Evaluate the design and effectiveness of technology controls
Identify risks and work collaboratively with business and technology stakeholders
Perform IT audits and risk assessments across various areas
Conduct walkthroughs of IT processes and systems to identify key risks, controls, and opportunities for improvement
Assess compliance with organizational policies, regulatory requirements, and industry frameworks
Participate in cybersecurity assessments and reviews
Support enterprise risk management activities by identifying emerging technology and cybersecurity risks
Prepare clear, concise, and well-documented audit workpapers, reports, and presentations

Bachelor’s degree in Information Systems, Information Technology, Cybersecurity, Accounting, Finance, Healthcare Administration, or a related field
Three (3) or more years of experience in IT auditing, information security, risk management, compliance, cybersecurity, or related disciplines
Experience evaluating technology controls, information security practices, and IT governance processes
Understanding of cybersecurity principles, risk management methodologies, and internal control frameworks
Strong analytical, organizational, and problem-solving skills
Excellent written and verbal communication skills
Ability to manage multiple projects and priorities in a dynamic environment
Preferred Certifications: Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), Healthcare Information Security and Privacy Practitioner (HCISPP)

IT Auditor

Key skills