Manager, IT Audit & Compliance (Hybrid Remote)
Job title: Manager, IT Audit & Compliance (Hybrid Remote) in Pittsburgh, PA at UPMC
Company: UPMC
Job description: Join UPMC Corporate Finance as the Manager of IT Audit & Compliance!Are you a seasoned IT audit professional with a passion for ensuring high-quality audit results and driving organizational improvement? UPMC Corporate Finance is seeking a dynamic and experienced Manager of IT Audit & Compliance to lead our audit team and make a significant impact on our organization.Purpose: As the IT Internal Audit & Compliance Manager, you will oversee and ensure the delivery of high-quality audit results, focusing primarily on information technology. You will be responsible for recruiting, mentoring, and developing auditors, supporting them in their career objectives, and delivering consulting and audit reports to Executive and Line Management. You will also exercise delegated authority to make operational and personnel decisions in the absence of the IT Audit Director and/or Chief Audit & Compliance Officer and assist in developing risk assessments and the annual audit plan. Additionally, you will perform ongoing enterprise IT risk assessments, categorizing and ranking the risks, and adjusting the audit schedule or audit scope of work accordingly.Key Responsibilities:
- Department Goals: Successfully manage competing demands, participate in developing the Audit Plan and special projects on time and within budget, and monitor auditor productivity and workload.
- Leadership: Lead departmental and organizational special projects, guide auditors on performance and career development, and provide timely completion of performance reviews.
- Risks & Industry: Lead risk assessment meetings, assess IT risks quarterly, and compile audit schedules for presentation to UPMC Leadership.
- Technology: Possess advanced knowledge of technology controls and configurations, research and analyze new technologies, and stay current with emerging technologies.
- Workpapers & Reports: Use and approve standard department templates, develop new work program sections, ensure timely completion of workpapers, and validate and identify root causes of complex issues.
- High Visibility Management Role: This position offers a high visibility management entry point into a large and complex organization that is critical to the health and wellbeing of millions of people.
- Executive Interaction: You will interact with all levels of the organization, providing you with the opportunity to quickly make a difference.
- Impactful Work: Your work will drive organizational improvement and ensure compliance with current regulatory and industry practices.
- Bachelors degree and 6 years related work experience, including 5 years of experience in Information Technology/Information Security/IT Auditing, AND Certification or Masters degree required.
- Degree Preferences: Health Information Technology, Information Security, Computer Forensics, Computer Science, Information Technology/Systems.
- IT Experience Preferences: IT Auditing, Information Security, Information Technology, Health Care Applications.
- Representative IT Management Framework or Regulatory Experience Preferences: COBIT, HITRUST, ISO, ITIL, PMBOK, SOX (IT)
- Certification Preferences: CISA, CISSP, CIA, PMP