Lead IT Auditor

One of the nation's largest and most respected providers of hospital and healthcare services, Universal Health Services, Inc. (UHS) has built an impressive record of achievement and performance. During the year, UHS was again recognized as one of the World's Most Admired Companies by Fortune; and listed in Forbes ranking of America's Largest Public Companies. Operating acute care hospitals, behavioral health facilities, outpatient facilities and ambulatory care access points, an insurance offering, a physician network and various related services located all over the U.S. States, Washington, D.C., Puerto Rico and the United Kingdom. www.uhs.com

The UHS Corporate Internal Audit Department is seeking a dynamic and talented Lead IT Auditor. In collaboration with the Director, Internal Audit IT and Analytics, the Lead IT Auditor, will materially contribute to organizational and departmental IT and analytics projects. They will lead the planning and execution of the annual Sarbanes-Oxley compliance assessment of information technology controls and underlying information used in controls (data & reports), as well as leading all phases of the internal audit project lifecycle, including the planning, execution and reporting on operational audits, system conversions/implementation, data analytic projects and/or other compliance monitoring assessments. Additionally, they will identify, develop, and maintain data analysis solutions to aid in the effectiveness and efficiency of assurance and technology audits. The lead will be responsible conducting projects, performing thorough reviews, and timely completion of work product, as well as training and overseeing staff. They will ensure audit procedures performed fulfill the purposes and responsibilities established in the department as well as conform to the COSO Framework, COBIT Framework and the Standards for the Professional Practice of Internal Auditing published by the Institute of Internal Auditors or a similar professional organization.

Key responsibilities include:

Planning Scope and Procedures:

• Assist in the development and execution of the annual Internal Audit Plan through scoping, risk assessments, and project planning for SOX, operational audits, and ad hoc projects.
• Provide input in the selection and development of appropriate audit procedures while considering applicable risks and controls.
• Evaluate approach and propose changes to make process more effective/efficient. (i.e. expand scope coverage or incorporate use of analytic tools.).
• Identify, evaluate, and explain risks and controls for business processes and technology.
• Research new audit areas, risks, and technologies and compile audit programs or steps to evaluate controls.
• Review and analyze methodologies to ensure consistent application and use of analytic tools.

Identify and Evaluate Controls:

• Conduct walkthroughs with IT and business owners throughout the company to document the design and understanding of internal processes, including via narratives and flowcharts
• Assess risks, evaluate the design and operating effectiveness of controls over information systems and report conclusions and recommendations to various stakeholders.
• Perform detailed internal controls testing, including underlying information used in a control, such as IT system generated reports in accordance with COSO/COBIT frameworks.
• Execute audit work programs as assigned in a timely manner and with adequate supporting documentation for test work, findings, and corrective action plans.
• Exercise good judgment by considering all of the facts and circumstances involved as well as their strategic impact.
• Work with management to develop action plans to remediate findings and address areas for improvement and track corrective actions through to completion.

Report Preparation/ Review:

• Timely complete and review work papers for each audit to ensure there is adequate supporting documentation for test work performed, findings and any corrective actions proposed.
• Review summaries of issues identified as well as process improvement recommendations and impact of controls deficiencies.
• Prepare comprehensive audit reports that are well-written and supported by the work papers.
• Thoroughly discuss implications of deficiencies on both the technology and business process environments with various process owners.
• Materially participate in meetings with more tenured management.

Special Projects/Investigations:

• Execute assignments discreetly, effectively, and efficiently in sensitive or confidential circumstances.
• Provide input for aspects of special projects based upon experience.

Trainer/Lead:

• Provide guidance and training to less experienced staff as well as perform detailed reviews of work prepared by staff.
• Provide oversight of staff and senior auditors to ensure timely completion of assigned projects.
• Assist with staff training to create a positive learning and working environment.
• Actively provide constructive feedback to less experienced staff on their work product.
• Identify areas of departmental knowledge deficiency and propose training opportunities for staff.
• Seek out feedback from various process owners on the audit process and areas of improvement.
• Stay current on changing rules and regulations both in the industry and profession and provide updates to Company management. Attend trainings and share learnings to build Internal Audit, Internal Controls, Risk Management, and/or Governance awareness on the team and throughout the business, and evaluate implement and/or use tools to enhance process efficiencies and effectiveness
• Proactively develop business partnerships and maintain a presence with management to understand business strategies, challenges, and risks.
• Build and foster relationships with external auditors and business partners throughout the company to continue to develop the Internal Audit brand to be a Trusted Advisor, to add further value throughout the company to provide insights and advise on key initiatives.

