Sr. IT Auditor

R1 RCM

2d•Remote

About The Position

R1 is the leading provider of technology-driven solutions that transform the patient experience and financial performance of hospitals, health systems and medical groups. We are the one company that combines the deep expertise of a global workforce of revenue cycle professionals with the industry’s most advanced technology platform, encompassing sophisticated analytics, AI, intelligent automation, and workflow orchestration. The Senior IT Auditor will report to the IT Audit Senior Manager, with responsibility to provide assurance on the design and effectiveness of internal controls in a highly controlled environment. The successful candidate will have familiarity with security frameworks applicable to the R1 environment such as, HIPAA, HITRUST, PCI, and SOC. The successful candidate will learn and grow to understand, anticipate, and share insights on Information Technology (IT)/Information Security (IS) risks where data security is a top priority. The candidate will take advantage of R1’s GRC tool and standard audit techniques to deliver accurate and efficient insights and evaluate the effectiveness of risk mitigation activities.

Requirements

2-4 years of IT audit experience, Big 4 a plus
Degree in an IT or related field (e.g., Business Management, Information Technology, Information Security, Computer Science, Accounting)
Understanding of HIPAA, Data Privacy, PCI a plus
CISA or relevant certifications preferred but not required.

Responsibilities

Audit and document controls over various areas of IT, including IT security, IT infrastructure, cloud environments, access management, IT application controls, and IT general controls.
Execute assigned controls and deliver end-to-end responsibilities with minimum supervision.
Use judgment to prioritize work and identified findings and recommendations to communicate audit results and action plans to IT Audit Leadership.
Demonstrate efficiency, persistence, and time management to achieve team objectives.
Work with business stakeholders to ensure controls meet third-party auditing requirements.
Confirm controls are aligned to frameworks such as SOC 1, SOC 2, PCI, HITRUST, NIST, HIPAA.