One of the nation’s largest and most respected providers of hospital and healthcare services, Universal Health Services, Inc. (NYSE: UHS) has built an impressive record of achievement and performance. Growing steadily since its inception into an esteemed Fortune 300 corporation, annual revenues were $15.8 billion in 2024. During the year, UHS was again recognized as one of the World’s Most Admired Companies by Fortune; and listed in Forbes ranking of America’s Largest Public Companies.
Headquartered in King of Prussia, PA, UHS has approximately 99,000 employees and continues to grow through its subsidiaries. Operating acute care hospitals, behavioral health facilities, outpatient facilities and ambulatory care access points, an insurance offering, a physician network and various related services located all over the U.S. States, Washington, D.C., Puerto Rico and the United Kingdom. www.uhs.com
The UHS Corporate Internal Audit Department is seeking a dynamic and talented Lead IT Auditor. In collaboration with the Director, Internal Audit IT and Analytics, the Lead IT Auditor, will materially contribute to organizational and departmental IT and analytics projects. They will lead the planning and execution of the annual Sarbanes-Oxley compliance assessment of information technology controls and underlying information used in controls (data & reports), as well as leading all phases of the internal audit project lifecycle, including the planning, execution and reporting on operational audits, system conversions/implementation, data analytic projects and/or other compliance monitoring assessments. Additionally, they will identify, develop, and maintain data analysis solutions to aid in the effectiveness and efficiency of assurance and technology audits. The lead will be responsible conducting projects, performing thorough reviews, and timely completion of work product, as well as training and overseeing staff. They will ensure audit procedures performed fulfill the purposes and responsibilities established in the department as well as conform to the COSO Framework, COBIT Framework and the Standards for the Professional Practice of Internal Auditing published by the Institute of Internal Auditors or a similar professional organization.
Key responsibilities include:
Planning Scope and Procedures:
- Assist in the development and execution of the annual Internal Audit Plan through scoping, risk assessments, and project planning for SOX, operational audits, and ad hoc projects.
- Provide input in the selection and development of appropriate audit procedures while considering applicable risks and controls.
- Evaluate approach and propose changes to make process more effective/efficient. (i.e. expand scope coverage or incorporate use of analytic tools.).
- Identify, evaluate, and explain risks and controls for business processes and technology.
- Research new audit areas, risks, and technologies and compile audit programs or steps to evaluate controls.
- Review and analyze methodologies to ensure consistent application and use of analytic tools.
Identify and Evaluate Controls:
- Conduct walkthroughs with IT and business owners throughout the company to document the design and understanding of internal processes, including via narratives and flowcharts
- Assess risks, evaluate the design and operating effectiveness of controls over information systems and report conclusions and recommendations to various stakeholders.
- Perform detailed internal controls testing, including underlying information used in a control, such as IT system generated reports in accordance with COSO/COBIT frameworks.
- Execute audit work programs as assigned in a timely manner and with adequate supporting documentation for test work, findings, and corrective action plans.
- Exercise good judgment by considering all of the facts and circumstances involved as well as their strategic impact.
- Work with management to develop action plans to remediate findings and address areas for improvement and track corrective actions through to completion.
Report Preparation/ Review:
- Timely complete and review work papers for each audit to ensure there is adequate supporting documentation for test work performed, findings and any corrective actions proposed.
- Review summaries of issues identified as well as process improvement recommendations and impact of controls deficiencies.
- Prepare comprehensive audit reports that are well-written and supported by the work papers.
- Thoroughly discuss implications of deficiencies on both the technology and business process environments with various process owners.
- Materially participate in meetings with more tenured management.
Special Projects/Investigations:
- Execute assignments discreetly, effectively, and efficiently in sensitive or confidential circumstances.
- Provide input for aspects of special projects based upon experience.
Trainer/Lead:
- Provide guidance and training to less experienced staff as well as perform detailed reviews of work prepared by staff.
- Provide oversight of staff and senior auditors to ensure timely completion of assigned projects.
- Assist with staff training to create a positive learning and working environment.
- Actively provide constructive feedback to less experienced staff on their work product.
- Identify areas of departmental knowledge deficiency and propose training opportunities for staff.
- Seek out feedback from various process owners on the audit process and areas of improvement.
- Stay current on changing rules and regulations both in the industry and profession and provide updates to Company management. Attend trainings and share learnings to build Internal Audit, Internal Controls, Risk Management, and/or Governance awareness on the team and throughout the business, and evaluate implement and/or use tools to enhance process efficiencies and effectiveness
- Proactively develop business partnerships and maintain a presence with management to understand business strategies, challenges, and risks.
- Build and foster relationships with external auditors and business partners throughout the company to continue to develop the Internal Audit brand to be a Trusted Advisor, to add further value throughout the company to provide insights and advise on key initiatives.