Information Systems Auditor 1(SG-23) Item#02943

Duties Description

Research, design, and work on dynamically-paced and specialized cybersecurity audits at local governments and schools across NYS, and projects of advanced IT matters, IT auditing tools and emerging technologies. Provide technical assistance and training on various cybersecurity and IT-related topics. Work is in accordance with Generally Accepted Government Auditing Standards, cybersecurity requirements and industry standards.

This position can be located in LGSA’s Buffalo Regional Office, Albany Central Office or other available Regional Offices and travels across NYS.

Minimum Qualifications

To be appointed to the Information Systems Auditor 1, you must have seven years of Information Technology audit experience, which must have been gained in any one of combination of the following (experience may be concurrent):

• Responsibility for performing IT-related audits and examinations to determine the compliance of agencies, authorities, municipalities, and schools, including reviews of physical and logical access controls, general IT controls, and application controls, and the writing and presentation of findings reports of technical issues to a non-technical audience.
• Responsibility for the analysis and evaluation of information systems, such as platforms, applications, network infrastructure, and/or IT-related operational practices and the writing and presentation of reports of findings suitable for non-technical audience.
• Responsibility for supporting an audit group, such as designing, developing/programming, maintaining technological solutions in support of audit activity, and evaluating and developing artificial intelligence programs in support of audit activity.
  
  

An Associate’s degree may be substituted for up to two years of IT audit experience; a Bachelor’s degree may be substituted for up to four years of IT audit experience; a Master’s degree may be substituted for an additional one year of IT audit experience (i.e., up to five years of experience). There is a maximum of 5 years of educational substitution.

Additionally, one year of generalized audit experience* may be substituted for one year of IT audit experience.

• Generalized audit experience is defined as - Performed performance audits in accordance with Generally Accepted Government Auditing Standards; analyzed areas for audit, addressed areas of risk; evaluated systems and procedures relating to audit areas for compliance with applicable laws, rules and regulations and contract terms, as appropriate; ensured funds are utilized in accordance with laws and regulations, and proper and effective controls are in place for areas under audit; used computer assisted auditing tools and techniques across various platforms to meet audit objectives; determined the accuracy and completeness of computer-processed data, prepared audit work papers to document work done and conclusions; prepared preliminary audit findings or portions thereof, discussed findings with auditee representatives, and participated in exit and entrance conferences.
  
  

Additional Comments

Preferred Qualifications/Knowledge, skills, and abilities:

• IT industry experience and/or IT or information systems degree.
• Relevant professional certification(s) (CISA, CISSP, CISM, CRISC, CISSP, ISSMP, CIA).
• Familiarity with GAGAS, CIS, COBIT, COSO and NIST CSF frameworks.
• IT audit experience including but not limited to, conducting cloud security, artificial intelligence, Operating Systems (e.g., Windows, MacOS, ChromeOS), access controls, application, database and/or system security audits.
• Independently conducts, documents and reports on advanced IT research topics that are relevant to audit initiatives and other projects.
• Effectively communicates orally and in writing, exhibiting excellent interpersonal skills with staff and customers.
• Works well independently and in a team environment.
• Organized, detail-oriented and produces an accurate and timely work product.
• Effectively applies work unit policies and procedures.
• Handles multiple and sometimes competing priorities.
• Strong work ethic and positive attitude.
  
  

Telecommuting: The Office of the New York State Comptroller (OSC) supports telecommuting where it is reasonable to do so based upon the agency’s mission and operational needs. Generally, employees new to OSC will be restricted from telecommuting for at least 8 calendar weeks. After the initial 8 calendar week restriction, if an employee’s primary residence location, duties, and work performance are aligned with telecommuting and operational needs they may be allowed to do so. Generally, OSC employees may telecommute up to 5 days per pay period but may be approved to telecommute less.

Reasonable Accommodation: The NYS Office of the State Comptroller provides reasonable accommodations to applicants with disabilities. If you need reasonable accommodation for any part of the application and hiring process, please notify the Division of Human Resources at (518) 474-1924.

Equal Opportunity Employment: The Office of the NYS Comptroller values a workforce with a broad, diverse range of backgrounds and perspectives. All employees are expected to contribute to a professional environment focused on self-evaluation and improvement, as well as acceptance and support of coworkers.

The Office of the State Comptroller does not participate in E-Verify or sponsor visa applications.

OSC offers competitive salaries and benefits, and opportunities for advancement, continuing education, and professional development. We provide a professional environment where employees are encouraged to push themselves while maintaining work-life balance. Our generous benefits package includes:

• A state pension with vesting after five years’ service
• Comprehensive medical, dental and vision insurance available to all employees and their dependents
• Flexible spending accounts for dependent and health care
• Productivity Enhancement Program (PEP), allowing eligible employees to exchange previously accrued leave in return for a credit to be applied toward their health insurance
• Public Service Loan Forgiveness (PSLF)
• NYS Deferred Compensation plan
• Access to NY 529 and NY ABLE College Savings Programs, and U.S. Savings Bonds
• Holiday and paid time off
• Shift and geographic pay differentials
• A committed continuous learning environment
• Informational Brown Bag sessions
• Wellness at Work Programs to promote employee health and wellness
• OSC Mentoring Program to network, contribute, and provide an opportunity to strengthen competencies in a variety of areas
• And much more