---
title: 'Senior IT Audit Manager at OpenLoop Health'
canonical: 'https://feeny.ai/job/senior-it-audit-manager-openloop-health-united-states-a8104yrf3k2g'
type: 'job'
last_seen: '2026-10-15'
---

# Senior IT Audit Manager at OpenLoop Health

- **Company:** OpenLoop Health
- **Location:** United States
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-10-06
- **Last confirmed live:** 2026-10-15
- **Apply:** https://jobs.ashbyhq.com/openloophealth/56d0ce85-166e-4c00-b66c-6f252215173f

## Job description

## About OpenLoop

OpenLoop was co-founded by CEO, Dr. Jon Lensing, and COO, Christian Williams, with the vision to bring care anywhere. Our telehealth support solutions are thoughtfully designed to streamline and simplify go-to-market care delivery for companies offering meaningful virtual support to patients across an expansive array of specialties, in all 50 states.

## About The Role

OpenLoop’s mission is to bring care anywhere by powering telehealth solutions at scale. OpenLoop is looking for a Senior IT Audit Manager to join its Internal Audit function and own the IT controls audit program. Reporting to the Head of Internal Audit, you will assess and validate the design and effectiveness of IT general controls, cybersecurity, data privacy, and emerging technology controls across a cloud-based infrastructure, EHR and EMR systems, and a broad ecosystem of third-party SaaS integrations. The work spans the full IT risk landscape, from SOX ITGC readiness to HIPAA security, AI governance, and data security, in a multi-entity, heavily regulated telehealth environment that is scaling rapidly and preparing for a significant next step in its growth trajectory. This role partners directly with technology and business leadership to design, remediate, and validate controls, ensuring systems and data are secure, reliable, and compliant.

## What You’ll Do

- Develop and maintain a risk-based IT audit plan, conducting periodic IT risk assessments across systems, applications, infrastructure, and emerging technology domains to establish audit priorities
- Lead end-to-end IT audit engagements, from planning and scoping through fieldwork, reporting, and issue closure
- Facilitate kickoff, status update, and closing meetings with IT process owners, system owners, and senior management
- Design and execute IT control testing procedures independently, including ITGC testing across access management, change management, computer operations, and system development life cycle (SDLC)
- Assess and validate cybersecurity controls, including network security, identity and access management, vulnerability management, and incident response
- Evaluate cloud infrastructure controls (including AWS environments) for security, reliability, and compliance with applicable frameworks and regulatory requirements
- Conduct audits of EHR and EMR systems and clinical application controls, and assess data privacy controls for compliance with HIPAA Security Rule, CCPA, and applicable state-level regulations
- Support the governance of AI governance frameworks and controls, including model governance, data quality, bias risk, and compliance with emerging AI regulations
- Prepare and maintain IT audit documentation including process narratives, system flowcharts, risk and control matrices (RCMs), testing workpapers, and audit reports
- Partner with management to design, remediate, and validate IT controls, providing practical and prioritized recommendations to address identified gaps and process weaknesses
- Track open IT audit issues and remediation plans through closure, validating the effectiveness of corrective actions
- Monitor the evolving IT risk, cybersecurity, and regulatory landscape to keep the IT audit plan current and relevant

## Who You Are

Required

- Bachelor's degree in Information Systems, Information Technology, Computer Science, or equivalent technical field and active Certified Information Systems Auditor (CISA) designation
- 7+ years of progressive IT audit experience in business risk advisory consulting or internal audit IT specialization
- Demonstrated hands-on experience with IT general controls (ITGC) testing, including access management, change management, computer operations, and SDLC
- Strong knowledge of IT governance and control frameworks (COBIT, COSO, NIST 800-53, ISO 27001) and ISACA IT audit standards and professional practices
- Demonstrated experience auditing cybersecurity and cloud infrastructure controls, including network security, identity and access management, vulnerability management, incident response, and cloud environments such as AWS, Azure, or GCP
- Familiarity with HIPAA Security Rule requirements, including technical safeguards, risk analysis, and security incident procedures
- Experience auditing application controls across SaaS platforms and regulated healthcare technology environments, including EHR and EMR systems, with hands-on testing of input, processing, and output controls, data integrity, and access controls
- Demonstrated use of AI tools to enhance audit execution, accelerate control testing, and improve efficiency across the audit lifecycle
- Ability to execute IT audit engagements independently, manage multiple concurrent engagements, and deliver on time without close supervision
- Clear, concise written and verbal communication skills; able to translate complex technical findings into practical, actionable recommendations for both IT and non-IT audiences

