Certified Information Systems Auditor

Information Systems Audit Officer

1. Responsible for preliminary risk assessment, preparation of audit plan and program, execution, report writing, and closing meeting with Management as necessary on audit of Information Technology (IT) Units and Application Systems.
2. Leading project audits and providing advisory support to IT projects of the Hospital involving software development/ acquisition.
3. Performs other tasks as necessary such as pre and post implementation system review, access reviews, IT infrastructure and Network security audit, vendor contract review, policy and process reviews, etc.

Provides technical support to IA activities on development or management of computer-assisted audit tools and techniques (CAATTs).

Skills Preferred:

1. Proficient in Microsoft Applications
2. Knowledge or has performed audit related to the following:

• Project Management
• Application Systems – Patient Management System, ERP, etc.
• System Development Life Cycle (SDLC)
• System’s physical and logical security
• IT Infrastructure and Network Security
• Vulnerability assessment and penetration testing (VAPT)
• Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP)
• Data Privacy
• Vendor Contract
• Knowledge of SQL Scripting