Manager IT Internal Audit

ccf; United States; Hybrid; USD 120,000 - 170,000; Full time

Job summary

Cleveland Clinic Health System seeks an IT Internal Audit Manager with 6+ years of IT, cybersecurity, and emerging digital audits. You will design audit programs, manage staff, and report findings to leadership, leveraging agile methods.

Hybrid work with two in-office days at Independence West Creek is expected. Applicants must reside in the Greater NE Ohio area and hold relevant certifications (CISA/CISSP/CIA).

Qualifications

• Bachelor's degree in Accounting, Information Systems, or related field.
• Six years of progressive professional and functionally relevant work experience.
• Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP) or Certified Internal Auditor (CIA) or related certification.
• Comprehensive knowledge of auditing standards, analytical techniques and internal controls.
• Excellent oral and written communication skills.
• Ability to walk to various locations on campus and travel to off-campus sites.
• Dexterity to operate a PC in the course of work.

Responsibilities

• Prepare and complete audit programs and participate in annual risk assessments.
• Evaluate the adequacy and effectiveness of controls to safeguard assets and reduce costs.
• Manage audit staff and seniors to ensure audit objectives are met.
• Supervise staff, review work papers and test results.
• Prepare audit announcements and lead kickoff meetings; recommend remediation for control weaknesses.
• Maintain electronic audit papers and track time allocation.
• Prepare written reports and communicate findings to leadership with remediation recommendations.
• Conduct audit meetings and update management on status of recommendations.
• Assist with departmental initiatives and test internal control effectiveness.
• Ensure documentation and test results are thorough and compliant with standards.
• Maintain ongoing communication on status of recommendations with management.
• Comply with IIA Standards and Code of Ethics; apply agile concepts where relevant.
• Identify and report on IT/Cybersecurity control improvements.
• Document findings and recommendations to improve controls and regulatory compliance.
• Other duties as assigned.

Education

Bachelor's degree in Accounting, Information Systems, or related field

Six years of progressive experience

Job description

At Cleveland Clinic Health System, we believe in a better future for healthcare. And each of us is responsible for honoring our commitment to excellence, pushing the boundaries and transforming the patient experience, every day.

We all have the power to help, heal and change lives — beginning with our own. That’s the power of the Cleveland Clinic Health System team, and The Power of Every One.

Job Title

Manager IT Internal Audit

Location

Independence

Facility

Independence West Creek

Department

Internal Audit-Finance

Job Code

T32045

Shift

Days

Schedule

8:00am-5:00pm

Job Summary

Job Details

Join the Cleveland Clinic team, where you will work alongside passionate caregivers and provide patient-first healthcare. Cleveland Clinic is recognized as one of the top hospitals in the nation. At Cleveland Clinic, you will receive endless support and appreciation and build a rewarding career with one of the most respected healthcare organizations in the world.

We are seeking an Information Technology Audit Manager with 6+ years of experience executing audits in IT, Cybersecurity, and emerging digital competencies. As a Manager of Internal Audit, you will prepare detailed audit programs and execute the IT audit plan using agile methodology concepts. In this role, you will perform audit procedures, manage audit staff and seniors, prepare draft audit reports for review with the Director, and help identify and report on control improvements in response to enterprise IT and cybersecurity risks.

By taking this opportunity, you will add value to all areas of Cleveland Clinic and make meaningful impacts to help our patients, community, organization and caregivers.

A caregiver in this role works a hybrid schedule from 8:00 a.m. – 5:00 p.m., with two days in office at Independence West Creek.

To be considered for this position, candidates must reside in the Greater NE Ohio area.

A caregiver who excels in this role will:

• Prepare and complete audit programs and participate in completing an annual risk assessment.

• Evaluate the adequacy and effectiveness of controls intended to ensure the safeguarding of assets and reducing or recovering costs.

• Manage audit staff and seniors to ensure effective completion of audit objectives.

• Supervise department staff and seniors, review audit work papers and test results as assigned.

• Prepare draft audit announcements, leads audit kickoff meetings, offer recommendations to reduce risk based upon observed and confirmed control weaknesses and follow up on management responses to audit findings.

• Manage electronic audit papers using departmental software and track audit time allocation.

• Prepare written reports, effectively communicate audit findings to Institute and Departmental Leadership and make recommendations for remediation related to findings.

• Conduct effective audit meetings and maintain on-going communication on status of recommendations with management.

• Assist with departmental initiatives.

• Manage the testing of internal control effectiveness.

• Review all documentation and test results.

• Maintain on-going communication on status of recommendations with management.

• Comply with the IIA Standards of Professional Practice of Internal Auditing and Code of Ethics.

• Leverage agile methodology concepts in executing procedures.

• Help identify and report out on control improvements in response to enterprise IT/Cybersecurity risks.

• Effectively document applicable IT and cyber audit and advisory findings, including recommendations for improving controls and complying with regulatory requirements.

• Other duties as assigned.

Minimum qualifications for the ideal future caregiver include:

• Bachelor's degree from an accredited college or university with a major in Accounting, Information Systems, or related field

• Six years of progressive professional and functionally relevant work experience

• Certified Information Systems Auditor (CISA), Certified Information Systems
  Security Professional (CISSP), Certified Internal Auditor (CIA) or other related certification

• Comprehensive knowledge of auditing standards, analytical techniques and internal controls

• Excellent oral and written communication skills

• Ability to walk to various locations on campus as well as travel to off-campus sites

• Dexterity sufficient to operate a PC computer in the course of work

Preferred qualifications for the ideal future caregiver include:

• Advanced degree

• Ability to supervise senior and staff auditors and multiple priorities and projects with competing priorities

• General business knowledge of IT/Cybersecurity concepts

• Familiarity with the Health Insurance Portability and Accountability Act (HIPAA) Security Rule/concepts and/or National Institute of Standards and Technology (NIST) Cybersecurity Framework

Physical Requirements:

• Typical physical demands include a high degree of dexterity to produce materials on a PC, normal or corrected vision, extensive sitting and frequent walking, occasional lifting or carrying 5 to 15 pounds in a typical business office environment.

Personal Protective Equipment:

• Follows standard precautions using personal protective equipment as required.

The policy of Cleveland Clinic Health System and its system hospitals (Cleveland Clinic Health System) is to provide equal opportunity to all of our caregivers and applicants for employment in our drug free environment. All offers of employment are followed by testing for controlled substances.

Cleveland Clinic Health System administers an influenza prevention program. You will be required to comply with this program, which will include obtaining an influenza vaccination on an annual basis or obtaining an approved exemption.

Decisions concerning employment, transfers and promotions are made upon the basis of the best qualified candidate without regard to color, race, religion, national origin, age, sex, sexual orientation, marital status, ancestry, status as a disabled or Vietnam era veteran or any other characteristic protected by law. Information provided on this application may be shared with any Cleveland Clinic Health System facility.

If applying for a Florida position, please see the following website for more information on the background screening requirements required by the Agency of Health Care Administration: https://info.flclearinghouse.com/

Please review the Equal Employment Opportunity poster.

Cleveland Clinic is pleased to be an equal employment opportunity employer.