IT Internal Auditor II

Job Summary:

The IT Internal Auditor II executes IT audits as defined by management and works to identify and evaluate the organization’s risk areas and provide input to the development of the annual audit plan. 

Essential Functions:

• Execute Information Technology audits as defined by management and the Audit Committee
• Identify and evaluate the organization’s risk areas and provide input to the development of the annual audit plan
• Perform audit procedures, including planning, inquiry, developing work plans, testing, and reporting
• Identify, develop, and document audit issues and recommendations Communicate or assist in communicating the results of audit and consulting projects to management
• Develop and maintain productive client and staff relationships through individual contacts and group meetings
• Represent internal audit on organizational project teams, at management meetings, and with external organizations
• Provide or assist in providing training, coaching, and guidance to internal audit staff and/or CareSource external auditors in conducting audits and other audit-related issues
• Draft the scope and objectives for individual audit and prepare audit programs
• Conduct data extraction, analysis, and security reviews utilizing software tools
• Support audits and consulting engagements related to programming, mainframe batch and online processes, client-server architecture, Internet and intranet functionality, database extraction, technology strategy, and data communication and network security
• Act as liaison with business partners to ensure full understanding of data flow, data integrity, and system security
• Assess IT control elements to mitigate IT risks regarding the confidentiality, integrity, and availability of business information
• Pursue professional development opportunities, including external and internal training and involvement in professional associations, and share information gained with co-workers
• Perform any other job duties as requested

• Bachelor of Science degree in information systems, computer science, business, or related field or other degree or equivalent years of experience is required
• One to five years of proven internal audit experience
• Experience/familiarity with a variety of technical platforms, such as operating systems, databases, networks, firewalls, web services etc.
• Prefer experience in healthcare or insurance field
• Prefer Sarbanes Oxley 404 or Model Audit Rule experience
• Prefer experience with NIST 800-171 compliance
• Prefer proficiency in information technology control concepts and systems development methodologies
   

• Proficient in Microsoft Office tools
• Ability to  quickly and independently learn new operations, collect and analyze complex data, evaluate information and systems, and draw logical conclusions
• Excellent  verbal and written communication skills, including active listening , negotiation s, and presentation to different groups
• Ability to establish and maintain harmonious working relationships with co-workers, staff and external contacts, and to work effectively in a professional team environment
• Ability to maintain composure under pressure while meeting multiple deadlines
• Ability to identify ‘root causes’ of issues and develop appropriate recommendations
• Knowledge of audit principles and IIA Standards and Code of Ethics required
• Understanding of information technology governance and regulatory frameworks (CObIT, COSO, ANSI, NIST 800-171, etc.) preferred
• Knowledge of industry program policies, procedures, regulations, and laws (HIPAA, HITECH, Ohio Data Breach)
• Proven ability to assess effectiveness of internal controls over key IT risks, identify significant exposures, analyze transactions and other management information, and detect changes in key risks and/or control effectiveness
   

• Internal Audit certification such as the Certified Information System Auditor (CISA), CMMC Certified Professional (CCP), CCMC Certified Assessor (CCA) or other related certification preferred

Working Conditions:

• General office environment; may be required to sit or stand for extended periods of time
• Perform reasonable travel related duties up to 25%, including possible overnight travel

Compensation Range:

CareSource takes into consideration a combination of a candidate’s education, training, and experience as well as the position’s scope and complexity, the discretion and latitude required for the role, and other external and internal data when establishing a salary level. In addition to base compensation, you may qualify for a bonus tied to company and individual performance. We are highly invested in every employee’s total well-being and offer a substantial and comprehensive total rewards package.

Compensation Type (hourly/salary):

Organization Level Competencies

• Create an Inclusive Environment

• Cultivate Partnerships

• Develop Self and Others

• Drive Execution

• Influence Others

• Pursue Personal Excellence

• Understand the Business

This job description is not all inclusive. CareSource reserves the right to amend this job description at any time. CareSource is an Equal Opportunity Employer. We are dedicated to fostering an inclusive environment that welcomes and supports individuals of all backgrounds.