Information Systems Auditor

About the role

The Information Systems Auditor provides independent assurance and advisory support for the hospital’s information systems, covering governance, risk management, internal controls, information security, compliance and responsible technology use.

Key responsibilities

• Deliver assurance on the security, integrity and availability of patient, staff and organisational data.
• Assess and improve governance, risk management and internal control frameworks for clinical and business IT systems.
• Ensure compliance with health data standards (HL7/FHIR) and relevant regulations (ISO 27799, data protection laws).
• Guide responsible adoption of emerging technologies such as AI, automation and data analytics.
• Maintain continuity of clinical and business operations through effective digital system optimisation.

Required profile

• Minimum 3 years of experience in information systems audit, IT risk management or compliance assurance, with at least 1 year in a supervisory or management role.
• Preferably experience within a hospital or other regulated healthcare environment.
• Working knowledge of Hospital/Health Information Systems, Electronic Medical Records, ERP systems, databases, networking, web application development, cloud technologies and health data exchange standards (HL7/FHIR).
• Good understanding of COSO ERM, COBIT 2019, ISO/IEC 27001, ISO 27799 and applicable data‑protection and digital‑health regulatory requirements.

Required skills

• Audit tools and data‑analytics platforms such as ACL/Galvanize, IDEA or TeamMate+.
• AI governance, AI risk management, model validation and responsible use of generative AI.
• Experience with CAATs (Computer‑Assisted Audit Techniques).
• Familiarity with cloud environments and web application security.