It Audit Lead

Specialist IT Auditor

Position Overview

The Specialist IT Auditor will report to the IT Audit Senior Manager, with responsibility to provide assurance on the design and effectiveness of internal controls in a highly controlled environment. The successful candidate will have familiarity with security frameworks applicable to the R1 environment such as, HIPAA, HITRUST, PCI, and SOC 2.

In this role, the successful candidate will learn and grow to understand, anticipate, and share insights on Information Technology (IT)/Information Security (IS) risks where data security is a top priority. The candidate will take advantage of R1s GRC tool and standard audit techniques to deliver accurate and efficient insights and evaluate the effectiveness of risk mitigation activities.

The successful candidate must have a demonstrated eagerness to quickly learn about an organization’s IT functions, infrastructure, processes, and applications to be able to recognize data sources, identify risks, and test assumptions. The candidate must demonstrate an ability to deliver findings to stakeholders in an objective, professional manner.

Key Areas of Responsibility:

• Function as a team member and provide extended support to Audit Management in planning and execution of IT control efforts.
• Document IT controls, including IT General Controls (ITGC) testing for use by external auditors.
• Audit various areas of IT, including IT security, IT infrastructure, access management, IT application controls, and IT general controls.
• Execute assigned controls and deliver end-to-end responsibilities with minimum supervision.
• Prioritize work based on the needs of multiple internal and external stakeholders.
• Use judgment to prioritize findings and recommendations to communicate audit results and action plans to IT Audit Leadership.
• Demonstrate efficiency, persistence, and time management to achieve team objectives.
• Think critically and analyze events and root causes professionally.
• Work with business stakeholders to ensure controls meet third-party auditing requirements.
• Research and gather information from both business and IT functions.
• Confirm controls are aligned to frameworks such as SOC 1, SOC 2, PCI, HITRUST, HIPAA.

Qualifications:

• 2-4 years of IT audit experience, Big 4 a plus;
• Degree in an IT or related field (e.g., Business Management, Information Technology, Information Security, Computer Science, Accounting);
• Understanding of HIPAA, Data Privacy, PCI a plus; and
• CISA or relevant certifications preferred but not required.

Skills:

• Excellent written and oral communication skills;
• Ability to thrive and deliver results in a fast growing, dynamic environment;
• Strong analytical skills and an astute ability to solve problems and provide solutions;
• Ability to manage multiple high priority projects;
• One (1) to Three (3) years of IT Audit, or similar experience;
• Excellent collaborative leadership skills; and
• Commitment to personal and professional growth and enthusiasm for innovative ideas leveraging the latest technology.
• AuditBoard or other enterprise governance, risk, compliance (GRC) or audit tool;
• Ability to quickly gain a high-level understanding of new tools and technology.