Manager IT Internal Audit

Cleveland Clinic

13d•Hybrid

About The Position

At Cleveland Clinic Health System, we believe in a better future for healthcare. And each of us is responsible for honoring our commitment to excellence, pushing the boundaries and transforming the patient experience, every day. We all have the power to help, heal and change lives — beginning with our own. That’s the power of the Cleveland Clinic Health System team, and The Power of Every One. Job Details Join the Cleveland Clinic team, where you will work alongside passionate caregivers and provide patient-first healthcare. Cleveland Clinic is recognized as one of the top hospitals in the nation. At Cleveland Clinic, you will receive endless support and appreciation and build a rewarding career with one of the most respected healthcare organizations in the world. We are seeking an Information Technology Audit Manager with experience executing audits in IT, Cybersecurity, and emerging digital competencies. As a Manager of Internal Audit, you will prepare detailed audit programs, assist with conducting an annual risk analysis, and execute the IT audit plan using agile methodology concepts. In this role, you will perform audit procedures, manage audit staff and seniors, prepare draft audit reports for review with the Director, and help identify and report on control improvements in response to enterprise IT and cybersecurity risks. You will also lead meetings with Institute and Departmental Leadership to present and discuss findings. By taking this opportunity, you will add value to all areas of Cleveland Clinic and make meaningful impacts to help our patients, community, organization and caregivers. A caregiver in this role works a hybrid schedule from 8:00 a.m. – 5:00 p.m., with two days in office at Independence West Creek. To be considered for this position, candidates must reside in the Greater NE Ohio area.

Requirements

Bachelor's degree from an accredited college or university with a major in Accounting, Information Systems, or related field
Six years of progressive professional and functionally relevant work experience
Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Internal Auditor (CIA) or other related certification
Comprehensive knowledge of auditing standards, analytical techniques and internal controls
Excellent oral and written communication skills
Ability to walk to various locations on campus as well as travel to off-campus sites
Dexterity sufficient to operate a PC computer in the course of work

Nice To Haves

Advanced degree
Ability to supervise senior and staff auditors and multiple priorities and projects with competing priorities
General business knowledge of IT/Cybersecurity concepts
Familiarity with the Health Insurance Portability and Accountability Act (HIPAA) Security Rule/concepts and/or National Institute of Standards and Technology (NIST) Cybersecurity Framework

Responsibilities

Prepare and complete audit programs and participate in completing an annual risk assessment.
Evaluate the adequacy and effectiveness of controls intended to ensure the safeguarding of assets and reducing or recovering costs.
Manage audit staff and seniors to ensure effective completion of audit objectives.
Supervise department staff and seniors, review audit work papers and test results as assigned.
Prepare draft audit announcements, leads audit kickoff meetings, offer recommendations to reduce risk based upon observed and confirmed control weaknesses and follow up on management responses to audit findings.
Manage electronic audit papers using departmental software and track audit time allocation.
Prepare written reports, effectively communicate audit findings to Institute and Departmental Leadership and make recommendations for remediation related to findings.
Conduct effective audit meetings and maintain on-going communication on status of recommendations with management.
Assist with departmental initiatives.
Manage the testing of internal control effectiveness.
Review all documentation and test results.
Maintain on-going communication on status of recommendations with management.
Comply with the IIA Standards of Professional Practice of Internal Auditing and Code of Ethics.
Leverage agile methodology concepts in executing procedures.
Help identify and report out on control improvements in response to enterprise IT/Cybersecurity risks.
Effectively document applicable IT and cyber audit and advisory findings, including recommendations for improving controls and complying with regulatory requirements.
Other duties as assigned.