Deputy Director, Health System Internal Audit

Department: Audit and Compliance Services About Virginia Commonwealth University We are the university for Virginia. We know that the unique backgrounds and experiences of the VCU community are what drive the university forward. Together, we’re forging a future that is built by us. Here, artists and engineers, doctors and designers come together to reimagine the human experience and tackle the problems of tomorrow. VCU dates to 1838 with the formation of the Medical Department of Hampden-Sydney College, whose mission was to educate physicians in Central Virginia and which was later renamed Medical College of Virginia. In 1968, Richmond Professional Institute merged with the Medical College of Virginia to become what is now known as Virginia Commonwealth University. Located in downtown Richmond, the state capital of Virginia, VCU enrolls more than 29,000 students in more than 200+ degree and certificate programs across its urban campuses: the downtown Monroe Park and MCV campuses in Richmond; the Rice Rivers Center in Charles City, Virginia; satellite locations in Fairfax, Virginia, and Abingdon, Virginia; and a campus in Doha, Qatar, for the School of the Arts. About Audit and Compliance Services Audit and Compliance Services (ACS) is an independent oversight function that promotes integrity, accountability, and ethical conduct across both VCU and VCU Health System. ACS provides objective, risk-based audit, advisory, and compliance services that help leadership strengthen governance, manage risk, enhance internal controls, ensure regulatory compliance, and improve organizational effectiveness. As a strategic partner, ACS helps safeguard institutional resources, anticipate emerging risks, and support informed decision-making across the university and Health System. The department consists of two key functional areas: 1. Audit and Management Services (Internal Audit): Provides independent assurance and advisory services to evaluate and improve the effectiveness of risk management, internal controls, and governance processes. Services include operational audits, compliance reviews, information systems and cybersecurity audits, investigative and fraud reviews, and consulting engagements. 2. Integrity and Compliance Office: Leads the university's ethics and compliance program, supports policy development, oversees reporting and investigative processes, delivers compliance education, and promotes a speak-up culture free from retaliation. Together, these functions provide independent insight and oversight that support VCU's academic, research, healthcare, and operational objectives. ACS also administers reporting mechanisms that enable employees, students, and other stakeholders to raise concerns and help maintain a strong culture of compliance, ethics, and responsible stewardship. Role Purpose and Scope Audit and Compliance Services (ACS) invites candidates to apply to the Deputy Director, Health System Internal Audit position. Reporting to the Director, Audit and Management Services, the successful candidate will provide strategic leadership and operational oversight to a dedicated team of auditors serving the VCU Health System, ensuring all audit activities are performed in accordance with the Global Internal Audit Standards. This position serves as a key liaison with the Health System Leadership, Compliance, and external auditors to facilitate collaboration, ensure comprehensive assurance coverage, and maximize audit and compliance efficiencies. The Deputy Director is responsible for leading the Health System’s risk-based internal audit program through the development and execution of a comprehensive audit strategy aligned with organizational priorities and emerging risks. The incumbent directs the annual enterprise risk assessment process and develops the Internal Audit Plan, addressing strategic, operational, financial, regulatory, and compliance risks. By continuously evaluating the Health System’s operating environment, the role establishes audit priorities, resource allocation plans, and engagement schedules to address key risk areas. The position provides governance for all phases of audit engagements, including planning, execution, reporting, and follow up, while ensuring adherence to professional standards and the delivery of high-quality results. Through thoughtful leadership and effective decision making, this role ensures internal audit activities provide meaningful insights, strengthen organizational accountability, and support the achievement of the Health System’s objectives. Core Leadership Responsibilities Oversee a broad portfolio of activities, including internal audits, targeted reviews, special projects, fraud investigations, advisory and consulting services, and requests from management and the Audit Committee. Prepare and review detailed audit reports, including findings, conclusions, and recommendations grounded in applicable laws, regulations, policies, and industry best practices. Collaborate with audit staff to address review comments, incorporate revisions, and ensure the accuracy, quality, and timely issuance of final audit reports. Communicate audit results and recommendations to management, facilitate discussions regarding audit findings, and address management questions or concerns related to draft reports. Collaborate with stakeholders to develop and document corrective action plans that effectively address identified findings and recommendations. Provide strategic leadership for the Health System audit function, contributing to departmental goal setting, long-range planning, and continuous improvement initiatives. Identify opportunities to enhance operational effectiveness and efficiency through ongoing monitoring and assessment activities and lead the implementation of resulting improvement projects. Manage and develop