> Markdown version of [/jobs/ext/2697088-information-systems-auditor-1-sg-23-nyhelps-item-00679](https://www.wearedevelopers.com/jobs/ext/2697088-information-systems-auditor-1-sg-23-nyhelps-item-00679). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Auditor 1, (SG-23)(NYHELPS) Item# 00679

- **Company:** NYS Governor's Office of Employee Relations
- **Location:** Albany, NY, United States (Remote available)
- **Salary:** $86,681.0 - $109,650.0
- **Contract:** Permanent contract
- **Skills:** Information Systems, Information Technology Audit, Internet Security, Network Architecture, IT General Controls (ITGC), Information Technology
- **Published:** September 3, 2026
- **Apply:** https://statejobsny.com/public/vacancyDetailsView.cfm?id=223052

## About the Role

Minimum Qualifications Seven years of Information Technology audit experience, which must have been gained in any one of combination of the following (experience may be concurrent). See education and experience substitutions below., An associate's degree may be substituted for up to two years of IT audit experience; a bachelor's degree may be substituted for up to four years of IT audit experience; a master's degree may be substituted for an additional one year of IT audit experience (i.e., up to five years of experience). There is a maximum of 5 years of educational substitution.

Additionally, one year of generalized audit experience* may be substituted for one year of IT audit experience.

*Generalized audit experience is defined as - Performed performance audits in accordance with Generally Accepted Government Auditing Standards; analyzed areas for audit, addressed areas of risk; evaluated systems and procedures relating to audit areas for compliance with applicable laws, rules and regulations and contract terms, as appropriate; ensured funds are utilized in accordance with laws and regulations, and proper and effective controls are in place for areas under audit; used computer assisted auditing tools and techniques across various platforms to meet audit objectives; determined the accuracy and completeness of computer-processed data, prepared audit work papers to document work done and conclusions; prepared preliminary audit findings or portions thereof, discussed findings with auditee representatives, and participated in exit and entrance conferences.

55b/55c Program appointment:
This position may be designated 55 b/c and is subject to verification of applicant eligibility. For more information on this program, please visit the NYS Department of Civil Service website, 55b/c Recruitment Resources Center (ny.gov)

Additional Comments Preferred Qualifications/Knowledge, skills, and abilities:

 * Comprehensive IT experience.
 * Strong analytical skills.
 * Working knowledge of internal controls.
 * Security conscious.
 * Ability to be objective and respect confidentiality.
 * Ability to research IT products, IT industry changes, and industry-known vulnerabilities.
 * Knowledge of industry standards/frameworks such as, International Professional Practices Framework (IPPF), Center for Internet Security (CIS) critical security controls, Standards for Internal Control in New York State Government, and National Institute of Standards and Technology (NIST).
 * Strong verbal communication and interviewing skills.
 * Strong written communication and documentation skills, i.e., ability to prepare workpapers, document meetings, document audit findings, and prepare draft reports.

Telecommuting: The Office of the New York State Comptroller (OSC) supports telecommuting where it is reasonable to do so based upon the agency's mission and operational needs. Generally, employees new to OSC will be restricted from telecommuting for at least 8 calendar weeks. After the initial 8 calendar week restriction, if an employee's primary residence location, duties, and work performance are aligned with telecommuting and operational needs they may be allowed to do so. Generally, OSC employees may telecommute up to 5 days per pay period but may be approved to telecommute less.

## Description

Duties Description Under the direction of the Information Systems Auditor 2 (SG-27), the Information Systems Auditor 1 (SG-23) is responsible for providing independent and objective appraisals of the IT environment and applications of OSC., Responsibility for performing IT-related audits and examinations to determine the compliance of agencies, authorities, municipalities, and schools, including reviews of physical and logical access controls, general IT controls, and application controls, and the writing and presentation of findings reports of technical issues to a non-technical audience.
Responsibility for the analysis and evaluation of information systems, such as platforms, applications, network infrastructure, and/or IT-related operational practices and the writing and presentation of reports of findings suitable for non-technical audience.
Responsibility for supporting an audit group, such as designing, developing/programming, maintaining technological solutions in support of audit activity, and evaluating and developing artificial intelligence programs in support of audit activity.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Fake or News: Translating Dog Barks, Notepad Gets an Upgrade and Michelin-Star Robots - Paul Tregoing](https://www.wearedevelopers.com/videos/1802-fake-or-news-translating-dog-barks-notepad-gets-an-upgrade-and-michelin-star-robots-paul-tregoing)
- [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion)
- [AI-Augmented DevOps with Platform Engineering](https://www.wearedevelopers.com/videos/1614-ai-augmented-devops-with-platform-engineering)
- [Don't Be A Naive Developer: How To Avoid Basic Cybersecurity Mistakes](https://www.wearedevelopers.com/videos/498-don-t-be-a-naive-developer-how-to-avoid-basic-cybersecurity-mistakes)
- [Giving AI eyes: How to build a dashboard you can't see](https://www.wearedevelopers.com/videos/100193-giving-ai-eyes-how-to-build-a-dashboard-you-can-t-see)

## Related Articles

- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [How to Write a CV and Interview if You Don't Fully Qualify For The Job](https://www.wearedevelopers.com/magazine/183-how-to-write-a-cv-and-interview-if-you-don-t-fully-qualify-for-the-job)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)
- [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges)