Sr Digital Auditor

@ GE HealthCare

Overview

GE HealthCare is seeking a qualified professional with expertise in data privacy regulations to support global compliance initiatives as a Sr Digital Auditor. In this role, you will lead and conduct data privacy risk assessments, security assessments, and information security audits for systems processing personally identifiable information (PII), ensuring compliance with international privacy laws such as GDPR, HIPAA, DPDP, and LGPD.

Roles and Responsibilities

• Lead data privacy assessments for systems handling PII.
• Evaluate design and operational effectiveness of privacy and security controls.
• Identify control deficiencies and support remediation efforts.
• Prepare and deliver comprehensive assessment reports.
• Align activities with the Unified Control Framework (UCF) for consistency.
• Communicate proactively with application teams regarding scope and expectations.
• Drive process improvement and efficiency through automation.
• Educate teams on privacy regulations and IT control requirements.
• Establish metrics for reporting assessments and issue management.
• Ensure audit readiness and manage audit support activities.

Qualifications & Skills

Required qualifications include a Bachelor’s degree in Information Security, Computer Science, IT, Law, or a related field, and several years of experience in data privacy, information security, IT audit, compliance, or risk management. Knowledge of global data privacy laws (GDPR, LGPD, DPDP, HIPAA) and familiarity with IT controls such as access management, encryption, and cybersecurity practices are essential. Strong communication skills and the ability to explain complex issues to diverse teams is required.

Desired Characteristics

Certifications such as CISA, CISM, CISSP or CIA (IAPP) are highly valued. Experience with GRC tools like Archer or ServiceNow GRC and a track record of conducting risk assessments and managing audit readiness is preferred.

Key Skills/Competency

Data Privacy, Compliance, Risk Assessment, Security Controls, IT Audit, Remediation, UCF, GDPR, HIPAA, Automation