Information Systems Auditor 1 QA

Description
Duties Description
ITS provides operational support to state agencies on a 24x7x365 basis; some positions may be required to provide this critical service at any time.

Under the direction of an Information Systems Auditor 2 SG-27, the incumbent will perform audit and quality assurance tasks within the Quality Assurance Audit Unit of the Office of Internal Audit. The team will assess the effectiveness of all ITS' internal controls, such as onboarding/offboarding employees, systems record management, applications and network systems management, ensuring effectiveness, efficiency, confidentiality, integrity and overall compliance with required laws and regulations.

Illustrative duties include, but are not limited to, the following:

• Continuous auditing of high-risk areas, such as general and technical controls for asset inventory management; systems development life cycles; network security and firewalls; help desk and incident response programs; onboarding/offboarding of state employees and contractors; data and server records management; financial systems accuracy; and change management systems to ensure consistency and quality of system operations.
• Perform quality assessments and audits of systems and applications: to verify that systems and applications are appropriate, are efficient, and are adequately controlled to ensure valid, reliable, timely, and secure input, processing, and output at all levels of a system's activity.
• Perform quality assessments and audits of information processing facilities: to verify that the processing facility is controlled to ensure timely, accurate, and efficient processing of applications under normal and potentially disruptive conditions.
• Perform quality assessments and audits of systems development: to verify that the systems under development meet the objectives of the organization, and to ensure that the systems are developed in accordance with generally accepted standards for systems development.
• Perform quality assessments and audits of management of IT, network, and enterprise architecture: to verify that IT management has developed an organizational structure and procedures to ensure a controlled and efficient environment for information processing.
• Perform quality assessments and audits on financial system data, accounting operations, and staff.
• Prepare detailed audit documentation, audit evidence, and work papers in compliance with Internal Audit Standards.
• Be able to create and interpret quality assessment/audit methodology, objectives, and scope for all technical, operational, and financial audits.
• Provide quality assurance recommendations to ITS managers and executives based on internal audit and assessment findings.
• Test functionality and logic of current systems to determine any system deficiencies, potential areas of exposure, or security weakness.
• Design and perform test techniques required to ensure the accuracy and integrity of the systems.
• Demonstrate working knowledge for members of the audit team on audit trails, verifying audit techniques built into the system, evaluating system checks and controls, and solving problems relevant to the systems' internal controls as they emerge.
• Use Excel and other analysis software to analyze large amounts of data to identify issues, non-compliance with policies and procedures, and potential fraud.
• Take part in periodic on-site reviews of asset inventory, disaster recovery, informational and physical security of department systems and provide recommendations for improvements.
• Develop technical questions and lead meetings with ITS management and executive staff.
• Write and present professional and detailed quality assessment/audit reports on technical, operational, and financial topics for internal ITS management, chief executives, and the Chief Information Officer.
• Perform necessary supervisory duties

Qualifications
Minimum Qualifications
A bachelor's degree and three years of IT auditing experience.

IT audit experience must have been gained in any one or combination of the following:

• An auditor with responsibility for the audits of system development life cycle, including the writing and presentation of findings reports of technical issues to a non-technical audience.
• An auditor with responsibility for the audits of physical and logical access controls, general IT controls, and application controls, including the writing and presentation of findings reports of technical issues to a non-technical audience.
• An auditor principally engaged in audits of IT project management, telecommunication networks, software, and business continuity preparedness.
• An information systems professional with responsibility for the analysis and evaluation of information systems, including platforms; network infrastructure; and operational practices.
• As a field auditor with federal, state, or municipal agency, with the responsibility for performing comprehensive IT audits to determine the compliance of individuals or businesses.

Education/Experience Substitution: J.D. or master's degree may substitute for one year of technical experience; Ph.D. may substitute for two years of technical experience.

Additional Comments
ITS will not offer permanent employment to any candidate unless the candidate provides documentation that they are authorized to accept work in the United States on a permanent basis. It is the policy of ITS not to hire F1 or H1 visa holders for permanent employment or to sponsor non-immigrant aliens for temporary work authorization visas or for permanent residence.

Some positions may require fingerprinting.

Some positions may require up to 25% travel and/or lifting up to 50 lbs. Some positions are pending Civil Service approval. Details of position(s) will be described further if you are selected for an interview.

If eligible, positions located in New York City will receive an additional $3,400 downstate adjustment location pay with regular annual salary. Positions located in the Mid-Hudson will receive an additional $1,650 adjustment location pay.

to permanent non-competitive and the official probationary period will begin.

Benefits of Working for NYS Generous benefits package, worth 65% of salary, including:

Holiday & Paid Time Off

• Thirteen (13) paid holidays annually
• Up to Thirteen (13) days of paid vacation leave annually
• Up to Five (5) days of paid personal leave annually
• Up to Thirteen (13) days of paid sick leave annually for PEF.
• Up to three (3) days of professional leave annually to participate in professional development

Health Care Benefits

• Eligible employees and dependents can pick from a variety of affordable health insurance programs
• Family dental and vision benefits at no additional cost

Additional Benefits

• New York State Employees' Retirement System (ERS) Membership
• NYS Deferred Compensation
• Access to NY 529 and NY ABLE College Savings Programs, as well as U.S. Savings Bonds
• Public Service Loan Forgiveness (PSLF)
• Up to 50% telecommuting with satisfactory performance reviews, per the PEF union contract.
• And many more.

The Office of Information Technology Services is an equal opportunity employer, and we recognize that diversity in our workforce is critical to fulfilling our mission. We encourage all individuals with disabilities to apply.