Position Overview The Internal Controls & Audit Analyst is an independent control resource who maps, documents, and independently tests Client's operational processes and vendor performance. The role exists to close the accountability gaps identified in Client's operational review: undocumented processes, work products released without a peer reviewer of record, institutional knowledge concentrated in single individuals, and vendor commitments tracked without dated verification. This is a control and assurance role, not an operational-execution role.

The analyst does not perform, own, or unblock the operational work they audit; they independently verify it, surface findings with owners and dates, and track remediation to closure.

Because

Client's BPO partners also prepare certain work products under audit (for example, plan documents, Schedules of Perks, and consolidated KPIs), the analyst reports functionally into Client's operations governance rather than into the delivery teams whose output they test, and is segregated from any work product they helped prepare.

Primary Responsibilities 1.

Process

Mapping & Documentation ● Document current-state and future-state workflows for critical operational processes that today rely on a single, unreviewed owner.

● Establish a peer-review-of-record for each critical process; identify and help close single-point-of-failure risks where knowledge or data sits with one individual.

● Confirm process artifacts and source data reside in approved systems (SharePoint), not on individual or non-client devices; flag any off-system custody for remediation.

● Maintain a living process register: process, how it is handled today, how it will be handled going forward, owner, reviewer, and date.

- Process & Controls Audit ● Run benefit and plan-document audits against source of record and document configuration discrepancies for correction.

● Verify accuracy and completeness of Summary of Benefits and Coverage (SBC) and plan documents for compliance and clarity, including alignment with RIA state-mandate requirements as they arrive.

● Establish and run a recurring claims-audit cadence (e.g., percentage-of-claims sampling, census/variance checks) with documented methodology; support the VIE file audit regime as a defined.

● Support FWA processes

● Design and test operational controls; document control gaps, root cause, and recommended corrective action. 3.

Vendor





Audit & Performance Assurance ● Independently verify vendor performance against contractual SLAs and KPIs across several stakeholders, and other operational vendors.

● Build and maintain vendor scorecards (service-level metrics, claims timeliness, error rates) to support performance conversations with leadership and partners.

● Perform contract-compliance checks (effective dates, peer reviewer of record, deliverable commitments) and confirm executed vendor commitments were implemented as agreed.

- Findings, Reporting & Remediation ● Produce dated audit findings and a findings log; every finding carries an owner, a required outcome, an action, and a due date, and is tracked to closure rather than carried across reporting cycles.

● Provide inputs to the MOR and other operating meetings so audit items close with named owners, actions, and dates on record.

● Report control status, KPIs, learnings, and open remediation on a regular, dated cadence to operations leadership.

- Independence, Compliance & Data Governance ● Maintain independence from the operational work and work products under audit; escalate any assignment that would create a self-review conflict.

● Apply auditing methodology and compliance checks appropriate to US healthcare operations; coordinate with, but remain distinct from, any FWA function.

● Support data-governance objectives: single source of truth, approved-system custody, and reduction of institutional-knowledge concentration.

Scope

Boundary — What This Role Is Not To preserve independence and to keep this position distinct from the separate operational-support hire, the following are explicitly out of scope for this role:

● Operational execution — performing group implementation, client document intake, or benefit configuration on live work the role also audits.

● Backlog clearing — chasing or resolving outstanding unpaid claims, or acting as an operational pair of hands for the claims or delivery teams.

● Finance operations — owning billing-issue resolution or documentation fulfillment (the role may audit these, not run them).

Qualifications 1.

Experience ● Minimum five (5) years in internal audit, internal control,



or process/compliance assurance within US healthcare, managed care, health insurance, or a regulated service environment. Audit or internal-control experience is required, not preferred.

● Demonstrated experience documenting processes and testing controls, and driving findings to closure with named owners and dates.

● Prior exposure to US healthcare operations — claims, plan documents/SBCs, and vendor/TPA processes — is essential. 2.Knowledge & Skills ● Auditing methodology, controls design and testing, root-cause analysis, and remediation tracking.

● Strong understanding of US healthcare claims, plan document and SBC structures, and benefit configuration.

● Familiarity with claims/check registers and reconciliation processes.

● Process-mapping and documentation skills (current-state / future-state).

● Strong coordination and communication to work across internal teams and vendors while maintaining independence; detail-oriented with a focus on accuracy and evidence. 3.Preferred Attributes ● Prior experience building or operating a Fraud, Waste & Abuse (FWA) or compliance-audit function.

● Experience with claims-administration platforms, inventory/aging workflows, or PBM operations.

● Experience within a BPO delivery model supporting a US healthcare client.

● Ability to manage multiple concurrent, dated workstreams and follow open items to closure.

● Prior exposure to US Insurance and healthcare operations.

Success

Profile (First 6 Months) ● Critical operational processes are documented in current-state and future-state form, each with a peer reviewer of record and a named owner.

● A recurring audit calendar is live (benefit/plan-document, claims sampling, VIE file audit), producing dated findings tracked to closure.

● Vendor scorecards are in place, with SLA/KPI performance independently verified rather than self-reported.

● SBC and plan-document audits reconcile cleanly against Equis and CAS, with discrepancies logged and corrected.

● Single-point-of-failure and off-system data-custody risks are measurably reduced; source records reside in approved systems.

● Findings are visibly tracked with owners and dates; none persist unresolved across reporting cycles.

Employment

Details ● Employment Type: Full-Time.

● Location: Hyderabad, India. Hybrid during onboarding; remote thereafter, subject to standard company policy applied consistently to all employees.

📌 Internal Controls and Audit Analyst for insurance domain (Hyderabad)
🏢 VikMark Technologies Private
📍 Hyderabad