Manager, Information Security Compliance (SOX ITGC)

Ardent Health is a leading provider of healthcare in growing mid-sized urban communities across the U.S. With a focus on people and investments in innovative services and technologies, Ardent is passionate about making healthcare better and easier to access. Through its subsidiaries, Ardent delivers care through a system of 30 acute care hospitals, 24,000+ team members and more than 280 sites of care with over 1,800 affiliated providers across six states.

POSITION SUMMARY

The Manager, Information Security Compliance (SOX ITGC) will ensure the development and maintenance of SOX ITGC policies and procedures, manage the Risk and Control Matrix (RACM), monitor compliance, and conduct risk assessments. This position will work closely with IT leadership, subject matter experts, risk management, compliance, and Internal Audit to maintain a robust SOX ITGC compliance program

• Develop and implement policies and procedures to ensure compliance with SOX 404 regulations related to IT General Controls.
• Regularly review and update policies to reflect current standards and practices.
• Maintain the Risk and Control Matrix (RACM) by ensuring current control descriptions are accurately stated, effective and align with SOX objectives.
• Continuously monitor the organization's adherence to SOX requirements, internal policies, and industry standards.
• Conduct systematic risk assessments to identify, evaluate, and prioritize risks related to SOX compliance.
• Facilitate team meetings to discuss compliance issues and updates.
• Design and monitor KPI's indicating the continued operating effectiveness of IT controls.
• Develop and conduct training programs to educate control owners on SOX compliance requirements.
• Coordinate internal audits to evaluate the effectiveness of IT controls and ensure compliance with SOX 404 regulations. Work with internal and external auditors to provide necessary documentation and support during audit processes.

Education & Experience:

• Bachelor's degree in Information Technology, Cybersecurity, Business Administration, or a related field.
• Five years of experience in information security compliance, IT Audit, or a related field.
• Experience working in highly ambiguous environments, with the capability to independently identify problems, develop solutions, and drive initiatives to completion.
• Certifications such as CPA, CISA, CRISC, or CISSP.. preferred
• Experience in the Healthcare industry and/or publicly traded companies, preferred.
• Experience with Ardent Key Systems: Epic, Lawson, Active Directory, and SailPoint, preferred.
• Experience with scripting languages such as SQL and PowerShell, preferred.

Knowledge, Skills & Abilities:

• Strong understanding of IT General Controls (ITGCs) and their role in SOX compliance, as well as familiarity with IT infrastructure and security architecture.
• Ability to understand business issues and objectives and translate them into compliance solutions.
• Familiarity with Microsoft O365 (word, teams, etc.) and ServiceNow. preferred.
• Exposure to Alteryx or related data analytics and automation tools, preferred

#LI-AG1