Job Description

Description

The Senior IT Assurance and Risk Advisory role executes IT audit projects as assigned. The role assists in preparing risk analysis, planning documents, audit objectives and test plans. The Senior IT Assurance and Risk Advisory role may also contribute, through serving as an audit team member, completing assigned audit tasks under the direction of other Audit team members. The role will provide advice and recommendations to Seniors and Staff as needed to assist in the execution of audit projects.
Accountabilities:
- Engagement Planning:
Work with audit lead/leadership to develop quality risk assessments for complex and standard audits on a timely basis. Ensure audit programs meet audit objectives. Ensure testing approach is appropriate and efficient to achieve adequate evidence to conclude on the objective. For detailed testing, ensure the sample size meets department sample guidelines. Provide necessary leadership and ensure all members of audit team understand responsibilities and deadlines. Facilitate client preparation. Offer suggestions to improve the planning process.
- Engagement Execution:
Work with audit lead/leadership to ensure quality fieldwork and work papers completion on a timely basis. Ensure all members of audit team are informed of audit status and expectations. Update clients as appropriate. Review work completed by staff/contractors and provide sufficient oversight. Offer recommendations to improve audit fieldwork standards. Provide IT SOX program support and testing.
- Engagement Reporting and Wrap-up:
Review and edit audit reports and deliver to audit management in a timely manner. Ensure the completeness of the audit observation section and accuracy of the disposition. Set up the closing section after report is finalized. Ensure audit surveys are distributed to appropriate clients. Ensure audit tasks are tracked through completion. Track finding remediation and apprise audit management on items that may go past due. Analyze problems, determine appropriate actions, and act in a timely/decisive manner. Work effectively with others by taking direction and being open to new ideas. Maintain productive working relationships within the department.
Required: - Bachelors degree (or equivalent experience) in Computer Science, MIS or Accounting
- 5 years of experience - Some public accounting experience is preferred One or more professional designations preferred (CISA, CISM, CRISC, CISSP
- 5 Years progressive audit experience
- Strong knowledge in:
- Internal Control and Audit
- Ability to identify deficiencies (design/operational) and make/support recommendations
- Business Risk acumen
- Strong communication and presentation skills
- Strong analytical skills and a high level of integrity
- Strong organizational skills with ability to manage multiple responsibilities
- Ability to work independently and deal with ambiguity
- Previous experience evaluating emerging technology experience is a plus
Preferred:

This job was posted on Wed Nov 08 2017 and expired on Fri Nov 10 2017.

Minimum $43K /yr

$88K /yr Average

Maximum $194K /yr

Tasks

Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.

Monitor current reports of computer viruses to determine when to update virus protection systems.

Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.

Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.

Modify computer security files to incorporate new software, correct errors, or change individual access status.

Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.

Document computer security and emergency measures policies, procedures, and tests.

Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.

Monitor use of data files and regulate access to safeguard information in computer files.

Coordinate implementation of computer system plan with establishment personnel and outside vendors.

Train users and promote security awareness to ensure system security and to improve server and network efficiency.

Maintain permanent fleet cryptologic and carry-on direct support systems required in special land, sea surface and subsurface operations.

Skills

Reading Comprehension - Understanding written sentences and paragraphs in work related documents.

Active Listening - Giving full attention to what other people are saying, taking time to understand the points being made, asking questions as appropriate, and not interrupting at inappropriate times.

Writing - Communicating effectively in writing as appropriate for the needs of the audience.

Speaking - Talking to others to convey information effectively.

Critical Thinking - Using logic and reasoning to identify the strengths and weaknesses of alternative solutions, conclusions or approaches to problems.

Active Learning - Understanding the implications of new information for both current and future problem-solving and decision-making.

Monitoring - Monitoring/Assessing performance of yourself, other individuals, or organizations to make improvements or take corrective action.

Complex Problem Solving - Identifying complex problems and reviewing related information to develop and evaluate options and implement solutions.

Judgment and Decision Making - Considering the relative costs and benefits of potential actions to choose the most appropriate one.

Systems Analysis - Determining how a system should work and how changes in conditions, operations, and the environment will affect outcomes.

Time Management - Managing one's own time and the time of others.

Knowledge

Administration and Management - Knowledge of business and management principles involved in strategic planning, resource allocation, human resources modeling, leadership technique, production methods, and coordination of people and resources.

Customer and Personal Service - Knowledge of principles and processes for providing customer and personal services. This includes customer needs assessment, meeting quality standards for services, and evaluation of customer satisfaction.

Computers and Electronics - Knowledge of circuit boards, processors, chips, electronic equipment, and computer hardware and software, including applications and programming.

Engineering and Technology - Knowledge of the practical application of engineering science and technology. This includes applying principles, techniques, procedures, and equipment to the design and production of various goods and services.

Education and Training - Knowledge of principles and methods for curriculum and training design, teaching and instruction for individuals and groups, and the measurement of training effects.

English Language - Knowledge of the structure and content of the English language including the meaning and spelling of words, rules of composition, and grammar.

Public Safety and Security - Knowledge of relevant equipment, policies, procedures, and strategies to promote effective local, state, or national security operations for the protection of people, data, property, and institutions.