Summary
Almoosa Health Group is seeking an Internal IT Auditor to work under the supervision of the Chief Audit Executive. The role assesses IT controls, security, networks, applications, and compliance, and includes documenting findings, preparing audit reports, and recommending improvements. Applicants should have a bachelor’s degree in Information Technology or Computer Science and two to three years of relevant IT audit experience; CISA is highly preferred. Knowledge of ITGC, cybersecurity frameworks, operating systems, firewalls, VPNs, ERP systems, and data analysis tools is required.
The posting
As published on almoosahealthgroup.org. Pulled from the employer's site and shown as they wrote it.
Under the supervision of the Chief Audit Executive the IT audit Specialist will conduct various types of audits and reviews to evaluates an organization's technology infrastructure, applications, and processes to ensure data security, integrity, and regulatory compliance and determine the adequacy internal controls, efficiency of the policies and procedures and to ensure adherence to applicable rules and regulations
Requirements
DUTIES AND RESPONSIBILITIES:
- Risk Assessment & Testing: Evaluate the design and operational effectiveness of IT security, networks, and software applications.
- Compliance Monitoring: Ensure IT systems meet internal policies and external regulations (SOX, HIPAA, GDPR)
- Security Evaluation: Identify vulnerabilities and weaknesses, including analyzing firewalls and access controls.
- Reporting & Remediation: Document findings, prepare detailed audit reports, and provide recommendations to management for strengthening internal controls.
-Process Improvement: Review IT policies and procedures to improve efficiency and security.
-Conduct special assignment as may be assigned by the Chief Audit Executive
QUALIFICATIONS:
· Bachelor’s degree in Information Technology, Computer Science.
· Certified Information Systems Auditor (CISA) is highly preferred.
PROFESSIONAL EXPERIENCE:
- Two to three years IT audit experience in a relevant sector.
- Understanding of ITGC (IT General Controls), cybersecurity frameworks (e.g., NIST, ISO 27001), and operating systems.
- Excellent knowledge of Firewalls, VPNs, ERP systems (e.g. Oracle), and data analysis tools.
- Excellent knowledge of IT Framework like COBIT, NIST, ITIL.
- Excellent written and oral communication skills.