## Preferred

- Public accounting background (Big 4 or regional firm) with an IT audit or technology risk advisory focus
- Additional certifications such as CRISC, CISSP, CISM, or CIA
- Prior experience supporting SOX ITGC compliance in a pre-IPO, newly public, or high-growth company environment
- Experience auditing or assessing AI governance frameworks, including model governance, data quality controls, and compliance with emerging AI regulations
- Familiarity with data privacy frameworks beyond HIPAA, including CCPA or other applicable state-level regulations
- Knowledge of DevOps practices and SDLC security controls relevant to software development and deployment pipelines
- Proficiency with GRC platforms (e.g., AuditBoard, Workiva, or Vanta) for IT audit management and evidence collection
- Experience in digital health, telehealth, or multi-state healthcare services environments, including familiarity with pharmacy management systems, dispensing technology, or regulated pharmaceutical IT environments

## What We Offer

- Competitive compensation
- Medical, Dental & Vision
- Flexible Spending / Health Savings Accounts
- Generous PTO and hybrid-work flexibility
- 401(k) with Company Match
- Life Insurance, Pet Insurance, and more

Our Company We have a relatively flat organizational structure here at OpenLoop. Everyone is encouraged to bring ideas to the table and make things happen. This fits in well with our core values of Autonomy, Competence and Belonging, as we want everyone to feel empowered and supported to do their best work. Sound like a good fit? We’d love to meet you.

## About OpenLoop Health

## Company Overview
- **One-liner**: OpenLoop Health provides end-to-end, white-label telehealth infrastructure that enables healthcare and non-healthcare organizations to launch and scale digital health services.
- **Entity Type**: Private
- **Headquarters**: Des Moines, Iowa, United States
- **Founded**: 2020
- **Founders**: Dr. Jon Lensing (CEO & Co-Founder) and Christian Williams (COO & Co-Founder)

## Core Business
- **Primary industry**: Digital Health / Telehealth Infrastructure
- **Target customers**: B2B — Digital health companies, hospitals & health systems, health plans, employers, retail & pharmacy, and non-healthcare entities looking to add virtual care offerings.
- **Mission**: To bring healing anywhere, anytime to anyone across the nation.
- **Vision**: A world where healthcare is accessible, efficient, and tailored to individual needs—delivered wherever the patient may be.

## Products & Services
OpenLoop offers a full-stack, white-labeled suite of services:
- **Technology Platform**: HIPAA-compliant EHR with flexible API integrations, scheduling, booking, payments, and support for both synchronous and asynchronous care. AI-powered operations to streamline clinical workflows.
- **Provider Staffing & Credentialing**: Access to a nationwide, NCQA-credentialed network of clinicians across 30+ specialties and 15+ languages, with full 50-state coverage. Includes licensing, credentialing, and onboarding management.
- **Payer Coverage & Revenue Cycle Management (RCM)**: A network of 600+ payer contracts including Medicare and Medicaid, paired with RCM services to streamline reimbursement.
- **Regulatory, Legal & Compliance Support**: End-to-end legal, financial, and compliance setup, including ongoing regulatory maintenance and expert support.
- **Clinical Pathways**: Over 100 repeatable, scalable, and vetted clinical protocols (e.g., medical weight loss, HRT, urgent care, mental health).
- **Diagnostic Imaging & Labs**: A platform for diagnostic image ordering, referrals, and results, plus access to a network of pharmacy and lab partners for competitive medication costs.

## Market Standing
- **Valuation**: Not publicly available (private company)
- **Key Metric**: Trusted by 3M+ patients annually; serves patients in all 50 states; processes thousands of patient visits per month.
- **Notable Investors/Partners**: Managing board includes Jack Berkowitz, Freddie Martignetti, and Ryan Morley. Client partners span digital health companies, hospitals, health plans, and employers.
- **Growth Signals**: OpenLoop saw **700% YoY growth in 2024**, appointed key executive team members (including a Chief Medical Officer, CFO, CCO, and CPO), and integrated AI technology into its operations. LinkedIn followers grew 124.8% year-over-year.

