of experience in related field
- In lieu of degree, 5+ years of related experience
- Technical fluency/prior IT audit experience
- Control design and documentation, including process mapping and governance
- CISSP, CISM, CISA or CRISC certification
What We Do
It's an exciting time to work at Blue Cross and Blue Shield of North Carolina. Health care is changing, and we're leading the way. We offer more than health insurance our customers can count on. We’re committed to better health and better health care − in our communities and beyond. Our employees bring energy and creativity to the workplace, and it shows in our innovative approach to improving the health and well-being of North Carolinians. Our company is a not-for-profit with headquarters in Durham and major operations in Winston-Salem and Fayetteville. In all we employ more than 4,500 North Carolinians and serve more than 3.7 million customers. Help us lead the charge for better health care by joining our award-winning team. Discover tremendous opportunities with us to do challenging and rewarding work. Opportunities that can lead you to a fulfilling career, work that can help others lead healthier, happier lives. Blue Cross NC is an independent licensee of the Blue Cross and Blue Shield Association.






