Astrana Health

Technology-enabled platform delivering value-based care

Senior Internal Auditor

Internal Audit & ControlsUpdated on Nov 13

Full-timeAlhambra, CA, USA$110k - $125k /yrHybrid

About the Job

Requirements

A bachelor's degree in auditing, business, or a related field is required.
At least four years of relevant experience in internal audit, public accounting, SOX, compliance, or healthcare operations is required.
Working knowledge of Internal Audit professional standards, including The IIA; recognized internal control frameworks such as COSO; and risk assessment practices is required.
Working knowledge of information technology and cybersecurity risks and controls is required.
Interpersonal, verbal, and written communication skills sufficient to discuss audit work and support audit results confidently and clearly with management are required.
Ability to grasp complex processes, think critically to assess risks, and glean relevant insights is required.
Proficiency in data analytics and willingness to apply technology and automation to enhance audit work and insights are required.

Responsibilities

Assist Internal Audit leadership in developing and executing annual enterprise-wide, risk-based audit plans.
Identify relevant and emerging risks, control objectives, and existing controls using recognized control frameworks and leading-practice resources; apply accepted risk assessment techniques to propose appropriate audit scope and objectives.
Perform and lead audits from planning through reporting, including risk assessment, process and control walkthroughs, evaluation of control design, development of test plans, independent testing procedures and analyses, and organized documentation.
Interview stakeholders, gather and evaluate relevant information and support, and document key details to support evidence-based conclusions.
Analyze the significance of test results; assess the design and operating effectiveness of controls; and identify and document audit issues, root causes, and risk implications.
Use data analytics, technology tools, authorized emerging AI-enabled capabilities, and automation to maximize efficiency and gain insights.
Manage timelines and deadlines to complete audit activities effectively and efficiently.
Communicate audit results through clear, concise written reports and oral presentations.
Provide practical, cost-conscious, value-added recommendations for strengthening the control environment and implementing leading practices.
Track management action and mitigation plans from completed audits through regular follow-up and validation.
Lead discussions and meetings with stakeholders throughout the audit lifecycle.
Build and maintain cross-functional relationships with stakeholders across the organization.
Participate in consultative or advisory special projects or ad hoc engagements, without assuming management responsibilities; these may support system implementations, new or updated policies or regulations, readiness assessments, process changes, or reviews of emerging issues.
Support other Internal Audit department initiatives or activities as assigned to maintain the function's quality, responsiveness, effectiveness, and efficiency.
Stay current on evolving healthcare risks, key regulatory requirements, and the organization's business.
Stay current on auditing best practices, including updates to professional standards, and contribute to continuous improvement of audit methodologies, tools, and technology.
Share knowledge, insights, and leading practices within the Internal Audit team.

Desired Qualifications

Experience in public accounting, with Big 4 experience noted as a plus; internal audit, SOX, and/or healthcare industry experience is preferred.
A professional certification such as CIA, CPA, CISA, CHIAP, or CFE, or actively pursuing one, is preferred.
Familiarity with healthcare operations and industry regulatory requirements and standards, such as HIPAA, CMS, and quality ratings, is preferred.
Experience with audit management software, data analytics tools, GRC tools, and ERP systems is preferred.
Experience working in fast-paced organizations with rapid growth and frequent change is preferred.

At Astrana Health, the Internal Audit function plays a critical role in supporting our mission by helping to strengthen governance, risk management, and internal controls across the organization. Internal Audit offers broad insights into the organization’s operations and the chance to build meaningful relationships across departments. The Internal Audit team at Astrana is for those who thrive in a fast-paced, rapidly transforming and expanding organization.

The Senior Internal Auditor works alongside and supports Internal Audit leadership in planning and executing an enterprise-wide, risk-based audit plan that encompasses operational, IT, financial, and compliance activities. These audits provide the organization with valuable insights into key processes, promote consistency with organizational expectations, regulatory standards, and industry-leading practices, and foster a culture of continuous improvement. The Senior Internal Auditor consistently upholds all organizational and professional and ethical standards, performs internal audit work in conformance with relevant standards and principles of the internal audit profession, and can work independently under general supervision with latitude for initiative and independent, sound judgment.

This position requires technical knowledge and a collaborative mindset, both within the Internal Audit team and across the organization. The role is ideal for someone who is process-oriented, enjoys working cross-functionally, and engages comfortably across all levels of the organization.

