IT Auditor 3+ (Cybersecurity Audit - Internal Only)

State of Washington • Thurston County – Olympia, WA

4d • Hybrid

About The Position

This listing is for current employees of the Office of the Washington State Auditor. The State Auditor’s Office is working together to make a real difference in how government operates, always looking for new ideas to ensure their work provides value to the clients they serve. They take pride in the services performed for the governments and people of Washington. They are committed to building and maintaining a collaborative workplace environment that supports all employees in effectively carrying out the agency’s mission. This includes ensuring inclusion and equity throughout the agency, while embracing the individual differences of employees and clients. They believe that diverse perspectives and backgrounds are fundamental to doing their best work. With 15 offices statewide, 400 positions, and important work to do, they welcome talented people to join their team. The Washington State Auditor’s Office (SAO) offers flexible schedules and a hybrid work environment that helps staff balance work and life. They also offer a comprehensive package of health and wellness benefits to employees, including paid vacation, sick leave, holidays, growth and development opportunities with over 80 hours of training each biennium, educational and professional certification reimbursements, and an agency-wide commitment to diversity, equity, inclusion, and respect in the workplace. The Cybersecurity Audit team completes cybersecurity performance audits with State and Local governments to improve IT security. Their cybersecurity audits examine IT systems, looking for weaknesses that attackers could exploit and proposing solutions to help strengthen those systems. The mission is to collaborate with governments to provide actionable recommendations to improve the security posture of IT systems supporting essential government operations and services. This will be accomplished by building trust and relationships, sharing knowledge about cybersecurity leading practices and available resources, scoping audits flexibly, completing quality and timely audits with prioritized recommendations, and refining methods and approaches to stay relevant and meet emerging needs.

Requirements

• Bachelor’s degree and four years of audit experience which includes at least: two years in IT audit and has obtained either a relevant professional certification including but not limited to: Certified Information Systems Auditor (CISA), General Security Essentials Certification (GSEC), Certified Information System Security Professional (CISSP) or a master’s degree in data analytics, cybersecurity or closely related field.
• Relevant professional work and/or volunteer experience may substitute for education on a year-for-year basis.

Nice To Haves

• Degree in a field applicable to IT security and/or analyzing government programs is strongly preferred.
• Preference may be given to candidate with experience with governments, performance auditing and/or accountability auditing and technical knowledge associated with cybersecurity.

Responsibilities

• Responsible for overall audit planning through final audit presentation of any size or level of complexity cybersecurity audits.
• Independently leads audits that cover increasingly complex cybersecurity environments, which may involve multiple state agencies, local governments or levels of government.
• Provides expert level technical services in security for cybersecurity audits.
• May lead larger, more complex audits and coordinate the efforts of other auditors to accomplish the overall audit objectives under the direction of an assistant audit manager or audit manager.
• These large audits involve multiple agencies or levels of government, have complex IT security environments and several layers of applicable laws or regulations and require significant IT security knowledge.
• May lead audits and projects that include multiple IT audit staff and be responsible for the entire audit.

Benefits

• Flexible schedules
• Hybrid work environment
• Full benefits package
• Paid vacation, sick leave and holidays
• Growth and development opportunities, including 80+ hours of training each biennium
• Educational and professional certification reimbursements

What This Job Offers

• Job Type: Full-time
• Career Level: Senior