Senior IT Auditor (CISA, CISSP, or CISM) (Remote)

Mercy Health - Chesterfield, MO

Full-time - Mid Level

Remote - Chesterfield, MO

Ambulatory Health Care Services

About the position

The Senior IT Auditor at Mercy is responsible for leading comprehensive Information Technology audits. This role involves evaluating the adequacy, effectiveness, and efficiency of the systems of controls within a technology environment. The auditor identifies weaknesses in these systems and provides actionable recommendations to mitigate those weaknesses. A key aspect of this position is to proactively collaborate with management to ensure compliance with relevant policies, laws, and regulations. In managing the execution of the audit process, the Senior IT Auditor assists in developing the annual risk assessment and audit plan. This includes drafting the audit program, defining the audit scope, and executing various audit steps. The auditor is also responsible for creating questionnaires and spreadsheets to analyze business processes effectively. After conducting audits, the auditor drafts reports summarizing the findings and leads meetings to communicate these findings to senior leadership. Continuous monitoring and reporting of remediation status are also part of the responsibilities. Leadership is a critical component of this role, as the auditor partners with the business to identify recommendations on risk issues and takes responsibility for the quality of the work produced. Building relationships is essential, as the auditor collaborates with management to provide constructive and value-added recommendations to address identified risks. The auditor also leads meetings for assigned audits and identifies opportunities for participation in special projects or investigations related to significant business issues. Administrative duties include adhering to health and safety protocols, maintaining a professional appearance, and meeting attendance standards. The Senior IT Auditor performs related duties as assigned, contributing to the overall mission of Mercy to provide exceptional care and service.

Responsibilities

• Lead Information Technology audits to evaluate systems of controls.
• Identify weaknesses in technology environments and provide recommendations for mitigation.
• Assist in the development of the annual risk assessment and audit plan.
• Draft audit programs, scopes, and execute audit steps.
• Create questionnaires and spreadsheets for analyzing business processes.
• Draft audit reports summarizing findings and communicate them to senior leadership.
• Monitor and report on remediation status of audit findings.
• Partner with business units to identify risk issues and provide recommendations.
• Ensure quality of work products and identify relevant business and audit topics.
• Participate in special projects, investigations, or significant business issues.

Requirements

• Four to five years of IS audit experience or technical experience preferred.
• Bachelor's degree in Information Systems or a related field required.
• Professional Certification (CISA, CISSP, CISM) or advanced degree preferred.
• Healthcare experience preferred.
• Strong analytical skills and interpersonal skills.
• Excellent organizational and oral/written communication skills.
• Self-directed and able to work independently.
• Proven ability to meet goals and work at a high performance level.
• Ability to work within a team environment and interact with management.
• Knowledge of ACL, UNIX, Windows, LAN, WAN, Oracle, SQL, SDLC, Firewalls, Routers, COBIT, SOX 404, network security, IT general controls, application and database controls.

Nice-to-haves

• Experience in healthcare IT auditing.
• Advanced degree in a related field.

Benefits

• Comprehensive health, vision, and dental coverage from day one.
• Paid time off (PTO).
• Tuition reimbursement.
• Employer-matched retirement funds.