Sets a vision and strategy for Internal Audit, internal controls, and Sarbanes-Oxley (SOX) compliance in alignment with CCA's priorities and business objectives while supporting a robust and broader risk management framework.
Establish and manage an effective Internal Audit program, and utilize findings to make recommendations and provide guidance for building robust internal controls that will:
- Reduce risk for the organization;
- Ensure effective internal controls are in place to mitigate risk;
  Improve effectiveness and efficiency of operations; and
  Establish reliability of financial reporting and controls.
Build and lead Enterprise Risk Management (ERM) Office, Program, activities, and assessments to effectively identify, evaluate, manage, mitigate, monitor, and report on enterprise risks in a manner that helps to inform the annual Internal Audit plan and activities, and that supports and facilitates organizational strategy, business objectives, and effective financial, operational, compliance and governance controls.
Designs, builds, implements, operationalizes, leads, and administers highly effective and efficient enterprise risk assessments (ERAs), enterprise risk registers and matrices, ERM risk appetite statements (e.g., risk target, limit, and tolerance criteria and thresholds, etc.), enterprise risk tracking/monitoring and reporting, enterprise risk scorecards and dashboards, ERM Office senior leadership and Board/Audit Committee materials and reports, ORSA and other regulatory reports/submissions (e.g., Form F, climate change risk surveys, Corporate Governance Annual Disclosures, etc.), and any and all other ERM-related programs, protocols, processes, activities, reports, updates, and responsibilities.
Performs annual enterprise (and audit) risk assessments, and develops annual internal audit plans for the organization.
Builds and leads all cross-organizational NAIC and state-driven Own Risk & Solvency Assessment (ORSA)-related activities, as well as the compilation and submission of the company's annual ORSA Summary Report to relevant regulators.
Develops, builds, and executes a risk-based operational audit plan that clearly defines the objective and scope of each review.
Displays teamwork, integrity and leadership. Works collaboratively and develops strong relationships with business units and operational areas, builds respect for the Internal Audit and ERM functions, and develops the organization's appreciation for a strong internal control environment.
Maintains proactive involvement in business activities related to new products/services, systems development, systems conversions, emerging risks, and process reengineering to ensure that control and ERM considerations are evaluated in the early stages. Coordinates with operational functions to identify and assess both enterprise and internal control risks.
Establishes objectives and scopes for audits, oversees and executes the procedures, discusses observations with CCA management, and prepares/reviews reports.
Ensures audits are executed and reported on within agreed-upon timetables and budgets.
Reviews business processes/procedures and evaluates controls in the health plan and clinical operations of CCA.
Provides executable recommendations that improve operations, controls, and how the business is managed. Facilitates the sharing of relevant information and best practices across the organization.
Interacts with external auditors to coordinate audit response for regulatory and financial audits.
Effectively communicates audit observations, internal control deficiencies, and recommendations, including discussions with executives and forging alignment and consensus. Prepares clear and concise written audit reports, ERM reports, and Audit Committee meeting presentations.
Sources, implements, operationalizes, and uses relevant GRC tools and software to support and accomplish Internal Audit and ERM programs and activities.
Develops, tracks, monitors, and reports on all relevant Internal Audit and ERM metrics, KPIs, KRIs, etc.
Builds and leads high-performance Internal Audit and ERM programs, teams, and staffs to accomplish results through effective recruitment, selection, training, development, performance management, and recognition.
Other duties as assigned.

Commonwealth Care Alliance jobs

SVP, Internal Audit & Enterprise Risk Management - (Remote)