Lead team reviews and oversee activities or other auditors.
Conduct audits and reviews of the processes and safeguards in place to protect the organization's information system resources and their data confidentiality, integrity, and availability.
Assignments include but are not limited to reviews of new implementation projects and installed clinical and business application system controls and IT general controls for key infrastructure components.
Determine the extent of compliance with established Scripps Health policies, procedures, and technology standards.
Report risk-based observations and audit findings, develops practical mitigation recommendations with agreed-upon correction action plans for remediation of internal control gaps and deficiencies, reducing costs, and or improving operational efficiency and effectiveness.
The Ideal Candidate will have:
Ability to evaluate and audit complex information systems and related information security safeguards
Technical knowledge of information security concepts, information technology internal controls and safeguards, system vulnerabilities, and applicable rules and regulations
Understand key clinical information systems and processes in a healthcare delivery environment
Knowledge of the professional auditing standards (Institute of Internal Auditing), as well as internal and information security control frameworks and principles
Effective interpersonal, written, and verbal communication skills
High level of personal accountability for accuracy, attention to detail, task prioritization, and timely completion
Ability to work independently under changing priorities due to investigations; important deadlines; and rapid response to security incidents
This is a Full Time, Salaried position located at our Corporate Offices in La Jolla and offers Scripps Health's award-winning benefit package.
#LI-JS1
Qualifications
Required Education/Experience/Specialized Skills:
Bachelor's degree required in Accounting, Management Information Systems, Computer Engineering, Computer Science, or a related discipline.
3 years of auditing complex IS systems
Ability to evaluate and audit complex information systems and related information security safeguards.
Technical knowledge of information security concepts, information technology internal controls and safeguards, technologies, system vulnerabilities, and applicable rules and regulations.
Understanding of key clinical information systems and processes in an integrated healthcare delivery environment.
Knowledge of the professional auditing standards (Institute of Internal Auditors Professional Practice of Internal Auditing), as well as internal and information security control frameworks and principles.
Demonstrated effective interpersonal, written, and verbal communication skills.
High level of personal accountability for accuracy, attention to detail, task prioritization, and timely completion.
Ability to work independently under conditions of changing priorities due to investigations and special requests; important deadlines; and rapid response to security incidents.
Strong technical skills and ability to learn and deploy computer-assisted audit techniques (CAAT) through ACL audit software and other tools.
Required Certification/Registration:
At least one of the following active certifications at time of hire:
CISA, CRISC, CISSP or CISM.
Must possess valid CA Drivers license and be able to independently travel to all business units and local workshops and seminars.