Job TitleManager IT Internal Audit LocationIndependence FacilityIndependence West Creek DepartmentInternal Audit-Finance Job CodeT32045 ShiftDays Schedule8:00am-5:00pm Job Summary Job Details We are seeking an Information Technology Audit Manager with 6+ years of experience executing audits in IT, Cybersecurity, and emerging digital competencies. As a Manager of Internal Audit, you will prepare detailed audit programs and execute the IT audit plan using agile methodology concepts. In this role, you will perform audit procedures, manage audit staff and seniors, prepare draft audit reports for review with the Director, and help identify and report on control improvements in response to enterprise IT and cybersecurity risks. By taking this opportunity, you will add value to all areas of Cleveland Clinic and make meaningful impacts to help our patients, community, organization and caregivers. A caregiver in this role works a hybrid schedule from 8:00 a.m. – 5:00 p.m., with two days in office at Independence West Creek. To be considered for this position, candidates must reside in the Greater NE Ohio area. A caregiver who excels in this role will: - Prepare and complete audit programs and participate in completing an annual risk assessment. - Evaluate the adequacy and effectiveness of controls intended to ensure the safeguarding of assets and reducing or recovering costs. - Manage audit staff and seniors to ensure effective completion of audit objectives. - Supervise department staff and seniors, review audit work papers and test results as assigned. - Prepare draft audit announcements, leads audit kickoff meetings, offer recommendations to reduce risk based upon observed and confirmed control weaknesses and follow up on management responses to audit findings. - Manage electronic audit papers using departmental software and track audit time allocation. - Prepare written reports, effectively communicate audit findings to Institute and Departmental Leadership and make recommendations for remediation related to findings. - Conduct effective audit meetings and maintain on-going communication on status of recommendations with management. - Assist with departmental initiatives. - Manage the testing of internal control effectiveness. - Review all documentation and test results. - Maintain on-going communication on status of recommendations with management. - Comply with the IIA Standards of Professional Practice of Internal Auditing and Code of Ethics. - Leverage agile methodology concepts in executing procedures. - Help identify and report out on control improvements in response to enterprise IT/Cybersecurity risks. - Effectively document applicable IT and cyber audit and advisory findings, including recommendations for improving controls and complying with regulatory requirements. - Other duties as assigned. Minimum qualifications for the ideal future caregiver include: - Bachelor's degree from an accredited college or university with a major in Accounting, Information Systems, or related field - Six years of progressive professional and functionally relevant work experience - Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Internal Auditor (CIA) or other related certification - Comprehensive knowledge of auditing standards, analytical techniques and internal controls - Excellent oral and written communication skills - Ability to walk to various locations on campus as well as travel to off-campus sites - Dexterity sufficient to operate a PC computer in the course of work Preferred qualifications for the ideal future caregiver include: - Advanced degree - Ability to supervise senior and staff auditors and multiple priorities and projects with competing priorities - General business knowledge of IT/Cybersecurity concepts - Familiarity with the Health Insurance Portability and Accountability Act (HIPAA) Security Rule/concepts and/or National Institute of Standards and Technology (NIST) Cybersecurity Framework Physical Requirements: - Typical physical demands include a high degree of dexterity to produce materials on a PC, normal or corrected vision, extensive sitting and frequent walking, occasional lifting or carrying 5 to 15 pounds in a typical business office environment. Personal Protective Equipment: - Follows standard precautions using personal protective equipment as required.