IT Internal Auditor - Cyber Risk & Controls

City of Hope; United States; On-site; Full time

Job description

Join the transformative team at City of Hope, where we're changing lives and making a real difference in the fight against cancer, diabetes, and other life‑threatening illnesses. City of Hope's growing national system includes its Los Angeles campus, a network of clinical care locations across Southern California, a new cancer center in Orange County, California, and treatment facilities in Atlanta, Chicago and Phoenix. Our dedicated and compassionate employees are driven by a common mission, to deliver the cures of tomorrow to the people who need them today.

The IT Internal Auditor is responsible for supporting and executing information technology audits across City of Hope and related entities. This role evaluates IT governance, cybersecurity, infrastructure, application controls, and data management processes while ensuring compliance with regulatory requirements. You will partner closely with business and technology leaders to assess risk, strengthen internal controls, and support the secure and effective use of technology across the organization.

As a successful candidate, you will:

• Execute IT audits across cybersecurity, infrastructure, cloud environments, applications, and data governance
• Evaluate IT general controls, including access management, change management, and system development lifecycle processes
• Assess compliance with regulatory and security requirements, including HIPAA and privacy standards
• Perform risk assessments and contribute to IT audit planning activities
• Conduct technical testing, including automated controls and data analytics
• Document audit procedures, findings, and recommendations with clarity and precision
• Collaborate with IT, compliance, and business teams to address risks and remediation plans
• Identify emerging technology risks, including cybersecurity threats and evolving industry trends
• Perform audit fieldwork including interviews, walkthroughs, and analysis of system controls
• Validate remediation efforts and conduct follow‑up testing to ensure risk mitigation

Your qualifications should include:

• Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field (or equivalent experience)
• 2-5 years of IT audit, cybersecurity, IT risk, or related experience
• Certification such as CISA, CIA, CPA, or CISSP (or progress toward certification)
• Strong knowledge of IT audit frameworks and standards (e.g., COBIT, NIST, ISO)
• Understanding of cybersecurity risks, controls, and IT general controls
• Experience with cloud environments, enterprise systems, and data governance preferred
• Strong analytical, critical thinking, and problem‑solving skills
• Excellent written and verbal communication skills with strong attention to detail
• Ability to collaborate effectively across technical and business teams
• Experience in healthcare or a regulated environment preferred

City of Hope employees' pay is based on the following criteria: work experience, qualifications, and work location.

City of Hope is an equal opportunity employer.

To learn more about our Comprehensive Benefits, please CLICK HERE.