Our Values:

Put Patients First
Empower Entrepreneurial Provider and Care Teams
Operate with Integrity & Excellence
Be Innovative
Work As One Team

Audit Planning & Risk Assessment

Assist Internal Audit leadership in developing and executing on the annual enterprise-wide, risk-based audit plans.
Identify relevant and emerging risks, control objectives, and existing controls using recognized control frameworks (e.g., COSO) and other leading-practice resources; apply accepted risk assessment techniques to propose appropriate audit scope and objectives.

Audit Execution

Perform and lead audits from planning through reporting, including risk assessment, process and control walkthroughs, evaluation of control design, development of test plans, independent testing procedures and analyses, and organized documentation.
Interview stakeholders, gather and evaluate relevant information and support, and document key details to support sound, evidence-based conclusions.
Analyze the significance of test results; assess the design and operating effectiveness of controls; and identify and document audit issues, root causes, and risk implications.
Leverage data analytics, technology tools (including authorized emerging AI-enabled capabilities), and automation to maximize efficiency while obtaining deep insights.
Manage timelines and deadlines for effective and efficient completion of audit activities.

Recommendations, Reporting and Follow-Up

Communicate audit results through clear, concise written reports and oral presentations.
Provide practical, cost-conscious, value-added recommendations for strengthening the control environment and implementing leading practices.
Track the progress of management action and mitigation plans from completed audits through regular follow-up and validation.

Stakeholder Engagement

Lead effective discussions and meetings with stakeholders throughout the audit lifecycle.
Build and maintain strong cross-functional relationships with key stakeholders across the organization.

Other Projects and Advisory Reviews

Without assuming management responsibilities, participate in special projects or ad hoc engagements that are consultative or advisory in nature. Such projects may support system implementations, new or updated policies or regulations, readiness assessments, process changes, or other reviews of emerging issues.
Support other Internal Audit department initiatives or activities as assigned, to help maintain the high quality, responsiveness, effectiveness, and efficiency of the function.

Continuous Improvement & Professional Development

Stay current on evolving healthcare risks, key regulatory requirements, and the organization’s business.
Stay current on auditing best practices, including updates to professional standards, and contribute to continuous improvement of audit methodologies, tools, and technology within the Internal Audit function.
Share knowledge, insights, and leading practices within the Internal Audit team to strengthen the department’s collective capabilities and contributions.

Required

Bachelor’s degree in auditing, business, or a related field.
4+ years of relevant experience (e.g., internal audit, public accounting, SOX, compliance, or healthcare operations).
Working knowledge of Internal Audit professional standards (i.e., The IIA), recognized internal control frameworks (e.g., COSO), and risk assessment practices.
Working knowledge of information technology and cybersecurity risks and controls.
Excellent interpersonal, verbal, and written communication skills, including the ability to discuss the audit work and support audit results confidently and clearly with management.
Ability to grasp complex processes, think critically to assess risks and glean relevant insights.
Proficiency in data analytic skills and a willingness to apply technology and automation to enhance audit work and insights.

Preferred

Experience in public accounting (Big 4 is a plus), internal audit, SOX, and/or the healthcare industry.
Professional certification (e.g., CIA, CPA, CISA, CHIAP, CFE, or equivalent), or actively pursuing one.
Familiarity with healthcare operations and the industry’s regulatory requirements and standards (e.g., HIPAA, CMS, quality ratings).
Experience with audit management software, data analytics tools, GRC tools, and ERP systems.
Experience working in fast-paced organizations with rapid growth and frequent change.

About the Company

Astrana Health

Technology-enabled platform delivering value-based care

Astrana Health runs a physician-focused, technology-enabled care platform that supports providers in delivering proactive, preventive, value-based care. Its end-to-end system coordinates care across affiliated networks, a management services organization, and primary, specialty, and ancillary clinics to help more than 20,000 providers and over 1.6 million Americans in value-based arrangements. How it works: the proprietary platform connects clinicians, patients, and care settings, enabling proactive care planning, care coordination, and efficient delivery of services in primary and specialty care. The company differentiates itself by combining a large provider network, an MSO, and clinics with a single tech platform to scale value-based care and improve patient experiences and outcomes rather than relying on fragmented, fee-for-service models. Its goal is to create a healthcare system that delivers better care, better experiences, and better outcomes for all.

Company size: 501-1,000
Company stage: Not listed
Total funding: Not listed
Headquarters: Alhambra, CA
Founded: Not listed

Recently Posted Jobs

Explore more opportunities at Astrana Health

See more jobs