Manager, IT Internal Audit

AdaptHealth•Philadelphia, PA

20h

About The Position

Manager, IT Internal Audit is responsible for planning, executing, and overseeing information technology and integrated audits to assess the effectiveness of IT governance, risk management, cybersecurity, and internal controls across the organization. This role plays a critical part in protecting patient data, ensuring regulatory compliance, and safeguarding revenue cycles within a highly regulated healthcare environment. The role partners closely with IT, Compliance, and external auditors to identify risks, recommend improvements, and enhance overall IT control maturity.

Requirements

Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field (CISA)
6+ years of progressive experience in IT audit, information security, or IT risk management
Strong knowledge of IT general controls, application controls, and cybersecurity practices
Ability to translate technical concepts as well as organizational risks into business-focused value-add recommendations
Understanding of risk management frameworks (e.g., COSO, COBIT, NIST, ISO)
Strong analytical and problem-solving skills with attention to detail
Excellent written and verbal communication skills and demonstrated ability to lead strong and effective teams
Excellent computer skills with advanced proficiency in Word, Excel, and PowerPoint
Working knowledge of healthcare regulatory requirements and healthcare systems such as EHRs, billing platforms, inventory systems
Adept at multi-tasking; one who thrives in an environment of rapid change
Highly motivated, enthusiastic, curious, and dynamic professional. Articulate. Open communicator, inquisitive, and not afraid to challenge
Demonstrates sense of urgency and ability to work independently with tight deadlines
Understands business implications of decisions
Strong drive, dedication, and work ethic
Unwavering commitment to ethics, objectivity, and independence in conducting audit activities
Public company experience required

Nice To Haves

Big 4 Public / 2nd Tier accounting company experience preferred
Experience with process mining, continuous auditing, data analytics automation tools (UiPath, Power BI, Python, Celonis, Alteryx, Data Snipper, etc.) highly preferred
Healthcare industry experience preferred

Responsibilities

Manage audits covering key IT Risk areas such as SOX and IT general controls (ITGCs), cybersecurity (e.g., vulnerability management, patch management, incident management), data privacy, and application controls supporting financial, operational, and compliance processes
Plan, scope, and execute IT and integrated audits, including system implementations and post-implementation reviews
Partner with IT Audit Directors to complete the development and execution of a risk-based IT audit plan aligned to healthcare regulations and organizational priorities
Evaluate IT compliance with healthcare regulations and frameworks
Assess IT risks related to patient data, billing and reimbursement systems, and third-party vendors
Identify opportunities to streamline, automate, or integrate AI into audit processes
Oversee audit work performed by internal staff and external providers, ensuring work meets professional standards
Coach and train less experienced staff on audit methodology and company operations
Communicate audit results, risk exposure, and remediation recommendations clearly to management and leadership
Support IT Audit Directors to identify and validate corrective actions and monitor remediation efforts
Serve as a trusted advisor to management on IT risk, control design, and process improvements
Support external audits, regulatory reviews, and compliance assessments as needed
Demonstrate intellectual curiosity and passion for learning
Stay current on emerging technological risks, healthcare regulations, and cybersecurity threats
Perform data analytics to identify anomalies, control deficiencies, and process gaps
Prepare clear, concise audit reports documenting findings, root causes, and practical remediation recommendations
Develop and maintain working knowledge of current HME products and services offered by the company
Maintain patient confidentiality and function within the guidelines of HIPAA
Completes assigned compliance training and other educational programs as required
Maintains compliance with AdaptHealth’s Compliance Program
Perform other related duties as assigned
Responsible for selection and hiring of qualified staff, ensuring an effective on-boarding and providing comprehensive training and regular feedback
Accomplishes staff results by communicating job expectations; planning, monitoring and appraising job results; coaching, counseling, and disciplining employees; developing coordinating; and enforcing systems. Policies, procedures, and productivity standards
Establishes annual goals and objectives for the department based on the organization’s strategic goals
Responsible for achieving organizational performance and retention goals, including timely completion of performance evaluations