IT Auditor

Penn State University • Ferguson Township, PA

2d • $68,200 - $129,500 • Hybrid

About The Position

Penn State Internal Audit is seeking to hire an IT Auditor with internal or external auditing experience to assist in performing audits designed to independently review and evaluate the University’s information technology and operational controls. The position will: Work independently to perform all aspects of audit plans for College, Campus, Administrative Area, and process audits Apply accepted audit techniques to identify and assess the level of risk inherent in the operation under audit; obtain and analyze evidential matter and document such procedures; formulate and communicate audit conclusions Develop written audit reports of findings; present briefings on audit findings to management and appraise adequacy of corrective actions proposed or taken by management to improve deficient conditions Perform audit follow-up procedures and/or review audit follow-up responses to ensure management is addressing control weaknesses and process inefficiencies identified in audit reports in a timely manner Assist the IT Audit Supervisor in developing and/or revising audit programs and questionnaires Assist with investigations into possible fraud, waste, or abuse as assigned, using a high level of professional judgment Maintain high level of understanding and familiarity with current University policies and procedures and with industry standards and best practices in order to assess compliance, and to conclude on the adequacy of internal controls Provide consultation as requested to assure University policies and procedures and provide for adequate internal controls to mitigate and address risks Support departmental, Finance & Business and University wide strategic initiatives by participation in ongoing groups and teams The successful candidate will demonstrate: Knowledge of auditing principles, practices, and procedures Knowledge of both General IT and Application IT controls Knowledge in data security requirements/standards highly preferred including Health Insurance Portability and Accountability Act (HIPAA), Electronic Protected Health Information (ePHI), National Institute of Standards and Technology (NIST) 800-53 and 800-171, and Payment Cared Industry Data Security Standards (PCI-DSS) Excellent verbal and written communication, analytical, and organizational skills Strong project and time management skills to develop and adhere to budgets and timelines The ability to work in a collaborative environment Strong professional judgement and an ability to work with individuals from a variety of cultures and backgrounds Effective and sustainable use of University resources in conduct of audits and decision-making processes

Requirements

• Knowledge of auditing principles, practices, and procedures
• Knowledge of both General IT and Application IT controls
• Excellent verbal and written communication, analytical, and organizational skills
• Strong project and time management skills to develop and adhere to budgets and timelines
• The ability to work in a collaborative environment
• Strong professional judgement and an ability to work with individuals from a variety of cultures and backgrounds
• Effective and sustainable use of University resources in conduct of audits and decision-making processes
• Bachelor's Degree
• 3+ years of relevant experience; or an equivalent combination of education and experience accepted
• None
• Must be a U.S. citizen to apply to this opportunity.

Nice To Haves

• Knowledge in data security requirements/standards highly preferred including Health Insurance Portability and Accountability Act (HIPAA), Electronic Protected Health Information (ePHI), National Institute of Standards and Technology (NIST) 800-53 and 800-171, and Payment Cared Industry Data Security Standards (PCI-DSS)
• Bachelor’s degree in Accounting or Information Systems and certifications, such as CISA, CPA, or CIA
• Experience in auditing information systems or information systems security in higher education
• Experience in programming and data analytics with tools such as ACL and CaseWare

Responsibilities

• Work independently to perform all aspects of audit plans for College, Campus, Administrative Area, and process audits
• Apply accepted audit techniques to identify and assess the level of risk inherent in the operation under audit; obtain and analyze evidential matter and document such procedures; formulate and communicate audit conclusions
• Develop written audit reports of findings; present briefings on audit findings to management and appraise adequacy of corrective actions proposed or taken by management to improve deficient conditions
• Perform audit follow-up procedures and/or review audit follow-up responses to ensure management is addressing control weaknesses and process inefficiencies identified in audit reports in a timely manner
• Assist the IT Audit Supervisor in developing and/or revising audit programs and questionnaires
• Assist with investigations into possible fraud, waste, or abuse as assigned, using a high level of professional judgment
• Maintain high level of understanding and familiarity with current University policies and procedures and with industry standards and best practices in order to assess compliance, and to conclude on the adequacy of internal controls
• Provide consultation as requested to assure University policies and procedures and provide for adequate internal controls to mitigate and address risks
• Support departmental, Finance & Business and University wide strategic initiatives by participation in ongoing groups and teams

Benefits

• Penn State provides a competitive benefits package for full-time employees designed to support both personal and professional well-being.
• In addition to comprehensive medical, dental, and vision coverage, employees enjoy robust retirement plans and substantial paid time off which includes holidays, vacation and sick time.
• One of the standout benefits is the generous 75% tuition discount, available to employees as well as eligible spouses and children.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees