Sr. Information Systems Auditor

Military, Veterans and Diverse Job Seekers; San Diego (CA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Award-winning benefit package

Job summary

Scripps Health in San Diego seeks a Sr. Information Systems Auditor to lead audits of clinical and business IT controls and to evaluate complex information systems for confidentiality, integrity, and availability.

You will coordinate audits, report findings, and develop practical remediation plans while staying compliant with IIA standards and IT security frameworks. This is a full-time, on-site role based at our La Jolla corporate offices, with travel as required.

Qualifications

• Bachelor's degree in Accounting, MIS, CS or related discipline.
• 3 years of auditing complex IS systems.
• Knowledge of information security concepts and IT controls.
• Familiarity with IT risk management and healthcare IT environments.
• Understanding of IIA standards and security frameworks.
• Strong written and verbal communication skills.
• Ability to deploy computer-assisted audit techniques (CAAT).

Responsibilities

• Lead audits of information systems and IT controls.
• Oversee audit activities and coordinate with other auditors.
• Report risk-based observations and remediation plans.
• Evaluate safeguards for confidentiality, integrity, and availability of data.
• Travel to various business units and workshops as needed.

Skills

Audit complex IS systems

Information security safeguards

Clinical information systems

Audit standards (IIA)

Interpersonal communication

Accountability & accuracy

CAAT techniques

Travel ability

Education

Bachelor's degree in Accounting, MIS, CS

Tools

ACL audit software

Job description

About the job Sr. Information Systems Auditor

Responsibilities include, but are not limited to:

• Lead team reviews and oversee activities or other auditors.
• Conduct audits and reviews of the processes and safeguards in place to protect the organization's information system resources and their data confidentiality, integrity, and availability.
• Assignments include but are not limited to reviews of new implementation projects and installed clinical and business application system controls and IT general controls for key infrastructure components.
• Determine the extent of compliance with established Scripps Health policies, procedures, and technology standards.
• Report risk-based observations and audit findings, develops practical mitigation recommendations with agreed-upon correction action plans for remediation of internal control gaps and deficiencies, reducing costs, and or improving operational efficiency and effectiveness.

The Ideal Candidate will have:

• Ability to evaluate and audit complex information systems and related information security safeguards
• Technical knowledge of information security concepts, information technology internal controls and safeguards, system vulnerabilities, and applicable rules and regulations
• Understand key clinical information systems and processes in a healthcare delivery environment
• Knowledge of the professional auditing standards (Institute of Internal Auditing), as well as internal and information security control frameworks and principles
• Effective interpersonal, written, and verbal communication skills
• High level of personal accountability for accuracy, attention to detail, task prioritization, and timely completion
• Ability to work independently under changing priorities due to investigations; important deadlines; and rapid response to security incidents

This is a Full Time, Salaried position located at our Corporate Offices in La Jolla and offers Scripps Health's award-winning benefit package.

#LI-JS1

Qualifications

Required Education/Experience/Specialized Skills:

• Bachelor's degree required in Accounting, Management Information Systems, Computer Engineering, Computer Science, or a related discipline.
• 3 years of auditing complex IS systems
• Ability to evaluate and audit complex information systems and related information security safeguards.
• Technical knowledge of information security concepts, information technology internal controls and safeguards, technologies, system vulnerabilities, and applicable rules and regulations.
• Understanding of key clinical information systems and processes in an integrated healthcare delivery environment.
• Knowledge of the professional auditing standards (Institute of Internal Auditors Professional Practice of Internal Auditing), as well as internal and information security control frameworks and principles.
• Demonstrated effective interpersonal, written, and verbal communication skills.
• High level of personal accountability for accuracy, attention to detail, task prioritization, and timely completion.
• Ability to work independently under conditions of changing priorities due to investigations and special requests; important deadlines; and rapid response to security incidents.
• Strong technical skills and ability to learn and deploy computer-assisted audit techniques (CAAT) through ACL audit software and other tools.

Required Certification/Registration:

• At least one of the following active certifications at time of hire:
  • CISA, CRISC, CISSP or CISM.
• Must possess valid CA Drivers license and be able to independently travel to all business units and local workshops and seminars.

Preferred Education/Experience/Specialized Skills/Certification:

• Preferred: CIA, PMP or other relevant IT risk and security certification.

Job: RegulatoryPrimary Location: Central San Diego County-SAN DIEGO-SCRIPPS CORPORATE OFFICES