Internal Audit Director - Cybersecurity/Information Technology - Hybrid

Technology Audit Team Member

Join our Technology Audit team and help strengthen the organization's cybersecurity and IT control environment. In this role, you will lead high-impact audit engagements, collaborate with senior technology and business leaders, and guide the evaluation of emerging risks across cloud, cybersecurity, data, and modern technology platforms. If you're a strategic thinker who thrives in a dynamic environment and is driven to elevate control effectiveness and operational resilience, we invite you to bring your expertise to our ambitious, people-centered team.

Responsibilities:

• Actively networks and manages critical relationships with senior technology and business leaderships and their respective teams.
• Develop and lead a risk-based audit plan that reflects current business strategy, technology risks, and process maturity.
• Oversee execution of IT and cybersecurity audits to assess whether controls are well-designed and operating effectively.
• Collaborate with business, cybersecurity, and technology leaders to evaluate whether processes and internal controls effectively manage operational, technical, and regulatory risks.
• Assess emerging technologiesincluding AI, cloud security, automation, and advanced analyticsto determine their impact on the audit plan and the ability to embed across the audit function.
• Prepare and deliver clear, compelling presentations of audit results, themes, and recommendations to senior leadership through formal written deliverables and oral presentations.
• Monitor audit issue remediation and validate corrective actions to strengthen organizational control posture.
• Mentor and develop team members by providing coaching, guidance, and subject-matter insight.
• Represent Internal Audit in governance forums and contribute to enterprise-wide risk discussions.
• Lead cross-functional efforts to align IT and cybersecurity controls with business processes and drive timely resolution of findings.

Qualifications:

Required:

• BS in Computer Information Systems, Information Technology, or related field.
• 10+ years of experience in internal or external IT auditing, including experience leading teams.
• Broad knowledge of IT, cybersecurity, cloud technologies, and modern IT platforms.
• Strong analytical skills with experience using Microsoft Office and data analytics tools (e.g., ACL, Tableau, Power BI).
• Experience presenting to senior leadership with strong communication and relationship-building skills.
• Understanding of internal controls, COSO, COBIT, and IT/cybersecurity frameworks such as NIST and ISO 27001.

Preferred:

• CISA, CISM, CIA, or other relevant certifications.
• Experience with emerging technologies including AI/ML, automation/RPA, DevSecOps, and modern data platforms.
• Knowledge of IT-dependent controls, automated business process controls, and SDLC-related control assessments.
• Healthcare industry experience.

If you will be working at home occasionally or permanently, the internet connection must be obtained through a cable broadband or fiber optic internet service provider with speeds of at least 10Mbps download/5Mbps upload.

About The Cigna Group: Doing something meaningful starts with a simple decision, a commitment to changing lives. At The Cigna Group, we're dedicated to improving the health and vitality of those we serve. Through our divisions Cigna Healthcare and Evernorth Health Services, we are committed to enhancing the lives of our clients, customers, and patients. Join us in driving growth and improving lives.

Qualified applicants will be considered without regard to race, color, age, disability, sex, childbirth (including pregnancy) or related medical conditions including but not limited to lactation, sexual orientation, gender identity or expression, veteran or military status, religion, national origin, ancestry, marital or familial status, genetic information, status with regard to public assistance, citizenship status or any other characteristic protected by applicable equal employment opportunity laws.

The Cigna Group has a tobacco-free policy and reserves the right not to hire tobacco/nicotine users in states where that is legally permissible. Candidates in such states who use tobacco/nicotine will not be considered for employment unless they enter a qualifying smoking cessation program prior to the start of their employment. These states include: Alabama, Alaska, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Iowa, Kansas, Maryland, Massachusetts, Michigan, Nebraska, Ohio, Pennsylvania, Texas, Utah, Vermont, and Washington State.

Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state, and local ordinances.