Senior IT Auditor

Print (https://www.governmentjobs.com/careers/colorado/jobs/newprint/4673578)



Senior IT Auditor

Salary

$99,300.00 - $105,000.00 Annually

Location

Denver, CO

Job Type

Full Time

Job Number

CU34987

Department

University of Colorado - System Administration

Opening Date

09/26/2024

Closing Date

10/20/2024 11:59 PM Mountain

FLSA

Determined by Position

Primary Physical Work Address

1800 Grant St. Denver, CO 80203

FLSA Status

Exempt; position is not eligible for overtime compensation.

Department Contact Information

SystemHR.Recruiting@cu.edu

Type of Announcement

This announcement is not governed by the selection processes of the classified personnel system. Applications will be considered from residents and non-residents of Colorado.

How To Apply

Online applications through the Colorado Jobs portal will not be accepted. Please follow instructions on the job announcement for submitting an application.

• Description

• Benefits

Department Information

To apply, please go to:https://cu.taleo.net/careersection/2/jobdetail.ftl?job=34987

Who We Are:

System Administration, which also houses the Office of the President, is located in the uptown neighborhood of Denver with a few smaller offices located on the campuses. Many of our departments support the educational and research missions of the four University of Colorado campuses, but System Administration is not considered a campus. We provide diverse opportunities for professional development, innovation, and collaboration with talented staff and faculty. Learn more about CU System Administration (https://www.cu.edu/cu-careers/cu-system) .

Position Summary:The Department of Internal Audit (IA) reports directly to the University of Colorado (CU) Board of Regents through its Regent Audit Committee to ensure the University receives high quality audit, investigative, educational, and consulting services across the entire CU system. The Senior IT Auditor is responsible for planning and executing audit, investigative, and consultative engagements for the benefit of the university.

The Senior IT Auditor is responsible for performing assurance and advisory engagements, predominantly related to information systems and data security, by consistently applying theories, methods, principles, and practices associated with professional internal auditing, performing duties associated with professional auditing that are predominantly intellectual and varied in nature, requiring creative, analytical, evaluative, interpretive, and critical thinking. Additionally, the Senior IT Auditor will help support Internal Audit’s data analytics program. The Senior IT Auditor is accountable for delivering high quality and timely insights shared with stakeholders and upholds the IA team core values.

This security-sensitive position requires a criminal and financial background check for initial appointments, or at any time when determined by the position’s supervisory authority to be in the best interests of the University. In addition, this position requires adherence to the Code of Ethics promulgated by The Institute of Internal Auditors and the University’s Fiscal Code of Ethics.

This position reports to the Senior Manager of Information Security and Data Analytics and is exempt from the State of Colorado Classified Staff System.

Where You Will Work:Hybrid – this role is eligible for a hybrid schedule, working some days from home and some days in office. This position is based at the CU System Office in Denver and requires travel to CU Campuses as needed.

Description of Job

Duties & Responsibilities:

Functional and Technical Project Management

• Able to identify, classify and rate risks and issues according to their significance, and communicate them to IA management and stakeholders accurately and succinctly.

• Accountable for timely completion of audit activities throughout the audit cycle/process, ensuring testing is complete in a manner that clearly supports audit objectives.

• Understands and utilizes the annual risk assessment/audit plan, and individual audit objectives in relation to their role.

• Drives projects to timely completion.

• Identifies effective or creative approaches to obtaining and utilizing data and information in the audit process.

• Utilizes the department’s assurance and advisory methodologies.

• Evaluates risk using relevant authoritative guidance, cultural awareness, and cumulative audit knowledge obtained through previous audits in completing assurance and advisory engagements.

• Responsible for complete and error free audit project documentation.

• Helps draft clear, concise, well-organized, and factual observations and reports.

• Leverages technology and audit tools necessary to efficiently and effectively complete projects.

• Identifies project risks and barriers, and communicates them timely to the project lead, Director and AVP.

• Ensures work is consistent with project objectives, scope, and The Institute of Internal Auditors’ International Professional Practices Framework and, where appropriate, the guidance promulgated by the Information Systems and Control Association (ISACA).

• Supports the department Quality Assurance and Improvement Program (QAIP) as directed by the AVP.

• Develops effective project and work stream communications with minimal support.

• Presents to project team and stakeholders.

• Maintains confidentiality of sensitive and privileged information and communications.

• Supports investigations of potential fiscal misconduct, as needed.

• Effectively supports external vendors and partners as needed.

• Supports the Data Analytics program through data analysis and report creation.

• Researches and proposes innovative techniques to identify fraud, waste, and abuse.

• Identifies areas to leverage Data Analytics and steer proactive and predictive efforts.

  Department Planning and Administration

• Stewards project resources, expenses and budget.

• Contributes insights by identifying potential assurance or advisory projects during the IA Plan development.

  Communication and Collaboration

• Maintains personal independence/objectivity and appropriately handles related concerns in projects.

• Identifies and acts on opportunities to build strategic relationships between individuals/teams/organizations to help achieve university goals.

• Manages interpersonal conflict proactively.

• Maintains professional appearance and attitude.

• Communicates risks and issues to auditees timely throughout the audit.

  Education and Counseling

• Seeks opportunities to support managers, directors and AVP in providing counsel and education to the university community through such mechanisms as workshops, committee participation, and consultation projects, to enhance the university’s understanding of sound business practices that improve governance processes, risk management, and the control environment.

• Shares knowledge by preparing and delivering development sessions, counseling and education to department staff, peers and others.

• Counsels auditees regarding process quality, risk treatment, and university objective achievement.

  Continuous Improvement and Adaptability

• Regularly assesses own competencies and acts on self-identified gaps and feedback from others.

