IT Internal Auditor

Budget Management - Columbus, OH

Full-time - Mid Level

Remote - Columbus, OH

Professional, Scientific, and Technical Services

About the position

The IT Internal Auditor position at the Ohio Office of Budget and Management involves evaluating information technology processes and procedures to assess IT-related risks, ensuring compliance with industry standards, and providing recommendations for improvement. The role requires a combination of independent work and collaboration within a team, focusing on quality and adherence to professional internal audit standards.

Responsibilities

• Evaluate information technology processes and procedures to assess IT-related risks.
• Assess the design and effectiveness of IT controls and compliance with industry standards.
• Manage multiple concurrent projects with tight timelines.
• Identify and define audit scope and objectives, developing criteria for audit work programs.
• Exhibit objectivity in gathering, evaluating, and communicating information.
• Conduct interviews and walkthroughs with agency subject matter experts.
• Analyze technical documents to determine relevant controls and perform testing.
• Determine underlying causes of issues and develop recommendations for remediation.
• Prepare clear and concise work papers with observations.
• Perform follow-up activities on prior audit issues and validate agency remediation.
• Document business processes within narratives or flowcharts, identifying risks and controls.
• Develop risk and control matrices and test plans for key controls.
• Provide guidance and training to new auditors.

Requirements

• 3 years of experience in IT audit, IT application development, IT security processes, or IT project management.
• Completion of an undergraduate core program in computer science or related field; 12 months of experience in IT audit, IT application development, IT security processes, or IT project management.
• Certified Information Systems Auditor (CISA) or other relevant certification is preferred.

Nice-to-haves

• Ability to assist in non-IT reviews, such as business processes.
• Prior experience conducting IT and cybersecurity-related audits.
• Knowledge and understanding of NIST 800-53 security controls.
• Experience in creating process documentation and developing audit plans.
• Knowledge of MS Word, Excel, Visio, and PowerPoint; experience with Cloud Computing, TeamMate, and Data Analytics is a plus.

Benefits

• Medical Coverage
• Free Dental, Vision and Basic Life Insurance premiums after eligibility period
• Paid time off including vacation, personal, sick leave, and 11 paid holidays per year
• Childbirth, Adoption, and Foster Care leave
• Education and Development Opportunities
• Public Retirement Systems and Optional Deferred Compensation