Lead IT Compliance Analyst

Description

Do you want to join an organization that invests in you as a Lead IT Compliance Analyst? At HCA Healthcare, you come first. HCA Healthcare has committed up to $300 million in programs to support our incredible team members over the course of three years.

HCA Healthcare offers a total rewards package that supports the health, life, career and retirement of our colleagues. The available plans and programs include:

• Comprehensive medical coverage that covers many common services at no cost or for a low copay. Plans include prescription drug and behavioral health coverage as well as free telemedicine services and free Air Med medical transportation.

• Additional options for dental and vision benefits, life and disability coverage, flexible spending accounts, supplemental health protection plans (accident, critical illness, hospital indemnity), auto and home insurance, identity theft protection, legal counseling, long-term care coverage, moving assistance, pet insurance and more.

• Free counseling services and resources for emotional, physical and financial wellbeing

• 401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service)

• Employee Stock Purchase Plan with 10% off HCA Healthcare stock

• Family support through fertility and family building benefits with Progyny and adoption assistance.

• Referral services for child, elder and pet care, home and auto repair, event planning and more

• Consumer discounts through Abenity and Consumer Discounts

• Retirement readiness, rollover assistance services and preferred banking partnerships

• Education assistance (tuition, student loan, certification support, dependent scholarships)

• Colleague recognition program

• Time Away From Work Program (paid time off, paid family leave, long- and short-term disability coverage and leaves of absence)

• Employee Health Assistance Fund that offers free employee-only coverage to full-time and part-time colleagues based on income.

Learn more about Employee Benefits ()

Note:
Eligibility for benefits may vary by location.

Position Summary

This role is responsible for overseeing and monitoring the effectiveness of IT internal controls over financial reporting for HCA Healthcare’s Sarbanes‑Oxley (SOX) and Systems and Organizational Controls (SOC) IT compliance program (i.e., performing second line responsibilities).

Responsibilities for this role include overseeing the design, implementation, effectiveness, and testing of IT general controls and IT application controls across the organization. This includes supporting the first line in executing control activities and addressing deficiencies. This also includes performing independent testing, risk assessments, and ensuring the organization remains aligned with SOX regulatory requirements.

This role is also responsible for collaborating with control owners, internal audit, and external auditors to ensure ongoing compliance with SOX requirements while driving improvements in HCA Healthcare’s IT control environment. This includes developing and delivering training and education to control owners on how to appropriately support and manage their IT SOX key controls. This also includes identifying opportunities to modernize, automate, and centralize controls testing, continuous monitoring, evidence gathering, etc.

Major Responsibilities:

• Overseeing IT general control processes in a complex IT environment entailing multiple applications, platforms, and IT processes.

• Identifying opportunities to modernize, automation, and centralization of controls testing, monitoring, evidence gathering, etc.

• Developing robust and formalized continuous compliance monitoring processes to ensure IT SOX key controls are being consistently and adequately performed.

• Formalizing and delivering training and education for first line staff on how to appropriately support and manage IT SOX key controls, including creation and maintenance of IPE.

• Partnering with stakeholders to ensure clear control ownership and accountability.

• Serving as a subject matter expert for IT general and application controls, including overseeing scoping, control design, documentation, testing, monitoring, and…