IT Auditor Sr - Audit Services

UNC Health Care; Morrisville (NC); Hybrid; USD 53,106 - 76,360; Full time

Job summary

UNC Health Care in Morrisville, NC is seeking a seasoned IT Auditor to lead audits and advisory engagements of IT systems, processes, and controls. You will identify risks, assess security measures, and propose improvements to governance and compliance.

Strong written and verbal communication to senior leadership is essential. Requirements include a Bachelor's in MIS/CS, 3+ years IT auditing, and certification in progress within a year (CISA/CISSP/CIA/CPA).

Qualifications

• Bachelor's degree in MIS, CS, or related field.
• Certification active or in process within one year (CISA, CISSP, CIA, CPA).
• At least three years of IT auditing experience.

Responsibilities

• Lead and execute audits and advisory engagements per annual plan.
• Conduct risk assessments and develop test work programs.
• Document work in TeamMate; identify control weaknesses and recommendations.
• Perform IT controls testing and data analysis to assess effectiveness.
• Prepare timely audit reports and present results to leadership.
• Apply analytical skills for problem solving, data interpretation, and root-causes.

Skills

IT auditing

Risk assessments

Data analytics

Leadership

Communication

Project management

HIPAA & PCI compliance

IT governance

Education

Bachelor's degree in MIS/CS

Tools

TeamMate

AutoAudit

IDEA

ACL

Power BI

Windows

UNIX

SQL

Oracle

Job description

Description

Your passion belongs at UNC Health. Join more than 56,000 teammates working together to improve the health and well-being of the communities we serve across North Carolina.

Summary

Responsible for leading and performing audits and advisory engagements of IT systems, processes, and controls to identify potential risks and vulnerabilities, while assessing the effectiveness of security measures, and providing recommendations to improve IT governance, management, operations, and security, risks, and compliance. Ensure compliance with federal regulations and established UNC Health Care System policies and procedures. Must have excellent skills in time and project management, report writing, communication and presentations to senior leadership.

Responsibilities

1. Lead and execute audits and advisory engagements assigned from the annual work plan and perform special projects, investigations, internal controls testing, continuous auditing, and other engagements.
2. Conduct risk assessments and develop unique work programs to test procedures after gaining an understanding of the environment, governance, risks, and controls.
3. Document work in the TeamMate audit tool and support conclusions. Identify internal control weaknesses, non-compliance with organizational policies, laws, and regulations, and opportunities to improve operational effectiveness. Research root-causes for corrective recommendations.
4. Conduct interviews to gather evidence for data analysis and assess control effectiveness. Perform thorough testing of IT controls to determine their effectiveness.
5. Complete audits timely with well written reports according to established department standards and effectively communicate the results to executive leadership and key stakeholders.
6. Use analytical skills for problem solving, data interpretation, and root cause analysis.

Other Information

Education Requirements:

• * Bachelor's degree in Management Information Systems, Computer Science, or related technical field.

Licensure/Certification Requirements:

• * Certified or in process of obtaining certification within one year of hire. (i.e., CISA, CISSP, CIA, CPA)

Professional Experience Requirements:

• * Three (3) years IT auditing work experience.

Knowledge/Skills/and Abilities Requirements:

• Experience in applying relevant technical knowledge in the following areas: IT system and application audits (Windows, UNIX, SQL and Oracle), network securities audits, and HIPAA and PCI compliance audits, knowledge of penetration tests and vulnerability assessments.
• Ability to conduct all phases of risk-based audits either solo or as lead utilizing electronic work papers (i.e,. TeamMate, AutoAudit).
• Experience with data analytics and software (i.e., IDEA, ACL).
• Demonstrated effective leadership and interpersonal skills. Able to lead and present to senior management.
• Excellent verbal and written communication skills. Can compose audit reports.
• Experience in the medical field or other heavily regulated environment desirable.

Knowledge: 1) standards, regulations, and frameworks: Global Internal Audit Standards, HIPAA, PCI DSS, COBIT, NIST, ISO 27001, 2) risk assessments, 3) IT governance, 4) internal control Assessments, audit methodology.

Technical: possess a strong understanding of IT infrastructure, networks, applications, databases, operating systems, system development life cycle, cloud computing and cybersecurity.

Expert with analytical technology: Excel and data analytical software (e.g., IDEA, ACL, Power BI).

Abilities: 1) professional skepticism, objectivity, courage, curious, and ethical, 2) clear and concise verbal and written skills (reports, executive summaries, and presentations, 3) time management and project tracking, 4) leading work teams and customers; while providing guidance on audit methodology and technical areas, 5) adaptable and continuous learner.

Job Details

Legal Employer: NCHEALTH

Entity: Shared Services

Organization Unit: Audit Services

Work Type: Full Time

Standard Hours Per Week: 40.00

Salary Range:$38.55 - $55.43 per hour (Hiring Range)

Pay offers are determined by experience and internal equity

Work Assignment Type: Hybrid

Work Schedule: Day Job

Location of Job: US:NC:Morrisville

Exempt From Overtime: Exempt: Yes

This position is employed by NC Health (Rex Healthcare, Inc., d/b/a NC Health), a private, fully-owned subsidiary of UNC Health Care System, in a department that provides shared services to operations across UNC Health Care; except that, if you are currently a UNCHCS State employee already working in a designated shared services department, you may remain a UNCHCS State employee if selected for this job.

Qualified applicants will be considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, disability, status as a protected veteran or political affiliation.

UNC Health makes reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as applicants and employees with disabilities. All interested applicants are invited to apply for career opportunities. Please email [e-mail] if you need a reasonable accommodation to search and/or to apply for a career opportunity.