Senior IT Internal Auditor

Harris Health; Houston (TX); On-site; USD 80,000 - 110,000; Full time

Job summary

Harris Health is seeking a Senior Information Technology (IT) Internal Auditor in Houston, Texas. This role is crucial for identifying operational and compliance risks, leading risk-based audits, and ensuring alignment with regulatory requirements.

The ideal candidate holds a Bachelor's degree in a relevant field and has 5-7 years of IT audit experience along with strong knowledge of SOX and data analysis skills. Join Harris Health to play a key role in supporting internal audit objectives.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Accounting, or related fields required.
• CIA, CISA, relevant certifications or progressing toward certification required.
• 5-7 years of experience in IT audit, internal audit, risk/internal controls.

Responsibilities

• Lead and execute risk‑based IT audits including SOX IT General Controls.
• Manage all phases of the audit lifecycle: planning, risk assessment, fieldwork.
• Draft clear and professional audit reports for management.

Skills

IT audit

Risk assessment

SOX compliance

Data analysis

Communication

Education

Bachelor's degree in Computer Science, Information Technology, Accounting

CIA or CISA certification

MBA or relevant Master's degree

Tools

Microsoft Office

PeopleSoft

Audit Board

Job description

Job Summary

The Senior Information Technology (IT) Internal Auditor is responsible for identifying and assessing operational, compliance, and financial risks across a variety of business functions at Community Health Choice and evaluating the design of processes and controls. The Senior Internal Auditor determines whether organizational areas are performing in accordance with internal processes, controls or established regulatory requirements.

Responsibilities

• Independently lead and execute risk‑based IT audits including SOX IT General Controls (ITGCs), operational, and compliance audits.
• Serve and contribute to the Company SOX IT compliance program, through walkthroughs, documentation and control testing.
• Manage all phases of the audit lifecycle: planning, risk assessment, fieldwork, issue identification, and reporting.
• Evaluate the design and operating effectiveness of IT controls across infrastructure, information security, cloud environments, SDLC, change management, access controls, and IT operations.
• Assess SOC 1 / SOC 2 reports and other third‑party assurance reports for control reliance.
• Identify control deficiencies, assess root causes and develop practical, risk‑based remediation recommendations in collaboration with management.
• Prepare clear, well‑organized audit documentation, including narratives, flowcharts, risk and control matrices, and workpapers, in accordance with IIA standards.
• Track audit findings and recommendation status; perform follow‑up testing as needed.
• Apply data analytics and technology‑enabled audit techniques to improve audit efficiency and coverage.
• Draft clear and professional audit reports, presenting findings to management and key stakeholders.
• Clearly communicate audit risks, control deficiencies, and recommendations suitable for both technical and non‑technical audiences.
• Provide timely updates on audit progress, issues, and emerging risks to audit stakeholders and Internal Audit leadership.
• Build effective working relationships and trust with business partners across the organization.
• Manage multiple audits and priorities simultaneously while meeting established timelines.
• Demonstrate flexibility and ability to adapt to a variety of roles and projects and changing demands.
• Perform other job‑related duties as assigned in support of Internal Audit objectives.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Accounting or related fields (e.g., Finance, Business) required.
• CIA, CISA, relevant certifications or progressing toward professional certification (to be completed within 1 year of hire) required.
• MBA or relevant Master's degrees preferred.
• 5-7 years of experience in IT audit, internal audit, risk/internal controls and/or compliance.
• Prior experience in public accounting Big Four or a large corporate internal audit department.
• Strong working knowledge of SOX, ITGCs, and SOC 1 / SOC 2 reporting.
• Experience auditing enterprise applications and systems (e.g., ERP, HR, financial systems). Healthcare industry experience a plus.
• Management/Leadership experience leading audit engagements with minimum supervision and coordinating audit activities, as required.
• Demonstrate strong analytical skills in assessing complex business processes, identifying risks, and evaluating controls.
• Advanced proficiency in Microsoft Office, including Excel data analysis and reporting.
• Familiarity with PeopleSoft, Visio, ACL, data analytic tools is preferred.
• Experience with AI‑enabled audit tools is a plus.
• Proficiency in Electronic Audit Work Paper Software such as Audit Board, Teammate, or similar platforms is desirable.
• Proficient in auditing standards (e.g., IIA) and controls within business processes.
• Committed to ongoing professional development through membership in relevant organizations (IIA, AHIA).