audit staff through recruitment, onboarding, coaching, performance management, and professional development, fostering a high-performing and engaged team. Coordinate with the internal audit team to develop materials for Audit Committee, Board of Directors, and Operational Compliance Committee meetings, and present engagement results and related matters as requested. Conduct follow-up reviews of audit recommendations upon the expiration of target completion dates and prepare reports summarizing the status and results for the Audit Committee. Maintain required professional certifications and complete continuing professional (CPE) to meet departmental, professional, and regulatory requirements. Lead and/or participate in special reviews, including fraud investigations, and communicate findings to the appropriate senior leadership, legal counsel, and law enforcement authorities, as applicable. Perform other related duties and special projects as assigned. Additional Functions of the Role Serve as a member of the Chief Audit and Compliance Executive’s leadership team, contributing to the direction and governance of the Internal Audit function. Lead the Health System’s annual operational risk assessment and development of the risk-based audit plan. Review and approve audit programs, workpapers, reports, and related deliverables. Manage audit staffing, workload distribution, and resource utilization across engagements. Monitor and report progress against the Board-approved audit plan and departmental objectives. Advise stakeholders on risk management, governance, internal controls, and operational effectiveness. Build and maintain strong relationships with Health System leadership, key stakeholders, and external auditors. Preferred Experience and Expertise Bachelor's degree in Accounting, Finance, Business Administration, Healthcare Administration, or a related field with significant accounting coursework. Working knowledge of the Institute of Internal Auditors Global Internal Audit Standards. Progressive experience leading and overseeing audit engagements and related projects, including operational and financial reviews, fraud investigations, consulting engagements, special projects, and requests from executive leadership and Audit Committees. Demonstrated experience supervising, mentoring, and developing staff, including reviewing work products and providing constructive performance feedback. Proven ability to manage multiple priorities while leading complex audit engagements and projects in a dynamic environment. Exceptional written, verbal, and interpersonal communication skills, with the ability to communicate effectively to broad audiences. Demonstrated ability to establish trusted relationships, effectively influence decision-making, and build credibility with stakeholders at all levels of the organization. Professional certification such as Certified Internal Auditor (CIA), Certified Public Accountant (CPA), Certified Information Systems Auditor (CISA), Certified Fraud Examiner (CFE), or another relevant audit-related credential. Demonstrated ability to work in and foster an environment of respect, professionalism and civility with a population of faculty, staff, and students from all backgrounds and experiences, or a commitment to do so as a faculty member at VCU. Preferred Experience and Expertise Master's degree in Accounting, Finance, Business Administration, Healthcare Administration, Public Administration, or a related field. Experience within an academic medical center, integrated health system, or other complex healthcare organization. Knowledge of Financial Accounting Standards Board (FASB) and Governmental Accounting Standards Board (GASB) accounting reporting standards Experience using automated audit management and electronic workpaper systems. Experience leveraging data analytics and other technology enabled tools to support audit planning, execution, and reporting. Experience developing risk-based audit plans and leading enterprise-wide audit engagements. Knowledge of healthcare regulatory and compliance requirements impacting health systems and academic medical centers. Extensive knowledge of internal or external auditing, risk management, governance, compliance, and healthcare operations. Familiarity with healthcare reimbursement models, payor practices, and related operational concepts. Demonstrated leadership, project management, communication, critical thinking, and analytical skills. Familiarity with Virginia Commonwealth University Health System and its affiliates. Application Guidelines The salary range for this position is $125,000 to $192,000 and is competitive and commensurate with the selected candidate’s education, experience and qualifications. How to Apply Candidates should complete the personal and demographic application on the VCU job website with a preferred application deadline of December 10, 2026. Additionally, candidates should submit a resume, cover letter, and the names and contact information of three references. References will only be contacted with the candidates' prior knowledge and approval. All nominations and applications will remain confidential until finalists are selected. Requests for information and all written nominations and applications should be directed to: Tanya-Lee Giscombe ( tlsgiscombe@vcu.edu Benefits : All full-time university staff are eligible for VCU’s robust benefits package that includes comprehensive health benefits, paid annual and holiday leave, generous tuition benefits, retirement planning and savings options, tax-deferred annuity and cash match programs, employee discounts, well-being resources, abundant opportunities for career development and advancement, and more. FLSA Exemption Status: Exempt Hours per Week: 40 Restricted Position: No ORP Eligible: Yes Flexible Work Arrangement: Hybrid University Job Title: 92534 - Open