The Information Technology Auditor Senior plans, performs, and reports the results of complex IT audits for Virginia's Community College System (VCCS) twenty-five 25 business units (23 colleges and two administrative agencies) for the purpose of ensuring a secure computing environment, properly functioning technology, and adherence to VCCS policies and best practices. Focus will include conducting onsite and/or remote information system audits; analyzing system controls and security methods; and examining servers, networks, hardware and software, database configurations, data integrity, firewall rules, etc. This includes addressing areas not previously audited at the VCCS. This position will design and plan audit procedures; utilize project management and project risk assessment methodologies; develop, review, and evaluate narratives, flow charts, and internal control questionnaires; conduct follow-up to ensure compliance; and recommend changes in policies and control procedures to safeguard VCCS assets. This position functions with a high level of professional initiative and independence; performs research and/or advises of state, federal and other regulations, standards, or best practices; and remains abreast of changes in IT industry standards, including emerging risks. The IT Auditor Senior will deliver and present reports to executive management and the Audit Committee of the State Board for Community Colleges which disclose the results of work performed. These reports will offer high-level advice regarding financial, operational and compliance risks related to Information Technology, and suggest opportunities for improving organizational effectiveness and efficiency. This position will assist the Audit and Consulting Team in the performance of non-IT audits and will provide guidance and train Audit and Consulting Team staff on IT issues as appropriate.
Knowledge: •Considerable knowledge of information technology infrastructures, network operating environments and applications. •Considerable knowledge of information technology management frameworks, including COBIT, SEC-501 and ISO/IEC 27002, and internal controls for information systems. •Considerable knowledge of the auditing process; state, and federal laws, regulations, and policies to include industry standards and risks; and the International Standards for the Professional Practice of Internal Auditing and the Code of Ethics developed by the Institute of Internal Auditors (IIA). •General knowledge of project and program management techniques and best practices. Skills: •Proficient skills in assessing common technologies used in enterprise environments, including Windows Active Directory, client-server technologies and technical assessment tools such as network and vulnerability scanners. •Proficiency skills in desktop applications such as spreadsheets, database packages, and other software required to fulfill the responsibilities of the position •Adept at multi-tasking and managing multiple projects simultaneously; performing audit function with a high-level of independence; and conducting IT and non-IT audit assignments in a team environment. •Skilled in oral and written communications, including conducting presentations to executive management and State Board members •Skilled in decision making utilizing sound professional judgment and confidentiality. Abilities: •Ability to lead and conduct comprehensive and complex information system audits as part of a multi-faceted audit program, in order to achieve long-term objectives. •Ability to communicate and work effectively with multi-cultural populations that support diversity, cultural understanding, and inclusion. •Ability to convey technical information to college leadership teams and internal and external subject matter experts to achieve a high-level of comprehension, utilizing an open and collaborative style that encourages teamwork and cooperation. •Ability to collect and analyze data, evaluate information, and draw logical conclusions. •Ability to prepare reports, memos, summaries and analyses and present findings and recommendations clearly and concisely with little intervention or corrections from departmental senior management. •Ability to learn new technologies to assist in core audit functions as required by the scope of individual engagements and evolving industry trends. •Bachelor's degree required, or a combination of relevant experience and education may substitute to demonstrate the required level of knowledge, skills, and abilities to successfully perform the functions of the job. •Broad current and progressive experience in information systems technology.
Internal Number: 31758
About System Office (Div)
Virginia's Community College's educate 240,000 credit students annually and over 170,000 non-credit students at 23 Community Colleges with over 40 campus locations throughout the Commonwealth. Our mission is to provide comprehensive higher education and workforce training programs and services of superior quality. These programs are financially and geographically accessible to meet the individual, business, and community needs of the Commonwealth.