Systems Audit Manager

About the role

The Systems Audit Program Manager is a member of the Internal Audit department focusing on identification, evaluation and communication to management of the most critical information technology risks facing the organization.

Responsibilities

• Support the IT risk analysis function by setting direction and contributing to the information-gathering process, assessment of supporting technologies, and development of the audit program.
• Collaborate with Audit team management and Staff members, as assigned, regarding audit program development.
• Performs or directs staff performance of research on technologies included in the scope of audits, identifying assessment focus areas based upon risk analysis.
• Performs or directs staff performance of key control testing through detailed analysis of various technical environments including operation systems, databases, network components and devices, and the related IT processes to manage those environments.
• Communicates overall summary of audit results to management on a regular basis and alerts management to unusual or high-risk situations requiring immediate action.
• Guides management in the development of satisfactory corrective actions in response to audit findings.
• Tracks progress against related corrective action plans, directing validation of key controls.
• Develops and mentors systems audit staff.

Requirements

• 6+ years related work experience in technology audit experience
• Related Bachelor's degree required
• Information Systems, Computer Science or related field, Accounting
• Certified Information Systems Auditor (CISA) designation, Certified Information Systems Security Professional (CISSP), or equivalent certification
• Experience in auditing, administering and/or performing other risk assessment functions for a variety of technical platforms, such as operating systems, databases, networks, firewall systems, web services and/or cloud services.
• Experience documenting key processes, risks, control objectives and controls in narrative and process flow formats.
• Strong understanding of applicable regulatory and compliance requirements.
• Strong verbal and written communication skills.
• Strong project management skills.
• Ability to maintain confidentiality regarding sensitive information.

Qualifications

• 1+ year(s) leadership experience including direct supervisory experience, project team leadership, training, coaching, auditing, or providing day-to-day direction to team members
• Experience in performing detailed risks assessments
• Experience in a payer and/or healthcare provider or related supporting organization environment, including HIPAA and compliance relative to protected health information (PHI) / personally identifiable information (PII).
• Experience with applicable regulatory and/or control frameworks (e.g., HIPAA, HITRUST, SOC 1, SOC 2, Model Audit Rule)
• Experience auditing cloud technologies and AI technologies

Skills

• Strong understanding of applicable regulatory and compliance requirements.
• Strong verbal and written communication skills.
• Strong project management skills.
• Ability to maintain confidentiality regarding sensitive information.

Benefits

• Medical, dental, vision, life and global travel health insurance
• Income protection benefits: life insurance, short- and long-term disability programs
• Leave programs to support personal circumstances
• Retail savings plan including employer match
• Paid time off, volunteer time off, 10 holidays and 2 well-being days
• Additional voluntary benefits available; and a comprehensive wellness program

Pay

Typical Annualized Hiring/Offer Range: $100,400 - $125,500

Annualized Salary Range: $100,400 - $163,200

Schedule

Final pay will be determined with consideration of market competitiveness, internal equity, and the job-related knowledge, skills, training, and experience you bring.