Information Systems Auditor
Posted 2025-03-14Position Information
Working Title Information Systems Auditor Position Number 000115 Recruitment Salary Range Commensurate with education and experience FLSA Exempt Appointment Type Permanent - Full-time Tenure Track No FTE If Time Limited, Appointment Length Organizational Division Internal Audit Organizational Location Legal Affairs, Risk and Compliance Organizational Unit Internal Audit
Classification Information
Classification Type EHRA
Position Overview
Primary Purpose of Position The primary purpose of this position is to conduct information system and operational audits or consultations with the objective of providing assurance that internal controls are adequate and effective; operations promote efficiency and compliance with policies, applicable laws and regulations; and assets of the University are properly protected.
The Information Systems Auditor is responsible for detailed evaluations, internal control reviews, and audits of computer information systems.
This position will primarily focus on information system audits, but the auditor must also be able to perform financial, compliance, operational, and investigative audits as assigned.
Primary Function of Organizational Unit The primary purpose of the Office of Internal Auditing (OIA) is to provide independent, objective assurance and consulting services designed to add value and improve the operations at the North Carolina Agricultural and Technical State University (University).
The OIA assists the university in meeting its strategic goals and objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes.
The OIA supports the mission of the university by partnering with university management and assisting the Board of Trustees, through the Risk Management, Audit and Compliance Committee, in the effective discharge of their responsibilities to protect the assets and reputation of the university and to promote operational effectiveness and efficiency.
The OIA conducts audits, consultations, and investigations related to all university entities, systems, and functions in accordance with an annual plan of coverage based on an institution-wide risk assessment.
The OIA also coordinates audit activities with the internal audit staff at the UNC System Office and with the North Carolina Office of the State Auditor.
Minimum Requirements Graduation from a four-year college or university with a Bachelor's degree in Accounting or discipline related to the program area (e.g. Computer Science, or related IT degree, with nine credit hours of accounting coursework); or equivalent combination of training and experience.
All degrees must be received from appropriately accredited institutions.
As per North Carolina General Statute 143-746: Appointment and Qualifications of Internal Auditors. - Any State employee who performs the internal audit function shall meet the minimum qualifications for internal auditors established by the Office of State Human Resources, in consultation with the Council of Internal Auditing.
Preferred Years Experience, Skills, Training, Education Experience in data analytics auditing, or information systems, programming, technology auditing. Specifically, the experience should involve, a familiarity with frameworks and guidance such as NIST, COBIT, ISO as well as leading and executing risk-based IT-related internal audits and/or risk and control assessments, leveraging IT governance and control frameworks.
Experience in a college/university or government audit environment.
Proficiency in Banner.
Preference for individual with least one professional certification such as:
? Certified Information Systems Auditor (CISA)
? Certified Internal Auditor (CIA)
? Certified Fraud Examiner (CFE)
? Certified Public Accountant (CPA) is preferred
Required License or Certification Is this position eligible for a remote or hybrid work arrangement, consistent with university and state policies.
Primary Responsibilities and Duties
Function Knowledge - Professional Describe the specific tasks and responsibilities related to the function. To ensure success, an Information Systems Auditor must be capable of maintaining the confidentiality of sensitive information while working with a variety of technologies. Candidates should display an excellent understanding of firewalls, VPN, data loss prevention, IDS/IPS, Web-Proxy, and security audits.
Specifically, an IT Auditor will:
? have an analytical mind and expertise in IT systems, applications, and infrastructure.
? conduct all phases of the audit process including risk assessment, planning, fieldwork, and reporting.
? examine, audit, and consult on a wide variety of IT systems and general controls to evaluate the design and operational effectiveness, determine exposure to risk, and recommend remediation strategies. Work will include reviews of the security over applications, mainframe and/or client-server environments, standard and wireless networks, operating systems, databases, software development and implementation, and software licensing.
? communicate complex technical issues in simplified terms to relevant parties.
? apply knowledge of the IIA's International Standards for the Professional Practice of Internal Auditing and IT control and security best practices (including NIST and COBIT) to assigned projects.