## Competitive Advantages
- **Full-stack, end-to-end solution**: OpenLoop is the only white-label provider that covers clinical, administrative, regulatory, and technological needs under one roof — clients bring their brand and patients, OpenLoop handles everything else.
- **Nationwide scale**: 50-state PC network, 600+ payer contracts (including Medicare/Medicaid), and a network of thousands of clinicians.
- **NCQA-accredited credentialing**: A streamlined, accredited credentialing process that reduces administrative burden for clients.
- **Proven, repeatable clinical pathways**: Over 100 pre-vetted, scalable protocols allow clients to launch new programs quickly and safely.
- **Deep Midwest roots**: Headquarters in Des Moines, Iowa, with a commitment to building local talent and positioning Iowa as a hub for healthcare transformation.

## Strategic Focus
- **AI integration**: Embedding AI to streamline clinical workflows, enhance patient support, and guide optimized care pathways.
- **Expansion of clinical pathways**: Continuously developing new, ready-to-use care programs (e.g., medical weight loss, HRT, anti-aging, mental health).
- **Scaling partnerships**: Serving a growing range of organizations from digital health startups to large employers and health systems.
- **National reach**: Deepening 50-state coverage and payer relationships to enable truly national virtual care delivery.

## Why Work Here
- **Culture & Mission**: Driven by a mission to “bring healing anywhere,” with a strong focus on expanding healthcare access. The team is described as passionate, energetic, and focused on driving long-lasting results.
- **Work Environment**: Hybrid work environment with a pet-friendly office in Des Moines, Iowa. The company is deeply committed to its Iowa roots and building a skilled local workforce.
- **Benefits**: Competitive salary, generous PTO, medical/dental/vision insurance, and a 401k program.
- **Growth & Impact**: Employees report feeling empowered to make a lasting impact on virtual care delivery. The company saw explosive 700% YoY growth in 2024, indicating a dynamic and scaling environment.
- **Leadership**: Experienced executive team including a CEO/co-founder with a personal connection to healthcare access challenges, a COO/co-founder, a CMO, CFO, CCO, CPO, and General Counsel.
- **Caution**: The careers page explicitly warns of fraudulent job postings and fake recruiter outreach. Candidates should verify any role or offer by emailing fraud@openloophealth.com.

## Sources
1. [openloophealth.com](https://openloophealth.com/)
2. [openloophealth.com/careers](https://openloophealth.com/careers)
3. [openloophealth.com/team](https://openloophealth.com/team)
4. [openloophealth.com/blog/who-is-openloop-health](https://openloophealth.com/blog/who-is-openloop-health)
5. [linkedin.com/company/openloophealth](https://www.linkedin.com/company/openloophealth)

## Other roles at OpenLoop Health

- [Sr. Talent Acquisition Partner](https://feeny.ai/job/sr-talent-acquisition-partner-openloop-health-united-states-3p40g477cr2y) — United States
- [Clinical Informaticist](https://feeny.ai/job/clinical-informaticist-openloop-health-united-states-2ms12nps9nwf) — United States
- [IT Helpdesk Technician II](https://feeny.ai/job/it-helpdesk-technician-ii-openloop-health-dallas-swzk15efb8zy) — Dallas, TX / HQ
- [Sr. Compensation Partner](https://feeny.ai/job/sr-compensation-partner-openloop-health-united-states-nm9nbfg1dam8) — United States
- [Director of Business Recruiting](https://feeny.ai/job/director-of-business-recruiting-openloop-health-united-states-h4z47w3wmrwj) — United States
- [Senior Software Engineer](https://feeny.ai/job/senior-software-engineer-openloop-health-toronto-bmsfbmeq12gb) — Toronto, Canada
- [Staff Security Engineer](https://feeny.ai/job/staff-security-engineer-openloop-health-united-states-khfbh8at7ab3) — United States
- [Sr. People Project Manager](https://feeny.ai/job/sr-people-project-manager-openloop-health-united-states-a8r50nb4c3vk) — United States
- [Supply Chain Quality Manager](https://feeny.ai/job/supply-chain-quality-manager-openloop-health-dallas-xqax8xwtezht) — Dallas, TX / HQ
- [Sr. Supply Chain Specialist](https://feeny.ai/job/sr-supply-chain-specialist-openloop-health-dallas-00zksxwyc3wx) — Dallas, TX / HQ