Information Systems Auditor 1

Office of the New York State Comptroller • Rochester, NY

9d

About The Position

The Information Systems Auditor 1 is a full-performance-level position in the Office of the New York State Comptroller’s Division of Local Government & School Accountability, Bureau of Audits & Local Services. The role designs, writes, develops, tests, and maintains audit software and supports audit activity through technological solutions and research. The position is in the PS&T bargaining unit, classified as non-competitive, and listed as contingent-permanent. It is full time, with a Monday–Friday work week and first-shift hours of 8:30 AM–4:30 PM. Telecommuting is allowed subject to agency approval and operational needs; new employees are generally restricted from telecommuting for at least eight calendar weeks, after which eligible employees may telecommute up to five days per pay period. The position has a 30% travel requirement, allows a compressed workweek, and does not require mandatory overtime.

Applicants must provide a resume, cover letter, transcripts when applicable, and the required Minimum Qualifications Template. The item number 02936-TLS must appear in each document’s file name. Interview selection is based solely on information in the template. The position may be designated under the 55b/c program, subject to verification of applicant eligibility.

The Office of the State Comptroller does not participate in E-Verify or sponsor visa applications. Reasonable accommodation is available during the application and hiring process. Some positions may require additional credentials or a background check to verify identity.

Requirements

• Seven years of information technology audit experience, which may be gained through one or a combination of the qualifying experience areas described in the posting; experience may be concurrent.
• Qualifying experience includes performing IT-related audits and examinations, analyzing and evaluating information systems or IT-related operational practices, or supporting audit groups through technological solutions and artificial intelligence programs.
• An associate’s degree may substitute for up to two years of IT audit experience; a bachelor’s degree may substitute for up to four years; and a master’s degree may substitute for an additional year, up to a maximum of five years of educational substitution.
• One year of generalized audit experience may substitute for one year of IT audit experience. The posting defines generalized audit experience as including performance audits under Generally Accepted Government Auditing Standards, risk analysis, compliance and control evaluations, use of computer-assisted auditing tools, validation of computer-processed data, documentation of work and conclusions, preparation and discussion of findings, and participation in entrance and exit conferences.
• Applicants must submit the required Minimum Qualifications Template; interview selection is based solely on the information provided in the template.
• Must include item number 02936-TLS in each submitted document’s file name.

Nice To Haves

• IT industry experience and/or a degree in IT or information systems.
• Relevant professional certifications, such as CISA, CISSP, CISM, CRISC, ISSMP, or CIA.
• Familiarity with GAGAS, CIS, COBIT, COSO, and NIST CSF frameworks.
• IT audit experience in areas including cloud security, artificial intelligence, operating systems such as Windows, MacOS, and ChromeOS, access controls, applications, databases, and system security.
• Ability to communicate effectively orally and in writing and demonstrate strong interpersonal skills.
• Ability to work independently and in a team environment.
• Organized, detail-oriented work style and ability to produce accurate, timely work.
• Ability to apply work-unit policies and procedures effectively and manage multiple, sometimes competing, priorities.
• Strong work ethic and positive attitude.

Responsibilities

• Design, write, develop, test, and maintain audit software.
• Perform IT-related audits and examinations to assess compliance at agencies, authorities, municipalities, and schools, including reviews of physical and logical access controls, general IT controls, and application controls.
• Write and present reports of findings about technical issues for non-technical audiences.
• Analyze and evaluate information systems, including platforms, applications, network infrastructure, and IT-related operational practices, and prepare findings reports suitable for non-technical audiences.
• Support audit groups by designing, developing or programming, and maintaining technological solutions in support of audit activity.
• Evaluate and develop artificial intelligence programs in support of audit activity.
• Conduct, document, and report on advanced IT research topics relevant to audit initiatives and other projects.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed