Sr Systems Auditor (IT Support)

Florida Blue

About The Position

The Sr. Systems Auditor is a member of the Internal Audit department who focuses primarily on information technology risk. As an individual contributor, the candidate will assist the Systems Audit management team in conducting IT risk audits including analysis of application, OS and DB security; internal security architecture, vulnerability process, data privacy and other supporting IT processes. They will analysis of key risks and controls in related processes, test program development and execution, results reporting, and tracking of relevant issue remediation activities.

Requirements

3+ years related work experience in technology audit experience, IT system administration or related technical controls experience
Related Bachelor’s degree or additional related equivalent work experience Information Systems, Computer Science or related field
Experience in auditing, administering and/or performing other risk assessment functions for a variety of technical platforms, such as operating systems, databases, networks, firewall systems, web services and/or cloud services.
Experience documenting key processes, risks, control objectives and controls in narrative and process flow formats.
Strong written and verbal communication skills.
Experience managing concurrent engagements / workstreams, prioritize and validate
Ability to work towards the Certified Information Systems Security Professional (CISSP) and/or Certified Information Systems Auditor (CISA) designation.
Working knowledge of MS Office and Visio, including basic Excel formulas to analyze and compare data sets.
Understanding of applicable regulatory and compliance requirements.

Nice To Haves

Bachelor’s degree Information Systems, Computer Science or related field
CISSP - Certificationin Information Systems Security Prof 1 1/2 Yrs
Experience in performing detailed risks assessment or auditing the following systems / environments: Red Hat Enterprise Linux, AIX Unix, Windows Server, Windows Active Directory, Red Hat Openshift, z/OS, DB2 DB, Oracle DB, MongoDB, PostgresDB, network appliances.
Experience in a payer and/or healthcare provider or related supporting organization environment, including HIPAA and compliance relative to protected health information (PHI) / personally identifiable information (PII). Certified Information Systems Auditor (CISA) Basic working knowledge of applicable regulatory and/or control frameworks (e.g., HIPAA, HITRUST, SOC 1, SOC 2, Model Audit Rule)

Responsibilities

Support the risk analysis function through the information-gathering process, assessment of supporting technologies, and development of the audit program.
Collaborate with Audit team management regarding audit program development.
Perform research on technologies included in the scope of audits, identifying assessment focus areas based upon risk analysis.
Execute key control testing through detailed analysis of various technical environments including operation systems, databases, network components and devices, and the related IT processes to manage those environments.
Communicate with audit stakeholders regarding audit process and activities, artifact request management, risks, and audit results.
Track auditee remediation plans adopted to mitigate significant risks.
Lead most aspects of the project lifecycle for assigned audit engagements including preliminary risk assessment and related technical research, project management, communication with audit team and business stakeholders.

Benefits

Medical, dental, vision, life and global travel health insurance
Income protection benefits: life insurance, short- and long-term disability programs
Leave programs to support personal circumstances
Retirement Savings Plan including employer match
Paid time off, volunteer time off, 10 holidays and 2 well-being days
Additional voluntary benefits available; and a comprehensive wellness program

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume