Senior Auditor - Information Technology

State of Maine•Augusta, ME

1d•Onsite

About The Position

The Office of the State Auditor is seeking a Senior Auditor - Information Technology to conduct independent and objective audits of information technology systems that support the State of Maine’s financial reporting and compliance with Federal program regulations. This role offers an opportunity to grow your career, expand your knowledge of IT systems and auditing, and collaborate with industry professionals. The IT Senior Auditor provides technical and audit support by assisting in the planning, designing, and performance of audit assignments in accordance with U.S. Government Accountability Office (GAO), the American Institute of Certified Public Accountants (AICPA), Information System Audit and Control Association (ISACA), and National Institute of Standards and Technology (NIST) guidance. The position also provides guidance on the proper interpretation and practical application of these principles.

Requirements

A Bachelor’s Degree in Computer Science and/or Management Information Systems, -OR- a four (4) year equivalent combination of education, training, and/or progressively responsible professional experience in a related field that demonstrates a thorough knowledge of IT systems audits, technical knowledge covering multiple areas, such as IT security, change management, operating systems, software development, databases, networks and cloud computing.
Knowledge of IT auditing standards, principles, techniques, methodologies, and practices promulgated by the U.S. GAO, AICPA, ISACA, and NIST.
Ability to communicate effectively orally and in writing.
Ability to establish and lead a team, including planning, assigning, and overseeing procedures to fulfill audit objectives.
Ability to interpret complex agency policies, procedures, and goals for audit planning purposes.
Ability to conduct complex information technology control audits.
Ability to apply, analyze and interpret data extraction and data analytics techniques, form conclusions, and coordinate action plans based on results.
Ability to research and interpret technology-related State and Federal laws, regulations, rules, and compliance requirements.
Ability to interpret and implement new auditing standards or accounting pronouncements.
Ability to analyze and interpret complex IT system designs, logic, functionality, and related processes, including organizational procedures and workflow.
Ability to assess audit risk for complex information technology systems and processes, and effectively adjust to changes as necessary.
Ability to effectively secure and document facts through investigation and interviewing.
Ability to develop effective testing strategies to verify IT system functionality and controls.
Ability to effectively and consistently conclude whether agency IT controls meet requirements based on audit testing results.
Ability to effectively prepare and classify audit findings and recommend appropriate corrective action.
Ability to effectively write technical workpapers, reports and other documents.
Ability to review work of professional staff for accuracy, completeness, and adherence to professional auditing standards.

Nice To Haves

Professional certification as a Certified Information System Auditor (CISA).

Responsibilities

Performing audits, analysis, and testing of information technology controls used by organizational units of State government across all computing environments (physical, operating system, database, network, application, and end-user processes and security).
Providing direct supervision to staff auditors by reviewing work for accuracy, completeness, and adherence to professional IT auditing standards.
Researching laws and regulations to ensure proper administration of information technology systems used to operate State and Federal programs.
Providing technical assistance to Senior Leadership and financial and program auditors.
Acting as a resource for State agency personnel through identification of risks based on testing of technology controls established to provide assurance that State-administered programs comply with Federal laws, regulations, contracts, and agreements.