Manager, IT Internal Audit

Description

Position Summary: 

Manager, IT Internal Audit is responsible for planning, executing, and overseeing information technology and integrated audits to assess the effectiveness of IT governance, risk management, cybersecurity, and internal controls across the organization. This role plays a critical part in protecting patient data, ensuring regulatory compliance, and safeguarding revenue cycles within a highly regulated healthcare environment. The role partners closely with IT, Compliance, and external auditors to identify risks, recommend improvements, and enhance overall IT control maturity.

  

Essential Functions and Job Responsibilities:  

• Manage audits covering key IT Risk areas such as SOX and IT general controls (ITGCs), cybersecurity (e.g., vulnerability management, patch management, incident management), data privacy, and application controls supporting financial, operational, and compliance processes
• Plan, scope, and execute IT and integrated audits, including system implementations and post-implementation reviews
• Partner with IT Audit Directors to complete the development and execution of a risk-based IT audit plan aligned to healthcare regulations and organizational priorities
• Evaluate IT compliance with healthcare regulations and frameworks
• Assess IT risks related to patient data, billing and reimbursement systems, and third-party vendors
• Identify opportunities to streamline, automate, or integrate AI into audit processes
• Oversee audit work performed by internal staff and external providers, ensuring work meets professional standards
• Coach and train less experienced staff on audit methodology and company operations 
• Communicate audit results, risk exposure, and remediation recommendations clearly to management and leadership
• Support IT Audit Directors to identify and validate corrective actions and monitor remediation efforts
• Serve as a trusted advisor to management on IT risk, control design, and process improvements
• Support external audits, regulatory reviews, and compliance assessments as needed
• Demonstrate intellectual curiosity and passion for learning 
• Stay current on emerging technological risks, healthcare regulations, and cybersecurity threats
• Perform data analytics to identify anomalies, control deficiencies, and process gaps
• Prepare clear, concise audit reports documenting findings, root causes, and practical remediation recommendations
• Develop and maintain working knowledge of current HME products and services offered by the company
• Maintain patient confidentiality and function within the guidelines of HIPAA
• Completes assigned compliance training and other educational programs as required
• Maintains compliance with AdaptHealth’s Compliance Program
• Perform other related duties as assigned

Management/Supervision:

• Responsible for selection and hiring of qualified staff, ensuring an effective on-boarding and providing comprehensive training and regular feedback
• Accomplishes staff results by communicating job expectations; planning, monitoring and appraising job results; coaching, counseling, and disciplining employees; developing coordinating; and enforcing systems. Policies, procedures, and productivity standards 
• Establishes annual goals and objectives for the department based on the organization’s strategic goals 
• Responsible for achieving organizational performance and retention goals, including timely completion of performance evaluations

Competency, Skills, and Abilities: 

• Strong knowledge of IT general controls, application controls, and cybersecurity practices
• Ability to translate technical concepts as well as organizational risks into business-focused value-add recommendations
• Understanding of risk management frameworks (e.g., COSO, COBIT, NIST, ISO)
• Strong analytical and problem-solving skills with attention to detail
• Excellent written and verbal communication skills and demonstrated ability to lead strong and effective teams
• Excellent computer skills with advanced proficiency in Word, Excel, and PowerPoint
• Working knowledge of healthcare regulatory requirements and healthcare systems such as EHRs, billing platforms, inventory systems
• Adept at multi-tasking; one who thrives in an environment of rapid change
• Highly motivated, enthusiastic, curious, and dynamic professional. 
• Articulate. Open communicator, inquisitive, and not afraid to challenge
• Demonstrates sense of urgency and ability to work independently with tight deadlines
• Understands business implications of decisions 
• Strong drive, dedication, and work ethic
• Unwavering commitment to eth