IT Internal Auditor

Join the transformative team at City of Hope, where we're changing lives and making a real difference in the fight against cancer, diabetes, and other life-threatening illnesses. City of Hope’s growing national system includes its Los Angeles campus, a network of clinical care locations across Southern California, a new cancer center in Orange County, California, and treatment facilities in Atlanta, Chicago and Phoenix. Our dedicated and compassionate employees are driven by a common mission\: To deliver the cures of tomorrow to the people who need them today.

The IT Internal Auditor is responsible for supporting and executing information technology audits across City of Hope and related entities. This role evaluates IT governance, cybersecurity, infrastructure, application controls, and data management processes while ensuring compliance with regulatory requirements. You will partner closely with business and technology leaders to assess risk, strengthen internal controls, and support the secure and effective use of technology across the organization.

As a successful candidate, you will\:

• Execute IT audits across cybersecurity, infrastructure, cloud environments, applications, and data governance
• Evaluate IT general controls, including access management, change management, and system development lifecycle processes
• Assess compliance with regulatory and security requirements, including HIPAA and privacy standards
• Perform risk assessments and contribute to IT audit planning activities
• Conduct technical testing, including automated controls and data analytics
• Document audit procedures, findings, and recommendations with clarity and precision
• Collaborate with IT, compliance, and business teams to address risks and remediation plans
• Identify emerging technology risks, including cybersecurity threats and evolving industry trends
• Perform audit fieldwork including interviews, walkthroughs, and analysis of system controls
• Validate remediation efforts and conduct follow-up testing to ensure risk mitigation