Senior Legislative IT Auditor I

Senior Legislative IT Auditor If your career goal is to make a difference, and you are looking for a rewarding career that supports work/life balance, consider joining the dedicated professionals at the State of Colorado, Office of the State Auditor (OSA). Our professional staff strives to support state government and the citizens of Colorado while providing a healthy and opportunity-based work environment for our staff. If you are the successful candidate for this exciting opportunity you can expect to benefit from, The Colorado Office of the State Auditor (OSA) serves as the government accountability arm for the citizens of Colorado auditing state agencies, colleges, universities, and other recipients of state funds. Overseen by the State Auditor, the OSA is an independent, nonpartisan staff agency within Colorado’s Legislative Branch. The OSA’s mission is to improve government for the people of Colorado. We are committed to promoting economical, effective, ethical, and equitable government. Our audits focus on reducing costs, improving the quality of services, and ensuring the accuracy and integrity of information. We help the General Assembly fulfill its legislative oversight responsibilities by providing independent, objective, and thorough information about whether state agencies use their authority and public resources properly and in compliance with laws and regulations; whether government programs are achieving their objectives and desired outcomes; and whether state government services are provided effectively, efficiently, equitably, and ethically. The OSA employs approximately 80 professional staff organized into five divisions: Financial Audits, Performance Audits, IT Audits, Tax Expenditure Evaluations, and Local Government Audits. We are winners of National NLPES and NSAA awards for Excellence in Auditing, and winner of the Denver Business Journal’s Healthiest Employer Award.

Work Environment:

• Primarily work hours 8:00 am - 5:00 pm, Monday-Friday

• Hybrid - staff are required to work in office at least one day a week., The Office of the State Auditor (OSA) currently has an opening for a full-time Senior IT Auditor I position in our IT Audit Division. This position will be responsible for conducting risk-based IT performance audits to assess whether governmental IT and information security programs and systems are designed, implemented and operate effectively, in compliance with policies, procedures, laws, regulations, and/or industry leading practices.

The Senior IT Auditor I position will assist and perform all aspects of assigned IT performance audits, which include planning, fieldwork, findings development, report preparation and production, Legislative Audit Committee (LAC) presentations, audit file workpaper preparation, and follow-up work related to verifying implementation status of audit recommendations for audit status reporting. The position will assist with or facilitate tasks including, but not limited to, the following, as applicable:

• Development of audit planning deliverables, including risk assessments, audit scopes, audit budgets and schedules;

• Execution of fieldwork procedures, including tests of design, implementation, and operating effectiveness of IT systems and information security related processes and controls;

• Development of written audit findings, recommendations, and reports drafts.

The position may assist with day-to-day operations of all stages of the IT audit process for specific, assigned audit projects in consultation with the IT audit manager and/or chief IT auditor. The position must manage time effectively as well as be able to perform under heavy, diverse, and complex workloads to produce quality deliverables within established timeframes and deadlines. The position may assist with administrative tasks related to IT audit contract monitoring. The position may assist with training and coaching other IT audit staff, as it relates to audit processes, standards, and best practices, as well as operational IT or information security processes, controls, technologies, standards and practices. The positions will provide such trainings through activities such as, on-the-job training sessions and informal or formal presentations and communications.

Other related IT audit functions and duties as deemed necessary

One (1) or more years’ of professional experience performing IT audits. This experience should include one year at the IT senior auditor level or equivalent.

Bachelor’s degree from an accredited university, in a field of study relevant to information technology, information security/assurance, management information systems (MIS), computer science, computer engineering.

• Please note that an active CISA certification or attainment of CISA certification is expected within 18 months of hire date.

Substitutions:

Progressively responsible for IT audit work, which provided the same kind, amount and level of knowledge acquired in the required education may substitute for the bachelor’s degree on a year- for-year basis

Preferred Qualifications in addition to the Minimum Qualifications:

• Professional IT auditing experience, which includes either IT general controls experience across information security, systems development, change management, or computer operations processes, or IT risk-based auditing across any number of IT and information security process areas, technologies, or services.

• Knowledge of, or experience with, Generally Accepted Government Auditing Standards (i.e., the Yellow Book) and other internal control standards, such as Green Book or COSO.

• Knowledge of, or experience with, relevant IT auditing standards, frameworks, and regulations, such as COBIT, IIA GTAGs, FISCAM, NIST SP 800-53, ISO/IEC 27001, HIPAA, PCI, Sarbanes-Oxley 404, etc.

• CISM, CISSP, or other IT audit related certifications.

• Commitment to ongoing career development, including audit project management skills.

• Strong critical thinking and problem solving skills.

• Demonstrated ability to work well under deadlines and heavy workloads.

• Excellent written and verbal skills.

• Competency with Microsoft Windows and Office applications, including Word, Excel, and PowerPoint.

• Knowledge of, or experience with, audit management software and electronic audit workpaper packages.