IT Auditor

Sanford Health•Sioux Falls, SD

2d•Onsite

About The Position

Sanford Health, the largest rural health system in the United States, is dedicated to transforming the health care experience and providing access to world-class health care in America’s heartland. This role involves performing internal audits at both the enterprise and location/department levels, managing the annual internal audit plan, risk assessments, data and reporting capabilities, and conducting audits and investigations. The Audit Lead will manage assigned audit engagements, complete fieldwork, review work papers, and finalize audit reports. This position ensures compliance with internal policies and external regulations, reviews findings, and follows up on remediation plans with the audit team and senior leadership.

Requirements

Bachelor’s degree in Accounting, Finance, Mathematics, Information Systems, Information Technology, Health Information Management, Health Informatics, or other Business-related degree with an Accounting minor is required.
Minimum of 5 years related work experience is required, preferably in the health industry or in a lead auditor role.
Must have solid understanding of auditing frameworks, and accounting principles and standards is required.
Understanding of general audit concepts, techniques, approaches and processes is required.
Ability to prioritize tasks and manage projects effectively.
Demonstrate accuracy and attention to detail.
Have excellent critical thinking, problem solving and analytical skills.
Have excellent verbal and written communication and interpersonal skills, and able to communicate with all levels of management and employees.
Must have strong experience with data analytic reporting tools.

Nice To Haves

Masters degree is preferred.
Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Risk Management Assurance (CRMA), Certified Information Systems Security Professional (CISSP) HealthCare Information Security and Privacy Practitioner (HCISPP) or Certified Controls Self Assessment (CCSA) preferred.

Responsibilities

Manage internal audits, prepare and update risk assessments to assess controls, identify vulnerabilities, and mitigate risks associated with healthcare systems and regulations (HIPAA, HITECH).
Assist in preparation of annual audit plan.
Conduct audit engagements, complete and review field work, discuss audit findings with audit management, finalize audit reports and assist in follow up with findings and remediation plans and validations in timely manner.
Guide and support internal audit team in preparing audit reports that are accurate, clear, concise, constructive, objective and timely.
Assist in the development and revision of internal audit programs to encompass on-going changes to internal control environment as a result of changes implemented by outside organizations and internal departments.
Prepare clear and compelling reporting, including executive summaries and presentations for senior leadership and stakeholders.
Analyze audit findings to identify inefficiencies, weaknesses, or non-compliance.
Collaborate across departments and recommend improvements to enhance regulatory compliance, data integrity and analytics, confidentiality, security, privacy, and integrity of operational and technology infrastructure for the assigned audits and advisory projects.
Coordinate with cross functional departments and work with external auditors as designated by engagement terms, prepare and review responses to audit requests, recommend action plan(s) to re-mediate gaps, monitor the performance of internal control processes and complete documentation needed.
Identify cross functional dependence of Operational, IT, Compliance, Legal, Financial and Strategic risks when conducting audits.
Develop, design, and implement Audit programs, plans, coordinate fieldwork, conduct quality review, finalize report for Audit leadership review.
Maintain updated knowledge in AI auditing trends, data analytics, financial reporting, healthcare and technology audit framework and methodologies, regulatory requirements and best practice.
Work with leadership in the completion of special projects and other activities in a capacity that does not impair internal audit's independence in fact or appearance.