QTC Management, Inc. · 1 month ago
IT Audit & Compliance Program Manager
United States
Full-time
Remote
Senior Level, Lead/Staff
14+ years expQTC Management, Inc. is seeking an IT Audit & Compliance Program Manager to join their Privacy Team. This role involves evaluating IT controls for compliance, leading SOX audit efforts, and managing enterprise risk, while ensuring adherence to industry standards and regulations.
Hospital & Health Care
No H1B
U.S. Citizen Only
Responsibilities
SOX Audit Leadership: Lead efforts to ensure compliance with Sarbanes-Oxley (SOX) requirements, including the design, implementation, and testing of IT controls related to financial reporting
Risk Management: Develop and implement risk management strategies to identify, assess, and mitigate IT-related and other enterprise risks across the organization
Internal IT Audits: Plan, manage, and conduct internal audits, prepare written reports of audit findings. Evaluate systems and procedures to ensure compliance with sound management practices, IT department controls, and risk frameworks
Control Design and Effectiveness: Assess the reliability and quality of IT controls, accounting systems, and reporting systems. Develop and implement internal control procedures to address weaknesses and ensure compliance with legal and regulatory requirements
IT Audit Documentation: Prepare audit work papers in accordance with generally accepted auditing standards. Document performance through narrative reports, flow charts, and spreadsheets. Prepare audit reports identifying strengths, weaknesses, findings, and recommendations
External IT Audit Coordination: Oversee and coordinate audits conducted by external auditors, including SOX audits. Prepare RFPs and resulting contracts for services and serve as liaison during the audit process
Collaboration with IT: Work closely with the Information Technology Department to develop audit programs, determine scope, and establish approaches to conducting audits within constraints of time and staff availability
Compliance Management: Manage, track, and report on compliance with industry standards and regulations, including HIPAA, NIST 800-53, FISMA, and SOX
Risk Assessment and Reporting: Manage, track, and provide regular updates to senior management on risk exposure, audit findings, and compliance status
Qualification
Required
Bachelor's degree from an accredited college in accounting, finance, business administration, or a technology-related discipline (e.g., Computer Science, Engineering, Information Systems) or equivalent experience/combined education
14+ years of progressively responsible internal auditing, compliance, and enterprise risk management experience, including experience in SOX compliance and information security risk management
Experience working with compliance frameworks such as HIPAA, NIST 800-53, COBIT, ITIL, FISMA, and other industry standards
Possess one or more of the following industry-recognized security qualifications: CISA, CISM, CRISC, or CISSP
Strong understanding of SOX requirements and IT general controls (ITGCs)
Awareness of common exploits, vulnerabilities, and methods to prevent them
Proven ability to assess and mitigate IT risks and implement effective controls
Excellent written and verbal communication skills, with the ability to prepare detailed audit reports and present findings to senior management
Must be able to successfully pass a National Agency Check with Inquiries (NACI) background investigation
Benefits
Health and Wellness programs
Income Protection
Paid Leave
Retirement
Comprehensive leave
Holiday
Medical
Dental
Life
Accident
Disability coverages
Retirement plan contributions
Other health and welfare benefits and payments
Company
QTC Management, Inc.
Leidos QTC Health Services collaborates closely with government and non-government customers to address current and future program needs within the health services domain.
1001-5000 employees
Funding
Current Stage
Late StageLeadership Team
Angela Gutierrez, PHR SHRM-CP
HR Business Partner
Laura Ochoa, PHR, SHRM-CP
HR Business Partner
Company data provided by crunchbase