Ability to work with financial and operational systems such as Banner to determine controls, data accuracy and system security.
Ability to work with other financial and operational systems associated with university departments such as the OneCard Office, Procurement Services, Travel Office, Parking Services, etc.
This position is responsible for consulting with and advising administrators, faculty, and staff on information system operational matters.
Percentage of Time 50 Function Problem Solving/Decision Making/Crisis Management Describe the specific tasks and responsibilities related to the function. Ability to draw a reasonable conclusion from the analysis of the audit evidence; conclusions require consideration of the validity, quality, and relevance of audit evidence. Identifies instances of internal control weaknesses, operational inefficiencies, non-compliance with established policies and procedures, and misappropriation of resources.
Ability to determine findings and make appropriate recommendations in a timely manner. Ability to perform audits that may involve unprecedented problems requiring research and review of policy and procedures. Ability to identify problems and compliance issues found in an audit.
Ability to partner with university management and divisions including Information Technology Services to enhance and evaluate IT control environment on protected private information (PPI) and effectiveness of controls throughout the university and provide client-focused value-added recommendations.
Percentage of Time 20% Function Communication Describe the specific tasks and responsibilities related to the function. Ability to communicate the results of audit work to management via oral presentations and written reports. Oral presentations and written reports should convey concise and comprehensive information on matters of a moderately complex nature.
Ability to provide guidance to university management and external entities on the resolution of information security issues.
Ability to consult with and advise administrators, faculty, and staff on various operational issues identified in related information systems, and on general business operations as needed.
Percentage of Time 20% Function Human Resources Management Describe the specific tasks and responsibilities related to the function. Demonstrates ability to establish, cultivate and maintain harmonious working relationships with co-workers, staff, faculty, students, and external contacts, and to work effectively in a professional team environment.
Percentage of Time 5% Function Administrative Describe the specific tasks and responsibilities related to the function. Ability to perform administrative tasks, including:
? Track and report audit hours
? Attend and participate in office meetings
? Attend university administrative programs and forums
? Other duties as assigned by the Director of Internal Auditing
Percentage of Time 5%
Posting Detail Information
Posting Number EPA2226 Open Date 07/05/2024 Close Date - for postings that do not use Open Until Filled Open Until Filled Yes Applications received by this date get full consideration; later ones may be considered based on the search status. Date Position Available 7/05/2024 Special Instructions to Applicant You must complete and submit an electronic application for employment to be considered. Resumes will not be accepted in lieu of completing an electronic application. Applicants seeking Veteran's Preference must attach a DD 214 form. Certificate of Release or Discharge from Active Duty with your application during the process of applying to the job posting. Final candidates are subject to criminal and sex offender background checks. North Carolina A&T State University participates in E-Verify. Federal law requires all employers to verify the identity and employment eligibility of all persons hired to work in the United States. North Carolina A&T State University is an Equal Opportunity and Affirmative Action Employer. No one who applies or seeks employment will be denied admission to or employment at North Carolina A&T State University on the basis of race, religion, color, national origin, sex, age, disabling condition, veteran status, political affiliation, genetic information or sexual orientation and sexual identity.
Employee Benefits available to NC A&T State University permanent employees include the following and more:
? Accrued Vacation and Sick Leave for Eligible Employees
? Community Service Leave
? Blue Cross Blue Shield of NC - Health Benefits
? NCFlex - Vision, Dental, Flexible Spending Account, Life Insurance and more
? 12 Paid Holidays
? Teachers and State Employees Retirement System (TSERS)
? Optional Supplemental Plans - 401k, 403b, 457b and 457
? Employee Assistance Program (EAP)
? Campus Recreation Center Discount
? University Bookstore Discount
This position may be eligible for a remote or hybrid work arrangement, consistent with university and state policies. N.C. A&T employees are generally required to reside in North Carolina, within a 2-hour commuting distance of their assigned duty station.
Quick Link https://ncat-sb.peopleadmin.com/postings/33262
For more such jobs please click here!