Join the Cleveland Clinic team, where you will work alongside passionate caregivers and provide patient-first healthcare. Cleveland Clinic is recognized as one of the top hospitals in the nation. At Cleveland Clinic, you will receive endless support and appreciation and build a rewarding career with one of the most respected healthcare organizations in the world.
We are seeking an Information Technology Audit Manager with experience executing audits in IT, Cybersecurity, and emerging digital competencies. As a Manager of Internal Audit, you will prepare detailed audit programs, assist with conducting an annual risk analysis, and execute the IT audit plan using agile methodology concepts. In this role, you will perform audit procedures, manage audit staff and seniors, prepare draft audit reports for review with the Director, and help identify and report on control improvements in response to enterprise IT and cybersecurity risks. You will also lead meetings with Institute and Departmental Leadership to present and discuss findings.
By taking this opportunity, you will add value to all areas of Cleveland Clinic and make meaningful impacts to help our patients, community, organization and caregivers.
A caregiver in this role works a hybrid schedule from 8:00 a.m. – 5:00 p.m., with two days in office at Independence West Creek.
To be considered for this position, candidates must reside in the Greater NE Ohio area.
A caregiver who excels in this role will:
Prepare and complete audit programs and participate in completing an annual risk assessment.
Evaluate the adequacy and effectiveness of controls intended to ensure the safeguarding of assets and reducing or recovering costs.
Manage audit staff and seniors to ensure effective completion of audit objectives.
Supervise department staff and seniors, review audit work papers and test results as assigned.
Prepare draft audit announcements, leads audit kickoff meetings, offer recommendations to reduce risk based upon observed and confirmed control weaknesses and follow up on management responses to audit findings.
Manage electronic audit papers using departmental software and track audit time allocation.
Prepare written reports, effectively communicate audit findings to Institute and Departmental Leadership and make recommendations for remediation related to findings.
Conduct effective audit meetings and maintain on-going communication on status of recommendations with management.
Assist with departmental initiatives.
Manage the testing of internal control effectiveness.
Review all documentation and test results.
Maintain on-going communication on status of recommendations with management.
Comply with the IIA Standards of Professional Practice of Internal Auditing and Code of Ethics.
Leverage agile methodology concepts in executing procedures.
Help identify and report out on control improvements in response to enterprise IT/Cybersecurity risks.
Effectively document applicable IT and cyber audit and advisory findings, including recommendations for improving controls and complying with regulatory requirements.
Other duties as assigned.
Minimum qualifications for the ideal future caregiver include:
Bachelor's degree from an accredited college or university with a major in Accounting, Information Systems, or related field
Six years of progressive professional and functionally relevant work experience
Certified Information Systems Auditor (CISA), Certified Information Systems
Security Professional (CISSP), Certified Internal Auditor (CIA) or other related certification
Comprehensive knowledge of auditing standards, analytical techniques and internal controls
Excellent oral and written communication skills
Ability to walk to various locations on campus as well as travel to off-campus sites
Dexterity sufficient to operate a PC computer in the course of work
Preferred qualifications for the ideal future caregiver include:
Advanced degree
Ability to supervise senior and staff auditors and multiple priorities and projects with competing priorities
General business knowledge of IT/Cybersecurity concepts
Familiarity with the Health Insurance Portability and Accountability Act (HIPAA) Security Rule/concepts and/or National Institute of Standards and Technology (NIST) Cybersecurity Framework
Physical Requirements:
Typical physical demands include a high degree of dexterity to produce materials on a PC, normal or corrected vision, extensive sitting and frequent walking, occasional lifting or carrying 5 to 15 pounds in a typical business office environment.
Personal Protective Equipment:
Follows standard precautions using personal protective equipment as required.
The policy of Cleveland Clinic Health System and its system hospitals (Cleveland Clinic Health System) is to provide equal opportunity to all of our caregivers and applicants for employment in our drug free environment. All offers of employment are followed by testing for controlled substances.
Cleveland Clinic Health System administers an influenza prevention program. You will be required to comply with this program, which will include obtaining an influenza vaccination on an annual basis or obtaining an approved exemption.
Decisions concerning employment, transfers and promotions are made upon the basis of the best qualified candidate without regard to color, race, religion, national origin, age, sex, sexual orientation, marital status, ancestry, status as a disabled or Vietnam era veteran or any other characteristic protected by law. Information provided on this application may be shared with any Cleveland Clinic Health System facility.
If applying for a Florida position, please see the following website for more information on the background screening requirements required by the Agency of Health Care Administration: https://info.flclearinghouse.com/
Please review the Equal Employment Opportunity poster.
Cleveland Clinic is pleased to be an equal employment opportunity employer.
ccf