Senior Auditor - Information Systems

State of Maine•Augusta, ME

4d•$63,491 - $89,651•Onsite

About The Position

The Senior Auditor provides technical and audit support by assisting in the planning, designing and performance of audit assignments in accordance with the U.S. Government Accountability Office (GAO), the American Institute of Certified Public Accountants (AICPA), Information System Audit and Control Association (ISACA), and National Institute of Standards and Technology (NIST) guidance. The Senior Auditor provides guidance on the proper interpretation and practical application of those principles. The daily responsibilities of an IT Senior Auditor include: performing audits, analysis, and testing of information technology controls used by organizational units of State government. This work is conducted across all layers of computing environments, including physical, operating system, database, network, and application layers, as well as end-user processes and security. providing direct supervision to staff auditors by reviewing work for accuracy, completeness, and adherence to professional IT auditing standards; researching laws and regulations to ensure proper administration of information technology systems used to operate State and Federal programs; providing technical assistance to Senior Leadership and financial and program auditors acting as a resource for State agency personnel through identification of risks based on testing of technology controls established to provide assurance that State-administered programs comply with Federal laws, regulations, contracts, and agreements.

Requirements

A Bachelor’s Degree in Computer Science and/or Management Information Systems, -OR- a four (4) year equivalent combination of education, training, and/or progressively responsible professional experience in a related field that demonstrates a thorough knowledge of IT systems audits, technical knowledge covering multiple areas, such as IT security, change management, operating systems, software development, databases, networks and cloud computing.
Knowledge of IT auditing standards, principles, techniques, methodologies, and practices promulgated by the U.S. GAO, AICPA, ISACA, and NIST.
Ability to communicate effectively orally and in writing.
Ability to establish and lead a team, including planning, assigning, and overseeing procedures to fulfill audit objectives.
Ability to interpret complex agency policies, procedures, and goals for audit planning purposes.
Ability to conduct complex information technology control audits.
Ability to apply, analyze and interpret data extraction and data analytics techniques, form conclusions, and coordinate action plans based on results.
Ability to research and interpret technology-related State and Federal laws, regulations, rules, and compliance requirements.
Ability to interpret and implement new auditing standards or accounting pronouncements.
Ability to analyze and interpret complex IT system designs, logic, functionality, and related processes, including organizational procedures and workflow.
Ability to assess audit risk for complex information technology systems and processes, and effectively adjust to changes as necessary.
Ability to effectively secure and document facts through investigation and interviewing.
Ability to develop effective testing strategies to verify IT system functionality and controls.
Ability to effectively and consistently conclude whether agency IT controls meet requirements based on audit testing results.
Ability to effectively prepare and classify audit findings and recommend appropriate corrective action.
Ability to effectively write technical workpapers, reports and other documents.
Ability to review work of professional staff for accuracy, completeness, and adherence to professional auditing standards.

Nice To Haves

Professional certification as a Certified Information System Auditor (CISA).

Responsibilities

Conduct independent and objective audits of information technology systems that support the State of Maine’s financial reporting and compliance with Federal program regulations.
Perform audits, analysis, and testing of information technology controls used by organizational units of State government across all layers of computing environments.
Provide direct supervision to staff auditors by reviewing work for accuracy, completeness, and adherence to professional IT auditing standards.
Research laws and regulations to ensure proper administration of information technology systems used to operate State and Federal programs.
Provide technical assistance to Senior Leadership and financial and program auditors.
Act as a resource for State agency personnel through identification of risks based on testing of technology controls.
Ensure State-administered programs comply with Federal laws, regulations, contracts, and agreements.