IT Auditor

Summary

- Conduct internal audit activities within the organization, including providing independent, objective assurance and consulting activity designed to add value and improve the organization's operations.
- Internal audit is intended to assist the organization in accomplishing its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes.
- Internal Audit is accountable for developing and implementing a risk-based internal audit plan, assisting management in complying with applicable internal control policies and regulations, and working with management to bring cost effective and efficient leading practices.
- Internal Audit has the authority to perform internal audit and consultative services, have access to necessary data when requested, obtain assistance of Authority personnel as needed.
- Activities may include audits of financial, operational, IT, compliance/regulatory, or strategic business functions and related risks and controls. May also include execution of special investigations/audits involving cases of fraud, waste, and abuse and/or ethical/regulatory complaints.
- Operate as ambassador and champion of the Internal Audit vision and strategy by demonstrating support and actively communicating with the audit team and the business.

Responsibilities

• Execute IT internal audit engagements using IA methodology, build relationships with clients, identify client concerns, and lead interactions in an organized, collaborative, and knowledgeable manner.
• Create high quality deliverables, including planning documents, audit programs, walkthroughs, process flows, document work papers, observation sheets and first draft reports , within established timelines and budgets.
• Identify key risks and internal controls, develop or review audit programs, risk and control matrices, and perform or review detailed tests of controls.
• Develop and execute data analysis routines and visualize and interpret the results.
• Document audit observations including root cause, risk or exposure, and recommendations for solutions.
• Benchmark IT operational processes and controls, identify process improvements, and partner with leadership to communicate observations to senior management and auditees.
• Lead, coach, and mentor team members.
• Remain current on IT and utility industry trends and strategic initiatives and share with the team.

Knowledge, Skills and Abilities

• Thorough familiarity with Information Systems auditing concepts and techniques.
• Knowledge of COBIT, NIST, ITIL, Center for Internet Security (CIS)COSO, and IIA Standards.
• Ability to plan, organize, manage time and deadlines, and execute large complex audits.
• Ability to acquire, analyze and interpret large volumes of data to identify potential audit issues and develop practical recommendations
• Strong verbal, written and presentation communications skills.
• Proficient in Microsoft Word, Excel, PowerPoint, and Visio.

Education, Experience and Certifications

• Bachelor's degree.
• Minimum four years of Information Systems Technology audit experience.
• CISA is required.
• Experience auditing some of the following: SAP, Windows, UNIX, Oracle, SQL, LANs, WANs, Internet/Firewalls, Network Security and Infrastructure, Cybersecurity.

Physical Requirements

Approximately 15 - 20% travel primarily within New York State.

---