Sr Systems Auditor (IT Support)

About the role

The Sr. Systems Auditor is a member of the Internal Audit department who focuses primarily on information technology risk. This role involves assisting the Systems Audit management team in conducting IT risk audits, analyzing application, OS, and DB security; internal security architecture, vulnerability processes, data privacy, and other supporting IT processes. The candidate will also analyze key risks and controls in related processes, develop and execute test programs, report audit results, and track remediation activities.

Responsibilities

• Support the risk analysis function through information-gathering, assessing supporting technologies, and developing the audit program.
• Collaborate with Audit team management regarding audit program development.
• Perform research on technologies included in the scope of audits, identifying assessment focus areas based on risk analysis.
• Execute key control testing through detailed analysis of various technical environments including operation systems, databases, network components, and devices, and the related IT processes to manage those environments.
• Communicate with audit stakeholders regarding audit process and activities, artifact request management, risks, and audit results.
• Track auditee remediation plans adopted to mitigate significant risks.
• Lead most aspects of the project lifecycle for assigned audit engagements including preliminary risk assessment and related technical research, project management, communication with audit team and business stakeholders.

Requirements

• 3+ years related work experience in technology audit, IT system administration, or related technical controls experience.
• Related Bachelor’s degree or additional related equivalent work experience in Information Systems, Computer Science, or related field.
• Experience in auditing, administering, and/or performing other risk assessment functions for a variety of technical platforms, such as operating systems, databases, networks, firewall systems, web services, and/or cloud services.
• Experience documenting key processes, risks, control objectives, and controls in narrative and process flow formats.
• Strong written and verbal communication skills.
• Experience managing concurrent engagements/workstreams, prioritizing, and validating.
• Experience in a payer and/or healthcare provider or related supporting organization environment, including HIPAA and compliance relative to protected health information (PHI)/personally identifiable information (PII).
• Basic working knowledge of applicable regulatory and/or control frameworks (e.g., HIPAA, HITRUST, SOC 1, SOC 2, Model Audit Rule).

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, or related field.
• CISSP certification.
• 1.5 years of experience in performing detailed risks assessment or auditing the following systems/environments: Red Hat Enterprise Linux, AIX Unix, Windows Server, Windows Active Directory, Red Hat Openshift, z/OS, DB2 DB, Oracle DB, MongoDB, PostgresDB, network appliances.
• Experience in a payer and/or healthcare provider or related supporting organization environment, including HIPAA and compliance relative to protected health information (PHI)/personally identifiable information (PII).
• Basic working knowledge of applicable regulatory and/or control frameworks (e.g., HIPAA, HITRUST, SOC 1, SOC 2, Model Audit Rule).

Skills

• Strong written and verbal communication skills.
• Ability to work towards the Certified Information Systems Security Professional (CISSP) and/or Certified Information Systems Auditor (CISA) designation.
• Working knowledge of MS Office and Visio, including basic Excel formulas to analyze and compare data sets.
• Understanding of applicable regulatory and compliance requirements.

Benefits

• Comprehensive benefits package including medical, dental, vision, life, and global travel health insurance.
• Income protection benefits: life insurance, short- and long-term disability programs.
• Leave programs to support personal circumstances.
• Roth and Traditional Retirement Savings Plans including employer match.
• Paid time off, volunteer time off, 10 holidays, and 2 well-being days.
• Additional voluntary benefits available; and a comprehensive wellness program.

Pay

Typical Annualized Offer Range: $84,500 - $105,600

Annualized Salary Range: $84,500 - $137,300

Schedule

Typical schedule: Full-time