Senior Data Engineer, Internal Audit
Build audit-ready data pipelines and analytical models for UMC Health System. Support outsourced IT audits by assessing cybersecurity risks, controls, and technical findings.
Aprašymas
- Develop and maintain secure ELT pipelines from enterprise and approved cloud sources.
- Validate, transform, and load reliable data into approved warehouses, marts, and audit workspaces.
- Design and optimize databases, schemas, data models, and reusable analytical structures with advanced SQL.
- Form risk-based hypotheses, analyze data for patterns and exceptions, investigate causes, and separate indicators from confirmed findings.
- Create reproducible audit workpapers that document data sources, transformations, validation, limitations, code, and conclusions.
- Share results with audit colleagues and explain technical findings to management in clear business language.
- Act as the department’s primary IT contact for outsourced IT audits.
- Assess system architecture, configurations, integrations, logs, and security tools to challenge explanations and uncover potential risks.
- Review prior IT audit plans and compensating controls for risk coverage, precision, frequency, evidence reliability, and exposure reduction.
- Examine external audit and assessment scopes and results to find technology risks, systems, dependencies, and control areas that remain unaddressed.
- Coordinate evidence collection and follow-up efficiently.
- Turn technical and system issues into actionable business terms, and translate business risks into technical terms for IT.
Reikalavimai
- Bachelor’s degree in computer science, information systems, data engineering, cybersecurity, accounting information systems, or a related field; four additional years of directly related experience may substitute.
- 3–5 years of progressively responsible, hands-on data engineering experience, including ELT or ETL pipelines, data warehousing, database design or modeling, and data-quality controls.
- At least two years supporting IT audit, IT risk management, information security, or IT controls.
- Active CISA or CISSP certification required within 18 months of hire and maintained in good standing.
- Maintain the continuing education required for the applicable certification throughout employment.
- Advanced SQL skills and hands-on experience with Microsoft SQL Server.
- Working proficiency in data transformation, analysis, and automation.
- Working knowledge of NIST, COBIT, or ISO 27001 frameworks.
- Ability to work independently, learn unfamiliar systems, question incomplete explanations, manage competing priorities, and communicate with engineers, process owners, executives, external auditors, and governance committees.
- Ability to collaborate effectively across audit, IT, and business teams.
- Preferred: master’s degree, 7+ years of data engineering experience, 3+ years in IT audit or IT risk and controls, regulated-industry experience, and familiarity with EHR, ERP, HR/payroll, timekeeping, identity, security, audit management, backup, cloud, API, or OData platforms.
- Preferred: familiarity with MySQL or another major relational database, JavaScript, APIs, OData, FedRAMP, Workday, and EPIC.
Privalumai
- Equal employment opportunity and protection from discrimination and harassment.
- Reasonable accommodations are available during the hiring process.