Senior Manager Internal Audit with GeBBS Healthcare Solutions

Job Description

1. Develop process documentation including narratives and process flows and define audit scope
2. Preparation of contractual compliance checklists by going through the Contracts (MSA, NDA, BAA and SOW)
3. Conducting the audit based the checklist for areas such as HR, Finance, Operations, Infosec, Regulatory and legal etc.
4. Prepare process, risk, and control (PRC) matrix and test plan and execute design of control and control effectiveness testing.
5. Highlighting of risks from the contracts at pre-signing stages
6. Reading of laws to draft guidelines and summary notes; and preparing training modules and policies.
7. Driving completion of training modules and awareness
8. Perform other tasks and projects as assigned in support of internal audit team and corporate objectives such as business process improvements, planning and execution of operational audit projects.

Enterprise risk management (ERM):

- Drive independently the risk management program across organization.
- Engage in effective risk discussions with Senior Leadership and facilitate updating of Risk registers.
- Ensures periodically updating of risks and in audit committee presentations.
- Support update & review the risk horizon & policy as per external environment and policy on periodic basis
- Propose Annual compliance program based on risk environment and key updates / changes internal & external environment / business/ industry/ regulations.
- Facilitate Meetings /trainings /awareness sessions / programs on core policies like ERM, ESG, Anti Bribery, Whistle-Blower, HIPAA, Environment Social & Governance policy, etc.

Compliance:

- Periodically update policies and document new procedures / guidelines to update the compliance plan in line with operating changes.
- Ensure compliance to HIPAA & Hi-Tech requirements framework through audits, policy updates, external certifications, internal awareness, etc.
- Work with legal & training teams to drive the compliance programs for awareness and update of important US healthcare regulations as applicable to business.
- Work with VP, Finance, HR & Legal team across all locations to consolidate & present the compliance to regulatory requirements periodically to LT and Audit Committee.
- Update the customer contractual checklists and monitor compliance to same through periodic reviews
- Train the team on compliance programs to deliver standard compliance experience across the locations.

Management reviews, Investigations & Internal Audits

- Develop risk- based audit & compliance plan to monitor the key risks.
- Conduct independent reviews based on above plan to monitor critical risk areas.
- Propose annual Internal audit plan to cover effectively the key risk areas & provide assurance
- Independently investigating and designing remedial measures on matters related to compliance to corporate policies, ethics, client contracts and regulatory matters.

Project management:

- Identify the improvement programs through risk reviews and propose the remedial programs like automation / process transformation, etc.
- Work in Collaboration with cross-functional teams to drive these programs.
- Capability to work & deliver in VUCA (Volatile Uncertain Complex and Ambiguous) environment.

Enhancement programs

- Work with VP R&C on enhancing the strength of control environment & building risk culture within the organization.
- Support VPR&C in driving various compliance projects including ESG, ISO 9K, etc.
- Manage the external auditors, certification agencies & regulatory bodies, if any.
- Work on developing control self-assurance model in long run
- Train the team and support VP R&C in hiring & training plan
- Strive for the betterment of team, organization & stakeholders.

Education, Qualification, Skills, and Work Experience Requirements:

Must Have:

- Bachelors degree & CA
- minimum of 6+ years in managing Internal Audit, Risk Control, Compliance in Service industry
- Proven capability and experience as a team player, self-contributor, and people manager.
- Strong understanding of risks, regulatory requirements, and information security controls.
- Excellent technical documentation skills, with advanced analytical and Excel skills necessary to understand, manage, and assess large data sets.
- Proactive, outcome-focused, and able to multitask effectively.
- Strong written and verbal communication skills, with the ability to interact with all levels of the organization.