Jobs › Sanford Health

IT Auditor

Sanford Health · Marshfield, WI · Remote available · $40.00–$66.00 an hour · Full time

Posted Oct 1, 2026 · We last checked this listing on Oct 6, 2026

Apply at Sanford Health

Likely interview questions for this role

Written from this job description, not a generic list. Each one notes what the interviewer is really checking.

About your past

Tell me about an audit finding you wrote that led to real change. How did you get buy-in?

What they are checking: Writing findings that leaders act on rather than just file away.

Tell me about a time you were part of an investigation. How did you keep it objective?

What they are checking: Independence and care with sensitive matters.

This role is mostly in office in Sioux Falls, Rapid City, Fargo or Marshfield. Which location works for you, and how do you feel about regular in-office work?

What they are checking: Fit with the stated in-office requirement.

What would you do

You find a serious control gap, and the department leader says it's not a real risk. How do you handle it?

What they are checking: Holding a well-supported position while keeping the relationship productive.

A remediation plan is three months overdue. What do you do?

What they are checking: Follow-up discipline and escalation to senior leadership when needed.

How do you explain a technical risk to leaders who aren't IT people?

What they are checking: Translating technical findings into business impact.

About the work

Walk me through how you'd plan an IT audit of access controls for the electronic health record.

What they are checking: Structured audit planning, from scoping and risk to testing approach, in a health care context.

How do you decide which areas go into the annual internal audit plan?

What they are checking: Risk-based thinking about where the organization is most exposed.

What frameworks or regulations do you lean on when auditing IT in health care, such as HIPAA, NIST or COBIT?

What they are checking: Knowledge of the external industry rules the posting says systems must comply with.

How do you use data analytics in your audit fieldwork?

What they are checking: Data and reporting skills, which the posting lists as part of the role.

When you review another auditor's work papers, what are you looking for?

What they are checking: Quality review skills expected of an audit lead.

Practice this interview out loud.

Offer builds a real interview for this exact role at Sanford Health from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.

Practice this out loud

The full job description

As published by Sanford Health.

Sanford Health, the largest rural health system in the United States, is dedicated to transforming the health care experience and providing access to world-class health care in America’s heartland. 

 Work Shift: 8 Hours - Day Shifts (United States of America)

 Scheduled Weekly Hours: 40

 Compensation: Salary Range: $40.00 - $66.00



 Union Position: No

 Department Details One requirement for this role - candidate must be able and willing to work in office majority of the time. Can live in one of the following areas: Sioux Falls, SD Rapid City, SD Fargo, ND Marshfield, WI Can live in Minnesota, but be willing to travel to one of the cities listed above regularly to work in office. Summary Perform internal audits at both at the enterprise level and at respective location or department level as determined by the engagement. Manage and support annual internal audit plan, risk assessments, data and reporting capabilities, audits and investigations. Audit Lead will help manage all aspects of audit engagement that are assigned to them, complete fieldwork and work paper reviews and finalize audit reports. Review findings and conduct follow-up on the remediation plans with audit team and senior leadership. Ensure system, policies, applications, and processes comply with internal policies and external industry regulations. Job Description Manage internal audits, prepare and update risk assessments to assess controls, identify vulnerabilities, and mitigate risks associated with healthcare systems and regulations (HIPAA, HITECH). Assist in preparation of annual audit plan. Conduct audit engagements, complete and review field work, discuss audit findings with audit management, finalize audit reports and assist in follow up with findings and remediation plans and validations in timely manner. Guide and support internal audit team in preparing audit reports that are accurate, clear, concise, constructive, objective and timely. Assist in the development and revision of internal audit programs to encompass on-going changes to internal control environment as a result of changes implemented by outside organizations and internal departments. Prepare clear and compelling reporting, including executive summaries and presentations for senior leadership and stakeholders. Analyze audit findings to identify inefficiencies, weaknesses, or non-compliance Collaborate across departments and recommend improvements to enhance regulatory compliance, data integrity and analytics, confidentiality, security, privacy, and integrity of operational and technology infrastructure for the assigned audits and advisory projects. Coordinate with cross functional departments and work with external auditors as designated by engagement terms, prepare and review responses to audit requests, recommend action plan(s) to re-mediate gaps, monitor the performance of internal control processes and complete documentation needed. Identify cross functional dependence of Operational, IT, Compliance, Legal, Financial and Strategic risks when conducting audits. Develop, design, and implement Audit programs, plans, coordinate fieldwork, conduct quality review, finalize report for Audit leadership review. Assist in the development and revision of internal audit programs to encompass on-going changes to internal control environment as a result of changes implemented by outside organizations and internal departments. Maintain updated knowledge in AI auditing trends, data analytics, financial reporting, healthcare and technology audit framework and methodologies, regulatory requirements and best practice. Work with leadership in the completion of special projects and other activities in a capacity that does not impair internal audit's independence in fact or appearance. Must have strong experience with data analytic reporting tools. Qualifications Bachelor’s degree in Accounting, Finance, Mathematics, Information Systems, Information Technology, Health Information Management, Health Informatics, or other Business-related degree with an Accounting minor is required. Masters degree is preferred. Minimum of 5 years related work experience is required, preferably in the health industry or in an lead auditor role. Must have solid understanding of auditing frameworks, and accounting principles and standards is required. Understanding of general audit concepts, techniques, approaches and processes is required. -Ability to prioritize tasks and manage projects effectively. Demonstrate accuracy and attention to detail. Have excellent critical thinking, problem solving and analytical skills. Have excellent verbal and written communication and interpersonal skills, and able to communicate with all levels of management and employees. Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Risk Management Assurance (CRMA), Certified Information Systems Security Professional (CISSP) HealthCare Information Security and Privacy Practitioner (HCISPP) or Certified Controls Self Assessment (CCSA) preferred. Sanford is an EEO/AA Employer M/F/Disability/Vet. If you are an individual with a disability and would like to request an accommodation for help with your online application, please call 1-877-949-5678 or send an email to talent@sanfordhealth.org.

Apply at Sanford Health