IT Audit Manager

University of Rochester•New York, NY

9d•Remote

About The Position

As a community, the University of Rochester is defined by a deep commitment to Meliora - Ever Better. Embedded in that ideal are the values we share: equity, leadership, integrity, openness, respect, and accountability. Together, we will set the highest standards for how we treat each other to ensure our community is welcoming to all and is a place where all can thrive. Responsibilities: Plans, develops, and directs the overall internal audit program for the University concerning information technology-related audits and advisory services. Advises IT management and leadership in matters that require complex judgments. Develops the annual IT audit plan and schedule, including prioritization of audits to be completed. Trains, counsels, and instructs subordinate auditors and third-party partners. ESSENTIAL FUNCTIONS Actively manages and participates in the planning, performing, and reporting of all IT audit projects. Conducts complex audits of high-risk areas, managing multiple projects at once. Oversees other auditors, including third-party co-source partners. Directs, counsels, and instructs subordinate auditors and third-party co-source partners, reviews their work for sufficiency of scope and overall performance, and determines that the Standards for the Professional Practice of Internal Auditing are observed. Completes work independently while working with direct reports and co-source partners with limited instruction and seeks guidance from supervisor when circumstances warrant. Obtains, analyzes, and appraises evidentiary data as a base for an informed, objective opinion on the efficiency and effectiveness of management processes and their ability to meet their goals and objectives. Prepares and/or reviews audit reports to ensure clear, concise, accurate, and tactful messaging, including that technical issues/concerns are communicated in a manner that all stakeholders can understand. Effectively communicates negative audit results verbally in a collaborative/partnering approach that is direct while being persuasive and ensuring the issues are discussed within the proper context and understood by all. Collaborates alongside leadership for continual and annual IT risk assessment activities including initiating, planning, and facilitating meetings with IT management and leadership to discuss strategic IT goals and objectives. Incorporating results into a meaningful audit strategy. Ensuring the process is geared toward helping the IT enterprise achieve its objectives and identifying areas of exposure that may prevent objectives from being met. Develops the annual IT audit plan and schedule, including prioritization of audits to be completed by the Department amongst competing high-risk IT priorities. Updates and enhances the annual IT audit plan, including the continuous development of the audit strategy, to ensure the accomplishment of core objectives and completion of projects. Participates in management forums, committees, workshops, and task forces representing the department and offering advice and input to management. Maintains contact with individuals at various levels of responsibility, from operating personnel to Deans, Leaders, Department Chairs, and Vice-Presidents. Develops and continuously enhances working relationships with management. Promotes the mission of the Audit Department and its ability to provide expert advisory services to clients through continuous communication and understanding of needs and objectives. Demonstrates proficiency with existing and new automated audit and evaluation tools to assist in the audit work completed by the department. Trains and supervises other audit staff members to ensure that the key exposure areas are identified and adequately addressed in audits. Maintains awareness of current trends and risks associated with higher education and health care through training, publications, and membership and participation in professional organizations. Other duties as assigned.

