Staff IT Auditor

Headquartered in King of Prussia, PA, Universal Health Services, Inc. (NYSE: UHS) is one of the nation’s largest and most respected providers of hospital and healthcare services. Since our founding in 1979, UHS has grown steadily into a premier Fortune 500® corporation perennially recognized by multiple esteemed national rating entities. Through its subsidiaries, UHS operates inpatient acute care facilities, inpatient behavioral health facilities, outpatient and other facilities, nationwide virtual behavioral health services, an insurance offering, a physician network and various related services with physical locations in the U.S., Puerto Rico, Ireland and United Kingdom. www.uhs.com. The Corporate Internal Audit department is seeking a dynamic and talented Staff IT Auditor. In collaboration with the Senior and Lead IT Auditor, the Staff IT Auditor will assist in executing technology audits, supporting the IT Sarbanes-Oxley compliance program, and contributing to business process SOX audits across multiple business divisions. The IT Auditor will conduct walkthroughs, document key processes and controls, perform audit testing procedures, and communicate findings and results to process owners. Additionally, assist with the execution of ACL data analysis solutions and gain an understanding of using basic scripting, data quality, and data analysis reporting. Ensure audit procedures performed fulfill the purposes and responsibilities established in the department to conform to the COBIT Framework and the Standards for the Professional Practice of Internal Auditing published by the Institute of Internal Auditors or a similar professional organization. Key responsibilities include: Planning Scope and Procedures: Aid in planning with various stakeholders to conduct audits of IT general controls, system implementation, business application, and direct access to data. Provide input in the selection and development of appropriate audit procedures for management approval. Identify and Evaluate Controls: Participate in and document annual walkthrough meetings with various stakeholders. Execute audit work programs as assigned in a timely manner and with adequate supporting documentation for test work, findings, and corrective action plans. Evaluate the effectiveness of controls over information systems and discuss conclusions with management independently, with assistance as needed. Conduct IT general controls, system implementation, business application, and direct access to data audits. Exercise sound judgment by considering all of the facts and circumstances involved. Special Projects/Investigations: Execute assignments discreetly, effectively, efficiently and as directed in sensitive or confidential circumstances. Provide input for aspects of special projects based upon experience. Develop basic knowledge of ACL functions and scripting.

Position Requirements: Required: Bachelor’s degree in Accounting, Information Technology/Computer Information Systems or related field is required. Willingness and motivation to pursue a professional certification [e.g., Certified Information Systems Auditor (CISA), Certified Information Security Systems Professional (CISSP)] and/or Master’s degree. Awareness of SOX and audit frameworks and standards, including COSO, COBIT, and Institute of Internal Auditors (IIA) Standards. Basic understanding of technology environments including database structures. Familiarity with IT audit best practices including access controls, change control, back-up controls, and direct access to data. Familiarity with diverse business process applications. Willingness to cross-train and develop familiarity with business process SOX audits and operational audit activities beyond IT SOX audit. Willingness to develop familiarity with data analytics and its use in continuous monitoring. Keep current of general business and economic developments and apply that understanding to identify areas