Internal Audit Manager - RCM/Healthcare

Role Overview:

We are seeking an experienced Internal Audit Manager with 5 - 8 years of audit, risk, or compliance experience, preferably within the RCM or healthcare BPO industry. Reporting to the Head of Internal Audit, this role will deliver internal audit activities across the US, India, and Philippines operations, ensuring consistency in audit methodology, risk assessment, compliance standards, and internal controls.

Key Responsibilities:

1. Multi-Location Audit Planning & Strategy:

• Develop and execute annual audit plans covering US, India, and Philippines functions and delivery centers.
• Perform enterprise-level risk assessments and identify key control gaps across geographies.
• Ensure audit planning aligns with global policies, client requirements, and compliance frameworks.

2. Process, Operational & Compliance Audits:

• Conduct detailed audits of RCM processes including Patient Access, Charge Capture, Medical Coding, Billing, AR Follow-up, Payment Posting, and Denials Management.
• Validate compliance with internal SOPs, client SLAs, contractual commitments, and regulatory requirements (HIPAA, PHI handling, data privacy).
• Review control design and test operating effectiveness across multiple sites and delivery models.
• Identify revenue leakage, operational inefficiencies, and compliance risks.
• Audit financial-reporting controls, IT general controls, and entity-level / governance / ERM controls across all legal entities, and independently review the D365 finance transformation.

3. Compliance with Local Regulations (India, Philippines, US):

• Ensure internal audit activities comply with local statutory and regulatory requirements in each operating region.
• Monitor and interpret applicable laws, compliance standards, and audit-related regulations such as India Companies Act, Philippines DOLE requirements, and US HIPAA/HITECH/CMS guidelines.
• Partner with regional compliance teams to ensure audit frameworks incorporate local regulatory requirements.
• Independently audit the design and operating effectiveness of the compliance and certification programs (SOC, ISO, HIPAA).

4. Stakeholder Management Across Geographies:

• Work closely with Operations, Finance, HR, IT, and Compliance teams in all three regions.
• Coordinate with US-based leadership and client teams for audit reviews, risk updates, and process walkthroughs.
• Support external audits (SOC, ISO, client audits) by aligning all regions on standardized audit procedures.

5. Continuous Improvement:

• Identify control weaknesses and recommend solutions that improve accuracy, compliance, and efficiency.
• Suggest automation opportunities and process standardization across US, India, and Philippines teams.
• Assess and advise on the governance and control framework, with measurable control KPIs.

Required Qualifications & Skills:

Education:

• CA / CMA / MBA (Finance) preferred
• CIA and/or CISA required or strongly preferred; healthcare compliance certifications advantageous

Experience:

• 5 - 8 years of experience in internal audit, operational audit, or enterprise risk functions
• Strong exposure to RCM / healthcare BPO / shared services is preferred
• Experience conducting audits across multiple locations or international teams is a strong plus
• Knowledge of HIPAA, data privacy, and healthcare compliance frameworks is desirable

Technical & Domain Skills:

• Understanding of RCM processes and associated risk points
• Familiarity with audit planning, sampling techniques, documentation standards, and report writing
• Experience with audit tools, workflow platforms, and advanced Excel/data analysis
• Ability to work with cross-cultural teams and manage remote audits

Soft Skills:

• Strong communication and presentation skills
• High attention to detail, analytical thinking, and problem-solving ability
• Ability to manage competing priorities across different time zones
• Strong ethical standards and a collaborative mindset