Information Systems Auditor

The Information Systems Auditor ensures independent assurance and advisory support for the Hospital’s information systems. This includes governance, risk management, internal controls, information security, compliance, and responsible technology use. The role safeguards patient, staff, and organizational information, maintains clinical and business operations, optimizes digital system usage, and promotes the responsible adoption of emerging technologies like AI, automation and data analytics.

A minimum of 3 years’ relevant experience in Information Systems audit, IT risk management, compliance assurance or related areas, at least 1 of which in a supervisory or management capacity, preferably within a hospital or other regulated healthcare environment.

Working knowledge of Hospital/Health Information Systems, Electronic Medical Records, ERP systems, databases, networking, web application development, cloud technologies and health data exchange standards such as HL7/FHIR.

Good understanding of COSO ERM, COBIT 2019, ISO/IEC 27001, ISO 27799 and applicable data protection and digital health regulatory requirements.

Working knowledge of AI governance, AI risk management, model validation, responsible use of generative AI, automation controls and the audit implications of AI-enabled healthcare, administrative and reporting systems will be an added advantage.

Experience using data analytics, CAATs or audit management tools such as ACL/Galvanize, IDEA, TeamMate+ or similar platforms will be an added advantage.