Requirements

Bachelor's degree in Information Technology, Computer Science / Engineering, Accounting, Finance, or Business Administration and 5 years of experience as an auditor/consultant required
Or equivalent combination of education and experience
5 years of experience as an IT professional with experience related to internal audit, consulting, or public accounting preferred
Understands internal controls, business processes, auditing procedures, and risk assessments required
Proficient in PC functionality and Microsoft Excel, Word and PowerPoint required
Ability to manage appropriate steps to get projects completed required
Strong abilities to organize people and processes required
Creates plans for resourceful workflow required
Knows how to present ideas effectively and persuasively. Has a strong verbal presence. Can convey concepts in a wide-variety of forums. (Speaking to large groups, one-on-one, etc.) required
Understands the “big” picture. Champions University’s mission to those in all levels of the organization. Sets short and long term goals to align business with University vision required
Can write thoughts and concepts clearly and in an organized manner. Effectively manages formal and informal communication required
Understands how organizations operate. Ability to manage themselves effectively in a highly political environment. Predicts the potential problems one might encounter in an organization. Quick learner in understanding institution cultures. Knowledgeable about business practices and how they may impact the organization required
Strong interpersonal skills. Can effectively communicate and relate to all levels within and outside the organization. Creates and builds positive and productive relationships required
Able to use logic to solve challenging problems. Negotiates effectively under the most difficult of circumstances. Able to resolve problems fairly. Gains the respect and trust of others involved in the negotiations required
Drives the team and the organization for results to improve performance. Able to make timely or planned decisions appropriate to the circumstances or situation required
Sees projects through to completion, especially when faced with difficult obstacles required
Understands technical information quickly. Able to learn new technical skills and information adeptly. Performs at a high level due to strong functional knowledge required
Knowledge of electronic work papers required
Understands IT risks that affect University and Medical Center activities. Demonstrates the ability to identify and appropriately measure those risks. Formulates audit response strategies that are appropriate, practical, and effective. required
Display a high degree of professionalism and leadership and possess proficient organizational, analytical and project management skills required
Certified Public Accountant (CPA) upon hire required
Certified Internal Auditor (CIA) upon hire required
CHIAP upon hire required
Certified Information Systems Auditor (CISA) upon hire required
Certified Management Accountant (CMA) upon hire required

Nice To Haves

Master's degree preferred
5 years of experience as an IT professional with experience related to internal audit, consulting, or public accounting preferred
Systems implementation experience preferred

Responsibilities

Plans, develops, and directs the overall internal audit program for the University concerning information technology-related audits and advisory services.
Advises IT management and leadership in matters that require complex judgments.
Develops the annual IT audit plan and schedule, including prioritization of audits to be completed.
Trains, counsels, and instructs subordinate auditors and third-party partners.
Actively manages and participates in the planning, performing, and reporting of all IT audit projects.
Conducts complex audits of high-risk areas, managing multiple projects at once.
Oversees other auditors, including third-party co-source partners.
Directs, counsels, and instructs subordinate auditors and third-party co-source partners, reviews their work for sufficiency of scope and overall performance, and determines that the Standards for the Professional Practice of Internal Auditing are observed.
Completes work independently while working with direct reports and co-source partners with limited instruction and seeks guidance from supervisor when circumstances warrant.
Obtains, analyzes, and appraises evidentiary data as a base for an informed, objective opinion on the efficiency and effectiveness of management processes and their ability to meet their goals and objectives.
Prepares and/or reviews audit reports to ensure clear, concise, accurate, and tactful messaging, including that technical issues/concerns are communicated in a manner that all stakeholders can understand.
Effectively communicates negative audit results verbally in a collaborative/partnering approach that is direct while being persuasive and ensuring the issues are discussed within the proper context and understood by all.
Collaborates alongside leadership for continual and annual IT risk assessment activities including initiating, planning, and facilitating meetings with IT management and leadership to discuss strategic IT goals and objectives.
Incorporating results into a meaningful audit strategy.
Ensuring the process is geared toward helping the IT enterprise achieve its objectives and identifying areas of exposure that may prevent objectives from being met.
Develops the annual IT audit plan and schedule, including prioritization of audits to be completed by the Department amongst competing high-risk IT priorities.
Updates and enhances the annual IT audit plan, including the continuous development of the audit strategy, to ensure the accomplishment of core objectives and completion of projects.
Participates in management forums, committees, workshops, and task forces representing the department and offering advice and input to management.
Maintains contact with individuals at various levels of responsibility, from operating personnel to Deans, Leaders, Department Chairs, and Vice-Presidents.
Develops and continuously enhances working relationships with management.
Promotes the mission of the Audit Department and its ability to provide expert advisory services to clients through continuous communication and understanding of needs and objectives.
Demonstrates proficiency with existing and new automated audit and evaluation tools to assist in the audit work completed by the department.
Trains and supervises other audit staff members to ensure that the key exposure areas are identified and adequately addressed in audits.
Maintains awareness of current trends and risks associated with higher education and health care through training, publications, and membership and participation in professional organizations.
Other duties as assigned.