Sr. Data Engineer, Internal Audit

UMC Health System is seeking a Senior Data Engineer to support Internal Audit as a technical specialist covering enterprise data, IT, and cybersecurity risk. In this hybrid role based in Lubbock, TX, you will independently deliver secure data pipelines and partner with auditors to produce risk-based audit evidence from planning through reporting.

What you’ll do

• Independently build and maintain reliable data pipelines.
• Manage outsourced, risk-based IT audits from planning through reporting as the primary liaison with the third-party audit firm.
• Connect system activity to business processes, develop testable risk hypotheses, identify exposures that may fall outside third-party audit scope, and translate complex technical evidence into audit conclusions and actionable recommendations.
• Design, build, document, monitor, and maintain secure ELT pipelines that pull data from enterprise applications, databases, APIs, files, and approved cloud sources.
• Validate completeness and accuracy, including data cleaning, normalization, reconciliation, joins, and transformations, then load trusted data into approved warehouses, marts, or audit workspaces.
• Design and optimize databases, schemas, data models, and reusable analytical structures using advanced SQL.
• Use JavaScript or other tools when appropriate for integration and automation.
• Develop risk-based hypotheses with auditors and process owners, identify patterns or exceptions, investigate root causes, and distinguish indicators from confirmed findings.
• Produce reproducible, audit-ready workpapers documenting sources, populations, transformations, parameters, validation results, exceptions, limitations, code, and conclusions.
• Communicate technical results to audit team members for testwork, and explain technical findings to management in business terms when needed.
• Serve as the department’s primary IT point of contact on outsourced IT audits.
• Understand system architecture, configurations, integrations, logs, security tooling, and technical terminology to challenge explanations, identify missing risks, and recognize when evidence does not support management’s conclusions.
• Evaluate prior IT Audit finding management action plans and compensating controls to determine whether they address risk and root cause, operate at the required precision and frequency, cover the full population, generate reliable evidence, and reduce exposure to an acceptable level.
• Review external audit or assessment scope and results to identify technology risks, systems, interfaces, dependencies, or control areas not addressed, coordinate follow-up evidence, and avoid unnecessary duplication.
• Translate technical/system issues into business terms for auditors and stakeholders, and convert business risk back into technical terms for IT teams.
• Work closely with the Internal Audit team, explaining technical work and supporting details for team members and stakeholders as needed.

Required experience and education

• Bachelor’s degree in computer science, information systems, data engineering, cybersecurity, accounting information systems, or a related field (four additional years of directly related experience may be substituted).
• 3-5 years of progressively responsible, hands-on data engineering experience, including ELT/ETL pipeline production, data warehousing, database design or modeling, and data-quality controls.
• At least 2 years of experience supporting IT audit, IT risk management, information security, or IT controls work (may be gained concurrently with the data engineering experience).

Certifications

• Active CISA or CISSP required within 18 months of hire and maintained in good standing thereafter, with applicable CPE requirements maintained throughout employment.

Skills and tools

• Advanced proficiency in SQL, including hands-on experience with Microsoft SQL Server.
• Working proficiency in data transformation, analysis, and automation.
• Working knowledge of IT risk and controls frameworks such as NIST, COBIT, or ISO 27001.
• Ability to operate independently, learn unfamiliar systems, question incomplete explanations, manage competing priorities, and communicate effectively with engineers, process owners, executives, external auditors, and governance committees.
• Ability to collaborate effectively and build strong working relationships across audit, IT, and business teams.

Technologies you may use

• ELT, ETL, SQL, Microsoft SQL Server
• JavaScript
• NIST, COBIT, ISO 27001
• CISA, CISSP