Senior IT Auditor

Georgia State University•Atlanta, GA

About The Position

Georgia State University is seeking a detail-oriented and forward-thinking professional to serve as a Senior IT Auditor. This role is responsible for providing independent assurance and advisory services focused on evaluating and strengthening the university’s information technology environment. The successful candidate will play a critical role in assessing IT risks, reviewing controls, and ensuring compliance with university policies, industry standards, and regulatory requirements.

Requirements

Strong written, verbal, and interpersonal communication skills, with the ability to clearly convey technical information to both technical and non-technical audiences.
Proven experience in IT auditing, risk assessment, and internal controls evaluation.
Expertise in auditing complex IT systems, including operating systems, networks, databases, cloud environments, and enterprise applications.
Proficiency with auditing tools, data analytics, and common IT frameworks (e.g., COBIT, NIST, ISO, ITIL).
Ability to build strong working relationships and collaborate effectively with stakeholders at all levels across the institution.
Solid understanding of cybersecurity principles, IT governance, data privacy regulations, and emerging technology risks.
Analytical mindset with the ability to evaluate large datasets, identify trends, and draw actionable insights.
Strong organizational and project management skills to lead multiple engagements and deliver high-quality results on time.
Bachelor's degree and 5 years of experience or a combination of education and experience.

Nice To Haves

Master's degree in IT, Information Systems, Computer Science, Accounting, Business, or related.
A combination of work experience, including training and education, may be substituted for a degree

Responsibilities

Under limited supervision, serve as auditor-in-charge for audits/projects directly involving specialized information technology IT) and as IT audit advisor on other projects, as assigned by director or associate director. Will coach staff and represent office to campus community on ongoing basis as IT consultant on full array of operational and compliance projects
Conduct initial meetings to assess risks and areas for audit. Based on budgeted time, circumstances, and complexity, devise preliminary scope and objectives. Solicit and respond to IT issues on all office projects to include hardware, software, and system development constraints and needs.
Conduct opening conference to communicate scope, objectives, and protocol to management. Inform and advise other auditors on IT for their conferences.
Perform preliminary phase of audit engagement to include analyses of internal control, network/system/application security, process improvement, integrity of financial/operational data, economy of resource utilization, and achievement of goals. Lead in preparing combined system and process flowcharts for all audits.
Develop audit programs to address, as applicable, IT general and application controls, systems development processes, data access and security, and network/system/application security. Assess fraud risks and vulnerabilities and advise on enhancements.
Develop detailed audit test procedures to verify compliance with information technology and systems standards. Focus on IT aspects of operational functions by mapping processes, examining flow and interfaces, evaluating infrastructure, and testing general controls, application controls, and transactions.
Oversee data extraction and analysis initiatives to optimize efficiency and effectiveness of department projects and operations. Coordinate all forensics associated with IT and computer equipment for fraud and other investigations.
Provide support to Georgia Department of Audits and Accounts and other external groups in reviewing controls supporting integrity of financial data and systems. Review IT operations, change management, training, and other core functions. Assist director and associate director in administrative department functions, such as risk assessment, audit planning, and personnel matters.
Perform other duties and responsibilities as assigned.