Staff Internal Auditor

Job Summary

The Staff IT Internal Audit conducts entry-level professional IT audit risk assessment and compliance reviews under the direct guidance of Internal Audit leadership. This role is responsible for executing foundational audit procedures and evaluating the design implementation and operational effectiveness of information technology infrastructure application controls and cybersecurity frameworks. The Staff Auditor actively participates in IT audit engagements and regulatory compliance assessmentsincluding Sarbanes-Oxley (SOX) HIPAA Security and Promoting Interoperability (PI)and provides objective advisory observations to management. The individual bridges technology and business by learning to map control environments while maintaining strict professional organizational and ethical standards.

Essential Functions

Audit Execution & Testing: Performs specific audit testing procedures analyzes population data sets and thoroughly documents audit evidence in workpapers in accordance with Internal Audit standards.

Risk Evaluation & Scoping: Develops a foundational understanding of business and IT processes infrastructure and security policies to assist in identifying generic technology risks.

Documentation & Quality Assurance: Prepares clear and high-quality process narratives system flowcharts and walkthrough documentation to assess control design effectiveness.

Reporting & Communication: Identifies control deficiencies and security gaps communicates them clearly to audit leadership and assists in drafting observations for formal audit reports.

Advisory & Project Support: Supports basic technology assessments system implementation reviews and ad-hoc advisory projects to ensure risk management is integrated into new organizational initiatives.

Stakeholder & External Collaboration: Provides direct coordinated testing support and data gathering assistance to external auditors to optimize overall audit efficiency.

Team Leadership & Development: Proactively seeks opportunities to increase individual knowledge in information systems controls adhering to a collaborative team-oriented corporate environment.

Strategic Planning & Innovation: Leverages basic data analysis tools (e.g. Excel Power BI) to evaluate simple data populations and improve individual testing speeds

Qualifications

• Bachelors Degree in accounting or related field required from an accredited college or university in Information Security Information Systems Business Administration (with a Cybersecurity/Data Analytics emphasis) or a related academic discipline.
• Less than 2 years of experience in IT compliance IT external/internal audit or technology risk management (relevant internships will be considered).

Knowledge Skills and Abilities

• Technical Competency & IT Architecture: Foundational knowledge of operating systems databases networks and basic cybersecurity concepts. Ability to understand how data flows through simple IT infrastructures.
• Regulatory Frameworks & Compliance: Basic awareness of IT control frameworks (COBIT NIST) and regulatory compliance requirements (SOX HIPAA Promoting Interoperability).
• Audit Methodology & Data Analytics: Foundational understanding of internal audit concepts risk assessment and control testing. Proficiency in basic data manipulation tools (e.g. Excel) to perform data sorting and analysis.
• Project Management & Leadership: Strong time management skills with the ability to execute assigned audit steps within budget. Demonstrates a proactive coachable mindset and a willingness to learn from peers.
• Communication & Stakeholder Relations: Clear written and verbal communication skills. Ability to document audit testing accurately in narratives and explain basic technical findings to immediate audit team members.
• Strong computer skills including ACL MS Excel Access PowerPoint and Word

Licenses and Certifications

• Certified Information Systems Auditor (CISA) preferred
• CISSP Certified Information Systems Security Professional