Information System Auditor

About the role

Travis County Technology & Operations is looking for an Information System Auditor to join the Enterprise Risk Management Division. This role offers an exciting opportunity to join a collaborative, diverse Information Assurance team and make a meaningful impact by helping protect the technology, information assets, and public trust that support County operations and essential community services.

The Information Systems Auditor position involves performing complex information technology and cybersecurity audit work involving governance, risk management, regulatory compliance, privacy, operational technology, cloud services, and enterprise security controls. The successful candidate will serve as a trusted advisor to County leadership on information technology risks, emerging threats, and strategic control improvements.

Responsibilities

• Develops and executes a risk-based annual information technology audit plan aligned with organizational priorities.
• Conducts enterprise technology risk assessments to identify areas requiring audit or management attention.
• Evaluates governance, risk management, and internal control processes using recognized frameworks.
• Assesses the effectiveness of organizational cybersecurity governance and risk management practices.
• Performs technical and operational audits of cybersecurity controls including identity and access management, endpoint security, network security, vulnerability management, logging and monitoring, data protection, and incident response.
• Evaluates compliance with applicable federal, state, and industry requirements.
• Evaluates risks associated with artificial intelligence, automation, cloud computing, SaaS platforms, and emerging technologies.
• Reviews implementation of AI governance controls, data protection, model oversight, and responsible AI practices where applicable.
• Presents audit findings and recommendations to executive leadership, elected officials, and Commissioners Court.
• Tracks remediation efforts and validates implementation of corrective actions.

Requirements

• Bachelor's degree in Computer Science, Information Systems, Business Administration or a directly related field.
• Five (5) years of relevant work experience in either IT auditing or an information technology role with significant exposure to internal controls and risk assessment practices.
• Valid Texas Driver's License.

Preferred: Progressively responsible experience in information systems auditing, cybersecurity, risk management, information security, compliance, or related information technology disciplines. Industry-recognized certification such as CompTIA Security+, Certified Information Systems Auditor (CISA), Certified Risk and Information Systems Control (CRISC), or Certified Governance Risk & Compliance (CGRC).

Skills

• Risk analysis and AI risk analysis.
• Technical writing and data analytics.
• Cloud security review and interviewing stakeholders.
• Ability to coordinate and perform multiple tasks/projects simultaneously, balancing priorities and deliverables.
• Competent interpersonal skills, demonstrating the ability to lead projects and mentor others.
• Ability to evaluate business processes and IT technology, identify risks and evaluate controls.

Work Environment & Other Information

Work primarily performed in office setting, either on-site or in a secure hybrid/telework environment. May involve occasional visits to data centers, agency offices, or vendor locations for security inspections, audits, or meetings.

Must adhere to strict security protocols and procedures, including physical access controls, fingerprint-based background checks, and secure area clearances. May occasionally work outside normal business hours to respond to security incidents or meet project deadlines.

Physical requirements include extended periods of sitting, using a computer and other standard office equipment. Subject to visual acuity, speech and hearing, hand and eye coordination and manual dexterity necessary to operate a computer and office equipment.

Work Hours: 8 am - 5 pm, Monday-Friday. Works some holidays, some nights, and some weekends. Location: 700 Lavaca Street Austin, Texas 78701.

Criminal, Driving, Education, CJIS fingerprints, and Employment Background Checks Required.