Staff Internal Auditor

Community Health Systems Professional Services Corporation • Franklin, TN

6h

About The Position

The Staff, IT Internal Audit conducts entry-level professional IT audit, risk assessment, and compliance reviews under the direct guidance of Internal Audit leadership. This role is responsible for executing foundational audit procedures and evaluating the design, implementation, and operational effectiveness of information technology infrastructure, application controls, and cybersecurity frameworks. The Staff Auditor actively participates in IT audit engagements and regulatory compliance assessments—including Sarbanes-Oxley (SOX), HIPAA Security, and Promoting Interoperability (PI)—and provides objective advisory observations to management. The individual bridges technology and business by learning to map control environments while maintaining strict professional, organizational, and ethical standards.

Requirements

• Bachelor's Degree in accounting or related field required from an accredited college or university in Information Security, Information Systems, Business Administration (with a Cybersecurity/Data Analytics emphasis), or a related academic discipline.
• Less than 2 years of experience in IT compliance, IT external/internal audit, or technology risk management (relevant internships will be considered).
• Foundational knowledge of operating systems, databases, networks, and basic cybersecurity concepts.
• Ability to understand how data flows through simple IT infrastructures.
• Basic awareness of IT control frameworks (COBIT, NIST) and regulatory compliance requirements (SOX, HIPAA, Promoting Interoperability).
• Foundational understanding of internal audit concepts, risk assessment, and control testing.
• Proficiency in basic data manipulation tools (e.g., Excel) to perform data sorting and analysis.
• Strong time management skills with the ability to execute assigned audit steps within budget.
• Demonstrates a proactive, coachable mindset and a willingness to learn from peers.
• Clear written and verbal communication skills.
• Ability to document audit testing accurately in narratives and explain basic technical findings to immediate audit team members.
• Strong computer skills including ACL, MS Excel, Access, PowerPoint, and Word

Nice To Haves

• Certified Information Systems Auditor (CISA) preferred
• CISSP Certified Information Systems Security Professional

Responsibilities

• Performs specific audit testing procedures, analyzes population data sets, and thoroughly documents audit evidence in workpapers in accordance with Internal Audit standards.
• Develops a foundational understanding of business and IT processes, infrastructure, and security policies to assist in identifying generic technology risks.
• Prepares clear and high-quality process narratives, system flowcharts, and walkthrough documentation to assess control design effectiveness.
• Identifies control deficiencies and security gaps, communicates them clearly to audit leadership, and assists in drafting observations for formal audit reports.
• Supports basic technology assessments, system implementation reviews, and ad-hoc advisory projects to ensure risk management is integrated into new organizational initiatives.
• Provides direct, coordinated testing support and data gathering assistance to external auditors to optimize overall audit efficiency.
• Proactively seeks opportunities to increase individual knowledge in information systems controls, adhering to a collaborative, team-oriented corporate environment.
• Leverages basic data analysis tools (e.g., Excel, Power BI) to evaluate simple data populations and improve individual testing speeds

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level