Senior IT Internal Auditor

Baptist Memorial Health Care; Memphis (TN); On-site; USD 80,000 - 100,000; Full time

Job summary

Baptist Memorial Health Care is looking for an Auditor-Internal IT Senior to enhance the effectiveness of IT controls. Responsibilities include conducting IT audits, ensuring compliance with healthcare regulations, and preparing detailed audit reports. The ideal candidate should have a Bachelor’s degree in a relevant field and at least three years of IT audit experience, preferably in the healthcare sector. Preferred certifications include CISA and CIA. This position promotes operational efficiency and compliance with regulations.

Qualifications

• Bachelor’s degree in a relevant field.
• Minimum of three years of IT audit experience, preferably in healthcare.
• Strong knowledge of IT general controls and cybersecurity frameworks.

Responsibilities

• Assist in developing and executing risk-based IT audit plans.
• Conduct audits of IT systems, applications, and infrastructure.
• Prepare clear, concise audit reports with findings and recommendations.

Skills

IT general controls (ITGC)

cybersecurity frameworks

healthcare IT systems

SQL

data analysis software

Education

Bachelor’s degree in Information Systems, Computer Science, Accounting, or related field

Three years of IT audit experience, preferably in healthcare

Tools

audit tools

Microsoft Office

Job description

Position Summary

Performs independent and objective assurance and advisory activities to add value and enhance the effectiveness of IT controls within BMHCC operations. Critical tasks include risk assessments, internal control reviews and audits performed following established auditing and ethical standards, with a particular emphasis on IT controls and operations. Promotes compliance with healthcare regulations, protection of sensitive patient information, and operational efficiency by identifying risks and recommending improvements.

Overview

Job Title: Auditor-Internal IT Senior

Department: Corporate Auditing & Consulting

Reports to: Director of IT Audit

Responsibilities

• Assists Internal Audit leadership in the development and execution of risk‑based IT audit plans aligned with departmental standards and healthcare regulatory requirements.
• Identifies key controls, risks, and audit objectives; design audit programs tailored to healthcare IT environments.
• Conducts audits of IT systems, applications, databases, and infrastructure, including EHR/EMR platforms, cybersecurity controls, and data privacy processes.
• Assesses IT risks related to data privacy, cybersecurity, change management, business continuity, and system access.
• Ensures compliance with HIPAA, NIST, and internal policies.
• Prepares clear, concise audit reports summarizing findings, risks, and recommended corrective actions.
• Collaborates effectively with cross‑functional teams and influences stakeholders.
• Partners with IT, cybersecurity, compliance, and clinical operations teams to evaluate new systems, security enhancements, and major IT initiatives.
• Coordinates with external auditors to support reliance on internal IT audit work.

Education & Experience

• Bachelor’s degree in Information Systems, Computer Science, Accounting, or related field.
• Three years of IT audit experience, preferably in healthcare.

Technical Skills

• Strong knowledge of IT general controls (ITGC), cybersecurity frameworks, and healthcare IT systems.
• Experience with vulnerability assessments, data privacy controls, and change management processes.
• Proficiency with audit tools, SQL, Microsoft Office, and database applications including data analysis software.

Soft Skills

• Excellent analytical, communication, and report‑writing abilities.
• Strong judgment, attention to detail, and ability to manage multiple projects independently.

Preferred Certifications

• CISA (Certified Information Systems Auditor)
• CISSP (Certified Information Systems Security Professional)
• CIA (Certified Internal Auditor)