• Continuously improves knowledge and skills related to the theories, methods, and principles of the profession of internal auditing, and knowledge of the university and higher education environment.

• Demonstrates improvement by consistently learning from and applying changes expressed through received feedback.

Minimum Qualifications, Substitutions, Conditions of Employment & Appeal Rights

Minimum Qualifications:

• A bachelor’s degree or advanced degree from an accredited university of higher education in a field of study relevant to information management, information/computing science or engineering, business or finance, mathematics or numerical analysis, or similar or equivalent professional experience (the educational requirement may be substituted by professional experience on a year for year basis)

• Three (3) years of audit-related or business experience including:

• One (1) year of project management experience

• An active Certified Information Systems Audit (CISA) certification or development plan to achieve the certification within two years of hire

• Local and regional travel to CU campuses on an “as needed” basis and may be on short notice

• Proficiency with the use of Microsoft Office programs and data analytics tools

Preferred Qualifications:

• An advanced degree in a relevant computing or business field, or in any field that enhances analysis, communication, or interpersonal interaction

• Five (5) years of audit-related or business experience including:

• one (1) year of project management experience

• Professional experience in higher education, research institutions, technology management, or business analysis

• Knowledge and application of relevant industry, security, privacy, governance, or compliance frameworks and standards such as CMMC, COBIT, HIPAA, FERPA, PCI

• Knowledge and application of relevant technical guidance from organizations promoting technology best-practices or standards for IT security, privacy, operations, and service management such as NIST, ISO, OWASP, CIS, ITIL

• Experience with audit management software solutions, such as TeamMate+

• Experience or skills in any IT technological role such as program management, operations, security, data management or inquiry, or application development

• Certified Internal Auditor (CIA), or relevant audit-related, IT risk and security, IT and business process/management certifications

• Working knowledge of LAN components (clients, servers, routers, etc.)

• CompTIA Security+ Certification

• Experience authoring SQL queries to extract data from repositories

• Experience with Python and/or Jupyter Notebook creating visualizations and conducting data analysis

• Familiarity with statistical principles

Knowledge, Skills, and Abilities:

• Knowledge or practical exposure to information technology or information systems sufficient to successfully engage information technology professionals and management concerning technology risk

• Knowledge, understanding, and ability to conduct work in accordance with the International Professional Practices Framework of the Institute of Internal Auditors and IT Audit Framework of the Information Systems Audit and Control Association

• Collaboration skills, including the ability to work with others from different areas and backgrounds to reach a common goal

• Computer skills, including the ability to utilize Microsoft Office programs (i.e. Word, Excel, PowerPoint, Outlook, etc.) and learn and experiment with new software and systems

• Interpersonal skills, including the ability to facilitate interaction, communication, and teamwork between others

• Oral, written, and listening communication skills, including the ability to accurately interpret what others are saying and convey messages, information, concepts, and details accurately and clearly

• Organizational skills, including the ability to set and meet goals and deadlines, manage appointments, create schedules, coordinate and facilitate meetings, and make decisions

• Analytical and problem-solving skills, including the ability to examine and summarize complex data and trends to resolve issues, produce results, and draw broader conclusions (i.e. demonstrate business acumen)

• Follow and uphold ethical guidelines, standards, and integrity and adhere to core character values of trustworthiness, respect, responsibility, fairness, caring, and good citizenship

• Manage time and priorities effectively

• Knowledge, understanding, and ability to conduct oneself in accordance with the Regent Laws, university Administrative Policy Statements and relevant Procedural Statements, as well as department policies and procedures

• Conduct self in a professional manner and delivers high quality work product

• Foster an environment of trust and candor within the team and manage conflict proactively

Supplemental Information

How to Apply:

For full consideration, please attach the following as separate documents to your application by October 20th athttps://cu.taleo.net/careersection/2/jobdetail.ftl?job=34987:

• A cover letter identifying the job specific minimum qualifications you possess

• A resume including any and all relevant experience to be accurately assessed against the qualifications listed in the posting.

Benefits:With our unparalleled range of benefits, including top-notch healthcare, comprehensive wellness programs, enriching professional development, and a dynamic work-life balance, we ensure your holistic growth and happiness.

• No-cost or low-cost medical & dental plan options, some inclusive of IVF assistance.

• Disability, Life, Vision Insurance options.

• Multiple retirement planning options including a mandatory 401(a) plan where CU contributes 10% of your gross pay, a 401k or 403b plan and a 457 deferred compensation plan.

• Pre-tax savings plans, such as Health care and Dependent care flexible spending accounts.

• Embrace a healthy work-life balance with ample sick and vacation leave, along with at least 12 paid holidays. This includes a dedicated week off for winter break.

• 6 weeks of parental leave to adjust to the joys of parenthood.

• A tuition benefit program for you and/or your dependents.

• Free RTD EcoPass and Free Onsite Parking at our 1800 Grant Street Office.

• Many additional perks & programs with the CU Advantage (https://advantage.cu.edu/) .

Additional taxable fringe benefits may be available.

For more information on benefits programs, please review ourComprehensive Benefits Guide (https://www.cu.edu/node/183087) .

Access ourTotal Compensation Calculator (https://www.cu.edu/node/153125) to see what your total rewards could be at CU. (This position is a University Staff position)

Please note that each agency's contact information is different; therefore, we encourage all applicants to view the full, official job announcement which includes contact information and class title. Select the job you wish to view, then click on the "Print" icon.

Agency

State of Colorado

Address

See the full announcement by clicking

the "Printer" icon located above the job title

Location varies by announcement, Colorado, --

Website

https://careers.colorado.gov/

Please verify your email addressVerify Email