UNIV - IT Auditor - Internal Audit

Medical University of South Carolina • Charleston, SC

9d • Hybrid

About The Position

The Information Technology (IT) Auditor conducts performance, operational, compliance, and financial audits for multiple highly complex organizations, including colleges and universities, and healthcare organizations operating under the purview of state government, and related for-profit and non-profit organizations, joint ventures, and business associations. Audits are conducted in accordance with professional standards, including Generally Accepted Government Auditing Standards (GAGAS), the Institute of Internal Auditors (IIA) standards, and Enterprise and Departmental policies and procedures. The Auditor works under limited supervision and must exhibit sound judgment, exercise discretion, and maintain confidentiality. The Information Technology (IT) Auditor conducts performance, operational, compliance, and financial audits for multiple highly complex organizations, including colleges and universities, and healthcare organizations operating under the purview of state government, and related for-profit and non-profit organizations, joint ventures, and business associations. Audits are conducted in accordance with professional standards, including Generally Accepted Government Auditing Standards (GAGAS), the Institute of Internal Auditors (IIA) standards, and Enterprise and Departmental policies and procedures. The Auditor works under limited supervision and must exhibit sound judgment, exercise discretion, and maintain confidentiality.

Requirements

• A bachelor's degree and three years relevant program experience.

Nice To Haves

• A bachelor's degree in accounting, business administration, finance, information technology, or related field is preferred.
• Relevant master's degree is preferred.
• Three years of experience in professional-level auditing, investigations, accounting, financial management, information technology, or related field is preferred.
• Experience working with server, workstation, network, and/or application administration is preferred.
• Knowledge of finance and business operations; auditing/accounting standards, practices, principles, and theories; and/or project management related to government, colleges/universities, or healthcare is preferred.
• Professional, concise, and practical presentation and written communication skills are preferred.
• High aptitude for business and office applications (Excel, Word, PowerPoint, virtual collaboration platforms) is preferred.
• Data analytical skills, including Computer Assisted Audit Tools, are preferred.
• Working knowledge of Automated Audit Workpaper Applications is preferred.
• Working knowledge of the following frameworks and guidance is preferred: NIST CSF, SOC, HIPAA Security Rule, PCI, and/or NIST 800-53.
• Relevant professional certification acquired by exam (CPA, CIA, CFE, CISA, etc.) is preferred.
• Independent thinker with the ability to draw rational conclusions based on evidence.
• Highly motivated self-starter.
• Strong interpersonal and relationship-building skills.

Responsibilities

• Compliance: Promote Departmental compliance with applicable standards, professional practices, and Enterprise and Departmental policies and procedures. Ensure competency by maintaining and continually enhancing the knowledge and skills relevant for the Enterprise’s industries and the auditor role. (10%)
• Departmental Goal Setting and Annual Risk Assessment: Participate in setting and tracking Departmental goals and performance metrics. Participate in conducting the Annual Risk Assessment and the Annual Audit Planning activities. (10%)
• Audit Planning: Responsible for managing projects, including planning and designing the work necessary to address the audit objective(s) as assigned and in accordance with professional standards and Enterprise and Departmental policies and procedures. Prepare and maintain appropriate workpapers to document audit planning activities. (30%)
• Audit Fieldwork: On assigned projects, design audit steps to provide a basis for audit conclusions based on the audit objective. Obtain relevant information and data. Organize data and use appropriate techniques to analyze. When analysis results indicate processes are functioning as intended and no exceptions are noted, provide assurance as appropriate. When analysis results indicate exceptions, identify and evaluate the factors causing the exception. Prepare and maintain appropriate workpapers to document fieldwork activities, including analyses and evidence, resulting in audit conclusions. (20%)
• Audit Findings: Collaborate with audit clients to determine viable corrective action to address deficiencies identified and then discuss with the Audit Manager. Prepare and maintain appropriate workpapers to document communication and collaboration with the audit client to determine audit conclusions. (5%)
• Audit Reporting: Prepare written reports and memorandums to communicate audit results and conclusions for distribution to appropriate parties. Reports and memorandums are supported by appropriate and sufficient workpapers (evidence). Prepare reports and memorandums in concise business terms with correct spelling, grammar, and punctuation. (10%)
• Audit Follow-up Projects: Complete follow-up projects as assigned. Prepare appropriate workpapers to document the status of audit findings. (10%)
• Special Projects and Requests: Conduct special projects as requested by the Board of Trustees or Enterprise management and assigned by the Audit Manager, Assistant Director, or Chief Audit Executive (CAE). Conduct other duties as assigned by the Audit Manager, Assistant Director, or CAE. (5%)

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees