Internal Auditor @ University of Maryland Medical System

Job Requirements

Job Summary

The Internal Auditor provides independent, objective assurance and advisory services that support the University of Maryland Medical System's (UMMS) mission, strategic objectives, and commitment to effective governance, risk management, and internal control. Under the direction of Internal Audit and Enterprise Risk Management leadership, the position performs operational, financial, information technology, compliance-related, and other risk-based audits across UMMS and its member organizations.

The role participates in all phases of the audit lifecycle, including risk assessment, planning, fieldwork, reporting, monitoring, and follow-up. The Internal Auditor evaluates the design and operating effectiveness of controls, applies data analytics and professional judgment, develops clear and practical recommendations, and collaborates with stakeholders while maintaining independence, objectivity, confidentiality, and professional skepticism.

Primary Responsibilities

Audit Planning and Risk Assessment

• Participates in the planning and execution of operational, financial, information technology, compliance-related, and other risk-based assurance and advisory engagements across UMMS and its member organizations.
• Performs engagement-level risk assessments and assists in defining audit objectives, scope, key risks, controls, and procedures to ensure significant areas are appropriately evaluated.
• Develops or contributes to risk-based audit programs that align planned procedures with engagement objectives and incorporate data analytics when appropriate.
• Gathers and analyze background information, policies, prior audit results, regulatory requirements, process data, and stakeholder input to support effective scoping and planning.

Audit Fieldwork and Documentation

• Conducts interviews, process walkthroughs, document reviews, data analysis, sampling, and control testing in accordance with approved audit programs and professional standards.
• Evaluates the design and operating effectiveness of governance, risk management, and internal controls and identifies opportunities to strengthen processes, improve efficiency, and reduce risk.
• Collects and validates information from relevant systems and data sources, including electronic health records, enterprise resource planning systems, billing platforms, and other operational applications, as applicable to the engagement.
• Uses Microsoft Copilot, Excel, Power BI, Tableau, audit management software, and other approved tools to extract, manipulate, analyze, and visualize data; identify trends, anomalies, control gaps, and potential audit targets; and support well-founded conclusions.
• Prepares clear, organized, complete, accurate, and well-supported workpapers documenting procedures performed, evidence reviewed, results, conclusions, and resolution of supervisory review comments.
• Independently gathers and evaluates facts, identifies potential issues, and timely escalates significant risks, concerns, delays, or barriers to engagement and Internal Audit leadership.

Reporting, Communication, and Follow-Up

• Develops clear, risk-based audit observations and practical recommendations that identify the condition, criteria, cause, impact, and appropriate corrective action, in collaboration with engagement leadership and stakeholders.
• Communicates complex information clearly, objectively, and professionally in written and verbal formats to stakeholders across organizational levels and disciplines.
• Assists in preparing audit reports, executive summaries, dashboards, presentations, and other communications for management and governance audiences.
• Participates in entrance conferences, status meetings, issue validation discussions, closing meetings, and other stakeholder communications throughout the engagement lifecycle.
• Tracks management action plans, evaluates supporting evidence, and perform follow-up procedures to determine whether management action plans have been implemented and appropriately address identified risks.
• Supports external audit, regulatory examination, investigation, and other assurance-provider requests when assigned.

Stakeholder Engagement and Department Support

• Builds effective working relationships across UMMS while maintaining Internal Audit's independence, objectivity, confidentiality, and professional skepticism.
• Plans and prioritizes assigned work, manages multiple engagements and deadlines, communicates status and capacity concerns proactively, and takes on additional responsibilities when appropriate to support team priorities.
• Collaborates with cross-functional stakeholders to obtain information, understand processes, validate data, and develop practical recommendations while constructively navigating differing perspectives or conflicts.
• Participates in enterprise risk assessments, departmental initiatives, quality improvement activities, and special projects under the direction of Internal Audit and Enterprise Risk Management leadership.
• Contributes to the continued development of audit methodologies, templates, control libraries, analytics, dashboards, technology tools, and reporting practices.
• Identifies and recommends opportunities to improve audit processes, stakeholder experience, work quality, and department effectiveness; supports implementation and monitoring of approved improvements.
• Demonstrates teamwork by sharing information and ideas, accepting constructive feedback, and supporting engagement and department priorities.
• Performs all other related duties as assigned.

Work Experience

Education & Experience - Required

• Bachelor’s degree in accounting, Finance, Business Administration, Healthcare Administration, Public Health, Information Systems, Compliance, Risk Management, or a related field.
• One (1) to three (3) years of experience in internal audit, external audit, compliance, healthcare operations, finance, risk management, data analysis, or a related field.
• Experience using Microsoft Office applications, including Excel, Word, and PowerPoint.

Education & Experience - Preferred

• Experience in the healthcare industry or within a complex, regulated organization.
• Experience performing internal audits, compliance audits, regulatory reviews, monitoring activities, risk assessments, or internal control testing.
• Experience with data analytics, data visualization, business intelligence tools, or audit management software.
• Professional certification, or active progress toward certification, such as Certified Internal Auditor (CIA), Certified Public Accountant (CPA), Certified Information Systems Auditor (CISA), Certified in Healthcare Compliance (CHC), Certification in Risk Management Assurance (CRMA), or another relevant credential.

Knowledge, Skills, & Abilities

• Knowledge of internal auditing principles, risk management concepts, internal controls, and professional standards.
• Working understanding of healthcare compliance program elements and the ability to interpret applicable regulations, policies, and business requirements.
• Strong analytical, critical-thinking, research, and problem-solving skills.
• Ability to evaluate processes and controls, recognize risk, draw objective conclusions, and develop practical recommendations.
• Effective written, verbal, interpersonal, and presentation skills, including the ability to communicate complex issues clearly and concisely.
• Strong organizational and project-management skills with the ability to manage multiple priorities and meet established deadlines.
• Ability to maintain confidentiality and exercise sound judgment, independence, objectivity, and professional skepticism.
• Demonstrated attention to detail, commitment to quality, and ability to produce accurate and well-supported work products.
• Ability to work independently and collaboratively and to build effective working relationships with personnel at all organizational levels.
• Proficiency with Microsoft Excel, Word, and PowerPoint, with the ability to learn and use audit, analytics, and reporting technologies.
• Maintains current knowledge of internal auditing standards, healthcare industry developments, applicable laws and regulations, emerging risks, technology and data privacy trends, and relevant UMMS policies and procedures through training, professional reading, seminars, and participation in professional organizations.
• Applies applicable laws, regulations, policies, accreditation requirements, and professional standards when evaluating processes and controls and seeking guidance when requirements are unclear.
• Acts with integrity and high ethical standards and support a culturally welcoming and inclusive work environment consistent with UMMS's Mission, Vision, and Values.
• Maintains confidentiality and safeguards sensitive information at all times; recognizes and communicates ethical or legal concerns through established channels.
• Demonstrates accountability by independently completing accurate, high-quality work on time, responding promptly to requests, and completing required training, meetings, self-appraisals, and organizational health requirements.

Benefits

All your information will be kept confidential according to EEO guidelines.

Compensation

• Pay Range: $35.08 - $52.64
• Other Compensation (if applicable):
• Review the 2025-2026 UMMS Benefits Guide