Internal Audit Assistant Manager (CS27-023)

About the role

The Internal Audit Assistant Manager (CS27-023) position at Southern Illinois University Edwardsville (SIUE) is designed to assist management in the effective discharge of their responsibilities by providing objective analyses, appraisals, recommendations, and pertinent comments concerning the activities reviewed. This role supports business management processes improvement in the IT environment and involves various phases of IT audit and risk assessment.

Responsibilities

• Audits IT general controls and application controls, including access, change management, operations, backup/recovery, and uses data analytics to identify anomalies and trends.
• Validates dashboards and report data by tracing key metrics to source systems, assessing data definitions and transformation logic, and documenting results to support audit conclusions and stakeholder reporting.
• Evaluates the design and operating effectiveness of cybersecurity governance and key controls, including access management, configuration/change control, incident response readiness, and logging/monitoring, and communicates control gaps and recommendations to management.
• Evaluates governance and controls over the use of Artificial Intelligence (AI)-enabled tools and processes, including data protection, access controls, vendor oversight, and monitoring/quality controls, and communicates control gaps and recommendations to management.
• Assists in managing the use of AI-enabled tools to improve efficiency and consistency across internal audit and compliance workflows, ensuring compliance with applicable policies and data protection requirements.
• Develops and performs consulting services for planned and special projects related to information systems, security, audit, and control on all campuses.
• Prepares detailed programs for other complex audits and performs risk assessments, subject to review by higher-level auditors.
• Plans the scope of the audit; drafts detailed audit programs for complex audits, which include specific audit objectives and appropriate audit procedures to accomplish the objectives.
• Performs audit work as outlined by current state and federal regulations, examines records and interviews workers to ensure recording of transactions and compliance with laws and regulations.
• Reviews and evaluates complex internal controls and their application in the IT and/or management operations of an institution.
• Prepares reports of audit results, which may include opinions on the adequacy and effectiveness of complex systems and the efficiency with which activities are carried out, subject to review by higher level auditors.
• May assist with the management of an overall auditing operation such as assisting with training of new auditors or leading the activities of other auditors, when applicable, documenting policies and procedures for the department.
• Performs University audit liaison responsibilities with third parties, which may include external auditors and auditors from state and federal agencies.
• Performs and/or supervises audits as assigned by the Director at any University location or other location as required.

Requirements

• Possession of a Bachelor's Degree in information technology (IT), accounting, business administration, finance or a related field.
• Two (2) years (24 months) of work experience performing duties comparable to those listed for the Internal Auditor Associate.
• Minimum of 5 years of experience in IT audit, IT risk management, cybersecurity, technology controls, or a related area in a complex organization (higher education or similarly decentralized environment preferred).
• Demonstrated knowledge of IT audit methodology, including planning/scoping, walkthroughs, control design and operating effectiveness testing, sampling, and evidence/workpaper standards.
• Knowledge of common technology control frameworks and standards (e.g., NIST, ISO 27001, COBIT, ITIL) and the ability to apply them to assess control maturity and risk.
• Technical experience in the area of information technology concepts, practices, and procedures; and a demonstrated understanding of complex information systems and infrastructure, with project management methodology skills and experience.
• A management-oriented perspective.
• An ability to communicate effectively both orally and in writing, and to present issues for discussion with all levels of University management.
• The ability to act independently in appraisal and analysis of any University operation.
• Working knowledge of Microsoft Office Suite and data analysis software.
• A background in an academic, public institution environment.
• A strong interest in data analytics and knowledge of data analytical software (e.g., ACL, IDEA or other comparable products).

Qualifications

• Thorough knowledge of federal and state laws, rules, and regulations related to internal auditing.
• Thorough knowledge of the principles, theories, and practices used in internal auditing and/or a knowledge of those used in specialized area(s).
• Skill in detecting complex violations and non-compliance with laws, regulations, and policies.
• Skill in explaining and interpreting complex irregularities.
• Ability to identify, analyze, and classify risks across the University’s environment.
• Ability to make practical and feasible recommendations to improve operating inefficiencies and/or operations of the University.