Information Systems Auditor 1, SG-23 , Item #00670

Duties Description

Full performance level; designs, writes, develops, tests and maintains audit software.

Under the direction of the Information Systems Auditor 2 (SG-27), the Information Systems Auditor 1 (SG-23) is responsible for providing independent and objective appraisals of the IT environment and applications of OSC. OIA-IT plays a key role in examining and evaluating the adequacy and effectiveness of the Comptroller’s Office system of internal control including related external service providers, and the quality of performance in carrying out assigned responsibilities, as well as providing IT control advisory services.

Minimum Qualifications

Seven years of Information Technology audit experience, which must have been gained in any one of combination of the following (experience may be concurrent). See education and experience substitutions below.

• Responsibility for performing IT-related audits and examinations to determine the compliance of agencies, authorities, municipalities, and schools, including reviews of physical and logical access controls, general IT controls, and application controls, and the writing and presentation of findings reports of technical issues to a non-technical audience.
• Responsibility for the analysis and evaluation of information systems, such as platforms, applications, network infrastructure, and/or IT-related operational practices and the writing and presentation of reports of findings suitable for non-technical audience.
• Responsibility for supporting an audit group, such as designing, developing/programming, maintaining technological solutions in support of audit activity, and evaluating and developing artificial intelligence programs in support of audit activity.
  
  

An Associate’s degree may be substituted for up to two years of IT audit experience; a Bachelor’s degree may be substituted for up to four years of IT audit experience; a Master’s degree may be substituted for an additional one year of IT audit experience (i.e., up to five years of experience). There is a maximum of 5 years of educational substitution.

Additionally, one year of generalized audit experience* may be substituted for one year of IT audit experience.

• Generalized audit experience is defined as - Performed performance audits in accordance with Generally Accepted Government Auditing Standards; analyzed areas for audit, addressed areas of risk; evaluated systems and procedures relating to audit areas for compliance with applicable laws, rules and regulations and contract terms, as appropriate; ensured funds are utilized in accordance with laws and regulations, and proper and effective controls are in place for areas under audit; used computer assisted auditing tools and techniques across various platforms to meet audit objectives; determined the accuracy and completeness of computer-processed data, prepared audit work papers to document work done and conclusions; prepared preliminary audit findings or portions thereof, discussed findings with auditee representatives, and participated in exit and entrance conferences.
  
  

Additional Comments

Preferred Qualifications/Knowledge, Skills and Abilities:

• Comprehensive IT experience.
• Strong analytical skills.
• Working knowledge of internal controls.
• Strong verbal communication and interviewing skills.
• Security conscious.
• Ability to be objective.
• Ability to respect confidentiality.
• Ability to research IT products, IT industry changes, and industry-known vulnerabilities.
• Knowledge of industry standards/frameworks such as, International Professional Practices Framework (IPPF), Center for Internet Security (CIS) critical security controls, Standards for Internal Control in New York State Government, and National Institute of Standards and Technology (NIST).
• Strong written communication and documentation skills, i.e., ability to prepare workpapers, document meetings, document audit findings, and prepare draft reports.
  
  

Telecommuting

The Office of the New York State Comptroller (OSC) supports telecommuting where it is reasonable to do so based upon the agency's mission and operational needs. Generally, employees new to OSC will be restricted from telecommuting for at least 8 calendar weeks. After the initial 8 calendar week restriction, if an employee's primary residence location, duties and work performance are aligned with telecommuting they may be allowed to do so. Upon approval to telecommute, OSC employees may telecommute up to 5 days per pay period.

Reasonable Accommodation

The NYS Office of the State Comptroller provides reasonable accommodation to applicants with disabilities. If you need reasonable accommodation for any part of the application and hiring process, please notify the Division of Human Resources at (518) 474-1924.

Equal Opportunity Employment

The Office of the NYS Comptroller values a workforce with a broad, diverse range of backgrounds and perspectives. All employees are expected to contribute to a professional environment focused on self-evaluation and improvement, as well as acceptance and support of coworkers.

The Office of the State Comptroller does not participate in E-Verify or sponsor visa applications.

OSC offers competitive salaries and benefits, and opportunities for advancement, continuing education, and professional development. We provide a professional environment where employees are encouraged to push themselves while maintaining work-life balance. Our generous benefits package includes:

• A state pension with vesting after five years’ service
• Comprehensive medical, dental and vision insurance available to all employees and their dependents
• Flexible spending accounts for dependent and health care
• Productivity Enhancement Program (PEP), allowing eligible employees to exchange previously accrued leave in return for a credit to be applied toward their health insurance
• Public Service Loan Forgiveness (PSLF)
• NYS Deferred Compensation plan
• Access to NY 529 and NY ABLE College Savings Programs, and U.S. Savings Bonds
• Holiday and paid time off
• Shift and geographic pay differentials
• A committed continuous learning environment
• Informational Brown Bag sessions
• Wellness at Work Programs to promote employee health and wellness
• OSC Mentoring Program to network, contribute, and provide an opportunity to strengthen competencies in a variety of areas
• And much more