Senior Auditor

Job Summary

Examine and analyze information systems operations to identify opportunities for improvement and assess risks. Participate in audit planning and execution. Evaluate policies and procedures to ensure appropriate internal controls surrounding information systems are maintained. Develop strategies and provide recommendations on strengthening controls, mitigating risk, and implementing corrective actions. Document and report audit findings to management. May require Certified Information Systems Auditor (CISA) designation. May assist with financial and operational audits and ensure compliance with existing regulations as they relate to information systems.

Responsibilities

• Participate in audit planning and execution.
• Evaluate policies and procedures to ensure appropriate internal controls surrounding information systems are maintained.
• Develop strategies and provide recommendations on strengthening controls, mitigating risk, and implementing corrective actions.
• Document and report audit findings to management.
• May require Certified Information Systems Auditor (CISA) designation.
• May assist with financial and operational audits and ensure compliance with existing regulations as they relate to information systems.

Qualifications

• Recognized as subject matter expert and advanced individual contributor professional.
• Requires specialized skill set.
• Conduct highly complex work, unsupervised and with extensive latitude for independent judgment.

Minimum Qualifications

• EQUIVALENCY STATEMENT: 1 year of higher education can be substituted for 1 year of directly related work experience (Example: bachelor's degree = 4 years of directly related work experience).
• Department may hire employee at one of the following job levels: Information Systems Auditor, IV: Requires a bachelor's (or equivalency) + 8 years or a master's (or equivalency) + 6 years of directly related work experience.
• Information Systems Auditor, V: Requires a bachelor's (or equivalency) + 10 years or a master's (or equivalency) + 8 years of directly related work experience.

Preferences

• Preference will be given to candidates with a Certified Information Systems Auditor (CISA) and/or Certified Information Systems Security Professional (CISSP) credential;
• Experience auditing the configuration and security of enterprise networks, databases, servers, cloud-based services, healthcare systems, and application development;
• Experience evaluating Service Organization Control (SOC) reports;
• Demonstrated strong leadership skills.