Lead Information Systems (IS) Auditor-AO

City and County of Denver•Denver, CO

2d•Hybrid

About The Position

The Auditor's Office, an independent agency of the City and County of Denver, delivers independent, transparent, and professional oversight to safeguard the public’s investments in the City and County of Denver. Our in-depth audit reports, that are issued each month to the public through Denver’s Audit Committee, look at how efficient and effective the city’s services and programs are for the people of Denver and provide recommendations for improvement. Our work is performed on behalf of everyone who cares about the city, including its residents, workers, and decision-makers. We provide a dynamic and collaborative work environment, excellent benefits, and professional development and continuing education opportunities for our employees. The City and County of Denver Auditor's Office is seeking a Lead Information Systems Auditor with strong auditing skills and an ability to work independently. Under the general direction of the IS Audit Manager, the Lead Internal Auditor leads day-to-day team execution of performance, information systems focused, financial and/or compliance audits and evaluations of local government functions and activities. The Lead Information Systems Auditor will be responsible for performing full performance, professional-level auditing work of information systems, general controls, application controls, processes, procedures, and methodologies, in accordance with generally accepted government auditing standards. They will review and evaluate financial and operational records for adequacy of internal controls and compliance with policy, Denver Revised Municipal Code (DRMC) rules and regulations, Denver City Charter, and applicable statutes. Responsibilities include planning, completing business process and internal control review engagements, and writing audit reports. The Lead IS Auditor assists the IS Audit Manager with work prioritization, assignments, evaluation and quality control over professional IS Auditors at varying levels. The position may also conduct various non-audit services. Auditor’s Office employees are currently working a hybrid schedule. This position requires a combination of in office attendance at our Downtown Denver location and remote work. Employees must work within the state of Colorado on their remote work days. We provide a computer with all work-related software applications; you must have a stable home internet connection for any remote work. This position is expected to be open to receive applications until Wednesday May 13, 2026. Please submit your complete application as soon as possible and no later than Wednesday May 13, 2026 at 11:59 PM.

Requirements

Bachelor’s Degree in Accounting, Business Administration, Finance, Information Systems, Public Administration, Government Analytics, or directly related field.
Three (3) years of senior level professional experience auditing and evaluating information technology business practices and processes to ensure compliance and efficiency.
IS/IT audit certification (CISA, CISSP, GIAC etc.) or progress toward a certification. Licenses and certifications must be kept current as a condition of employment.

Nice To Haves

Experience leading government performance, financial, IT, compliance and/or contract audits.
Three to five years professional work experience as a Senior IS Auditor.
Knowledge of information technology areas, such as information security, cloud computing, IT general controls, configuration management, change management, IT operations, data backup and recovery, and network controls.
Knowledge of IT best practices as described in FISCAM, NIST, ISO, PCI-DSS, CJIS, ITIL, etc.
Practical experience conducting data analysis using software tools such as PowerBi, Arbutus, ACL, SQL, or Python.
Working knowledge of Generally Accepted Governmental Auditing Standards.
An advanced degree.
Effective coaching and project management skills with a demonstrated ability to motivate and develop staff.
Possesses strong verbal and written skills.
Experience working in diverse teams.
Displays the ability to apply critical thinking and communication skills to resolve complex audit topics.

Responsibilities

Conducts information technology audits and evaluates city organizations and programs that include, but are not limited to, effectiveness, efficiency, public policy assessment, governance, and internal control and compliance objectives as defined by generally accepted government auditing standards and other standards used in IT audits.
Evaluates organizational operations and/or program results for potential areas of improvement such as operational efficiency, technology optimization, decreased turnaround times, streamlining of processes, and improved customer service with the goal of providing maximum value for resources expended.
With limited supervision, designs various auditing tests, including data analytics, to determine the reliability, integrity, and internal control of the financial and operational systems for compliance and performance purposes.
Contributes to the identification of risks and the development of risk assessments for IT audits.
Determines the extent of compliance with IT policies and procedures.
Assists with monitoring third-party contractors conducting IT and cybersecurity audits.
Applies relevant IT audit and security frameworks such as NIST, FISCAM, COBIT, ISO, etc. while conducting IT audits and integrated audits.
Gathers, examines, and analyzes information about the organization to be audited using best practices and performance benchmarks that are applicable to that organization.
Assisting the IS Audit Manager and other team members with all aspects of audits including project planning, fieldwork, report writing, and presentation of results.
Assisting with the review of workpapers of other team members.
Assisting the Audit Manager with day-to-day activities of each audit engagement and ensuring that project team members are conducting assigned audit work.
Ensuring that audit work complies with GAGAS and the Audit Service Division's operating policies and procedures.
Producing high-quality written products that analyze, synthesize, and explain complex issues to a variety of audiences, such as agency stakeholders and citizens of Denver.
Performing audit-related presentations and briefings.
Performing audit follow-up work for assigned audits.
Contributes to the development of audit team performance goals, documents team performance, provides performance feedback, and provides information for the annual formal performance evaluation of IS audit team members.
Takes appropriate action in response to management feedback.
Effectively and clearly communicates information to various audiences and possess strong interpersonal skills.
Ability to develop and conduct oral presentations of audit findings and recommendations.
Ability to work independently and as part of a team.
Performs other related duties as assigned or requested.