Astrana Health Careers

Description

• Identifies appropriate risks, control objectives and controls using appropriate IT control frameworks and other leading practice resources for guidance. Using accepted risk assessment techniques, proposes appropriate audit scope and control objectives for the areas under review. Continually evaluates the system of internal control, business operations and processes, and technical environment to determine the areas of highest risk.
• Conducts process and control walkthroughs, assesses the design of controls, develops, and enhances comprehensive test plans, and performs independent testing of internal controls to evaluate their operating effectiveness.
• Manages execution of audit test plans to validate relevant control objectives and testing approach. Interprets the significance of the test results and concludes on the design and operating effectiveness of the systems of internal control.
• Reviews the work and deliverables of the project team for sufficiency of scope, accuracy, completeness, and compliance with Company, IIA and ISACA standards.
• Maintains Internal Control Management Software (AuditBoard) and looks for opportunities to introduce efficiencies to audits using technology (i.e., Computer Assisted Audit Techniques or other automation), or professional trends.
• Identifies, develops, and documents audit issues and recommendations for improvement. Communicates the results of audit projects via written reports and/or oral presentations in a clear and concise manner. Provides practical and cost-effective recommendations to support business process improvement and/or enhance the overall control environment.
• Participates in new systems development/implementation projects to ensure appropriate controls are incorporated.

• Assists the Director of SOX with periodic reporting to the Audit Committee, development of the annual Risk Assessment and Internal Audit Plan, and championing internal control and corporate governance concepts throughout the enterprise.
• Develops and maintains productive professional relationships with colleagues, auditees and management through individual contacts and group meetings. Demonstrates effective collaboration skills required to obtain management buy-in for audit scope and to influence constructive change.

• Consistently demonstrates in-depth IT technical skills and understanding. Significant experience in having applied relevant IT technical knowledge to audits and special projects.
• Serves as an IT technical resource to Director of SOX, remaining current in new and emerging developments affecting information technology.
• Pursues professional development opportunities, including external and internal training, self-study, research of best practices and professional trends, and professional association memberships; shares knowledge with co-workers.

• Bachelor’ degree in Computer Science or Management Information Systems is preferred; or a bachelor’s degree in other Finance, Engineering, or Business-related field with IT-related experience (5 years minimum) is acceptable. Advanced degree is a plus.
• Five to ten years of experience conducting IT and operational audits at a public accounting firm and/or multi-national public company is essential.
• Primary audit experience in compliance, focused on SOX 404 IT compliance testing is required.
• Secondary operational audit experience, focused on audits of IT applications, infrastructure and processes is preferred. Big 4 and healthcare industry is highly desirable.
• CISA, CISSP, CISM, CIA, or other applicable professional certification is required.
• In-depth knowledge of IT control and governance frameworks (COBIT, ISO, NISTL, ITIL, COSO), along with Generally Accepted Auditing Standards, and standard audit procedures and techniques is required.
• In-depth knowledge of SOX is required, including control assessments, Application Controls and General Computing Controls. Working knowledge of other compliance laws (i.e., PCI, HIPAA, etc.) is preferred.
• Working knowledge of operating systems, applications (client-server and/or n-tier), databases, networks, security, systems development/integration, change management and SDLC is preferred. Working knowledge and experience with Sage 100, SAP Concur and Netwrix is a plus.
• Cybersecurity experience, e.g., cybersecurity readiness, penetration/vulnerability testing, post-breach analysis is preferred.

• Put Patients First
• Empower Entrepreneurial Provider and Care Teams 
• Operate with Integrity & Excellence
• Be Innovative
• Work As One Team

• Our organization follows a hybrid work structure where the expectation is to work both in office and at home on a weekly basis. The office is located at 1688 Garfield Avenue Alhambra, CA. 
• The total compensation target pay range for this role is between $130,000 - $150,000. This salary range represents our national target range for this role.