Position Requirements:

• Required: Bachelor's or Master's degree in information technology/systems, cyber security, management information systems (MIS), computer science or business, accounting, finance, data analytics, related field with solid academic credentials.
• Required: Five to eight years of related professional experience in combination of IT, internal audit, public accounting, and/or consulting required
• Preferred: Professional certification [e.g., Certified Public Accountant (CPA), Certified Information Systems Auditor (CISA), Certified Information Security Systems Professional (CISSP)].
• Relevant industry experience in healthcare, consulting, public accounting, and/or experience with IT General Controls, COBIT framework, audit methodology, and/or SOX compliance.
• Working knowledge in one or more of the following areas: of operating systems (windows, AS400), cloud based applications, electronic medical record systems (EMR), Enterprise Resource Planning systems (ERP), system, implementations/conversions, databases, SQL, servers, service provider controls (SOC Reports), cybersecurity, data analytics, process automation, ACL, Tableau, SharePoint, and/or internal controls over financial reporting (ICFR).
• Ability to work as an independent contributor and a team member
• Ability to supervise projects and provide feedback to improve knowledge and understanding of less experienced staff.
• Excellent project management, analytical, interpersonal, oral and written communication skills.
• Strong organizational skill, attention to detail and ability to adapt to changing priorities to meet business goals/objectives.
• Effective training and mentoring skills.
• Professionalism, dependability, integrity and trustworthiness combined with a cooperative attitude.
• Keep current of general business, economic developments, regulatory requirements, and evolving technology and apply that understanding to identify areas of IT audit significance and best practices.
• Self-motivated with strong self-awareness and driven to continual develop
• Ability to perform all field work in a competent and professional manner.
• Employ strategic thinking and appropriate judgment to complete risk-based audits.
• Travel: 5% or less

This opportunity provides the following:

• Challenging and rewarding work environment
• Growth and development opportunities within UHS and its subsidiaries
• Competitive Compensation
• Excellent Medical, Dental, Vision and Prescription Drug Plan
• 401k plan with company match
• Generous Paid Time Off
  

*UHS is a registered trademark of UHS of Delaware, Inc., the management company for Universal Health Services, Inc. and a wholly-owned subsidiary of Universal Health Services, Inc. Universal Health Services, Inc. is a holding company and operates through its subsidiaries including its management company, UHS of Delaware, Inc. All healthcare and management operations are conducted by subsidiaries of Universal Health Services, Inc. To the extent any reference to "UHS or UHS facilities" on this website including any statements, articles or other publications contained herein relates to our healthcare or management operations it is referring to Universal Health Services' subsidiaries including UHS of Delaware. Further, the terms "we," "us," "our" or "the company" in such context similarly refer to the operations of Universal Health Services' subsidiaries including UHS of Delaware. Any employment referenced in this website is not with Universal Health Services, Inc. but solely with one of its subsidiaries including but not limited to UHS of Delaware, Inc.

UHS is not accepting unsolicited assistance from search firms for this employment opportunity. Please, no phone calls or emails. All resumes submitted by search firms to any employee at UHS via-email, the Internet or in any form and/or method without a valid written search agreement in place for this position will be deemed the sole property of UHS. No fee will be paid in the event the candidate is hired by UHS as a result of the referral or through other means.

EEO Statement
All UHS subsidiaries are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates. UHS subsidiaries are equal opportunity employers and as such, openly support and fully commit to recruitment, selection, placement, promotion and compensation of individuals without regard to race, color, religion, age, sex (including pregnancy, gender identity, and sexual orientation), genetic information, national origin, disability status, protected veteran status or any other characteristic protected by federal, state or local laws.
We believe that diversity and inclusion among our teammates is critical to our success.

Notice
At UHS and all our subsidiaries, our Human Resources departments and recruiters are here to help prospective candidates by matching skillset and experience with the best possible career path at UHS and our subsidiaries. We take pride in creating a highly efficient and best in class candidate experience. During the recruitment process, no recruiter or employee will request financial or personal information (Social Security Number, credit card or bank information, etc.) from you via email. The recruiters will not email you from a public webmail client like Hotmail, Gmail, Yahoo Mail, etc. If you are suspicious of a job posting or job-related email mentioning UHS or its subsidiaries, let us know by contacting us at: https://uhs.alertline.com or 1-800-852-3449.