OIG - Process/Business Analyst (41687)
Phoenix, AZ, United States On-site
Salary not listedJobFig found this opening at its original source and checks that it remains available.
About the role
Under direct supervision of the IT Audit Unit supervisor, the IT Auditor assists in all phases of planned and requested IT audits, including planning, fieldwork and reporting. This position produces clear and concise working papers and draft reports of findings, and ensures facts and conclusions are supported by sufficient and appropriate evidence. The incumbent follows established guidelines for work paper quality, adheres to directives provided by the IT Audit Unit supervisor, and seeks to fully understand guiding Government and IT Auditing Standards. The IT Auditor evaluates internal controls developed by the Client management to ensure they are effective at meeting Client's mission and objectives. Audit topics include information security controls, procurement of IT goods and services, compliance with licensing and data sharing agreements, IT project management, and similar concepts. This position supports Audit Management Services (AMS) performance and compliance audits as needed to conduct data validation, analysis, and conducts general IT controls assessments as requested.
What you'll bring
- .Internal and external IT auditing concepts, techniques, methods, and procedures
- internal control frameworks, including COBIT, ITIL, ISO, NIST as well as general control frameworks offered by the Government Accountability Office (GAO), Information Systems Audit and Control Association (ISACA), Institute of Internal Auditors (IIA), Committee of Sponsoring Organizations (COSO)
- auditing Standards, including the GAO's Generally Accepted Government Auditing Standards ("Yellow Book") the IIA's International Standards for the Professional Practice of Internal Auditing ("Red Book")
- and risk management as it relates to the audit field (including COSO's Enterprise Risk Management Integrated Framework and the International Organization for Standardization's standard ISO 31000 - Risk Management).
- Skill in: Understanding and applying technical IT Auditing methods, including data mining and advanced analysis using software tools such as MS Access, Excel, Tableau, and similar tools
- communicating effectively and accurately, both orally and in writing including writing clear and concise work papers, emails, and reports
- presenting technical findings to non-technical personnel in a manner that is easy to understand
- utilizing time management techniques including prioritizing tasks to meet deadlines
- demonstrating teamwork
- and utilizing project management methodology.
- Ability to: Interpret and apply Federal, State, and local laws, rules, and regulations, and Department policy and procedure
- plan and assist in IT audits across a broad range of topics in a large, complex operating and organizational environment