Assistant Director IT Audit

Responsibilities

• Develops and implements technology-driven audit strategies, methodologies, and risk assessments.
• Assists in the development and execution of the annual risk-based audit plan through assessment of technology, cybersecurity, compliance, operational, and emerging risks.
• Ensures IA team members are provided with ongoing in-house training on IT-related risks and controls, including emerging risks.
• Assesses and makes recommendations related to the implementation of advanced audit tools and emerging technologies (artificial intelligence (AI), data analytics, etc.) to increase the efficiency and effectiveness of the IA team.
• Serves as Project Manager for IT audit and advisory engagements from planning through reporting and follow-up. Ensure engagements are conducted in accordance with GIAS and applicable frameworks, including but not limited to, National Institute of Standards and Technology (NIST), Control Objectives for Information and Related Technologies (COBIT), International Organization for Standardization (ISO), and related standards.
• Evaluates governance, cybersecurity, privacy, business continuity, disaster recovery, cloud computing, and technology control environments.
• Supervises, mentors, and develops audit staff through work assignments, coaching, performance evaluations, professional development planning, and recruitment activities.
• Utilizes data analytics, automation, artificial intelligence, and other technology-enabled audit techniques to improve effectiveness and efficiency.
• Communicates audit results and emerging risks to management and executive leadership and facilitates development of corrective action plans.
• Monitors and assesses the implementation of management action plans.
• Represents Internal Audit on university committees, working groups, and governance initiatives, and promotes audit initiatives internally and externally.

Qualifications

• Bachelor's degree from a regionally accredited institution in accounting, information systems, cybersecurity, business management, or a related field and seven years of demonstrated progressive experience in auditing and compliance in complex projects and supervising professional staff.
• CISA Certified Information Systems Auditor, Certified Information Systems Security Professional (CISSP) or equivalent professional certification required.
• Master's degree in a related field from an accredited university and 5 years of demonstrated, progressive experience in internal or external auditing and compliance or Bachelors and a minimum of 7 years of progressive experience.
• Certified Internal Auditor certification is preferred in addition to IT Certification.