IT Audit Compliance Analysts (PROGRAM MANAGER SENIOR I & ADMINISTRATOR VII)

State of Maryland; Annapolis (MD); On-site; USD 99,000 - 157,000; Full time

Job summary

State of Maryland's Audit Finance and Compliance Unit in Annapolis seeks an IT Audit Compliance Analyst to monitor agency corrective actions arising from IT audit findings and coordinate across IT and audit teams. You will oversee a full spectrum of corrective action plans and engage with IT staff and auditors to ensure timely resolutions.

The ideal candidate brings strong IT audit experience, governance knowledge, and the ability to manage multiple audits.

Qualifications

• Bachelor’s degree in Accounting, Information Systems, Accounting Information Systems, or related field from an accredited college or university.
• A minimum of seven (5) years of professional auditing experience that includes exposure to information systems audits, network security or general IT controls. Ability to manage multiple information technology audits simultaneously.

Responsibilities

• Reviews Office of Legislative Audit reports, discussion notes, and audit work papers for agencies/programs with repeat or significant IT findings.
• Review agency plans to resolve IT audit findings and assesses the adequacy of agency plans to satisfactorily resolve findings.
• Lead agency status meetings to discuss the adequacy of agency corrective actions.
• Assists and advises agencies on the adequacy of their plans to resolve findings.
• Identifies where planned corrective actions appear inadequate and where areas of disagreement exist.
• May also hold interviews or discussions with legislative auditors and agency personnel regarding IT findings and agency action plans.
• Monitors overall implementation of agency corrective and ongoing actions to resolve IT audit findings, through status reports from agency to DBM.
• Reports to the IT Audit Compliance Manager and agency management, on the adequacy of agency actions.
• Assist agencies with vendor risk management tasks including reviews of appropriate controls and audit requirements in vendor contracts and reviews of independent security assessments or SOC reports of various third-party service providers that perform work for the State.

Skills

Audit management

Education

Bachelor’s degree in Accounting, Information Systems, Accounting Information Systems, or related field

Job description

Introduction

About the Audit Finance and Compliance Unit: The Audit Finance and Compliance Unit (AFCU) assists agencies with OLA Audit Resolution, follow-up & monitoring of corrective actions, and provides ad hoc audit and consultative support to State agencies. AFCU meets and collaborates regularly with agency staff to discuss corrective actions; to understand programs, processes and procedures; and to ensure corrective actions remain in focus. AFCU also serves as DBM's Internal Audit Compliance function.

GRADE

Administrator VII level, Grade 22: $99,442 - $156,822/year

Program Manager Senior I level, Grade 23: $106,087 - $167,304/year

LOCATION OF POSITION

45 Calvert St, Annapolis, MD 21401

POSITION DUTIES

General Purpose: The IT Audit Compliance Analyst assist agencies with monitoring multiple agency corrective actions to IT audit findings. This role will oversee a full spectrum of corrective action plans across agencies related to information technology audit findings. Coordinates with Department of Information Technology personnel on audit resolutions for statewide, common or repeat IT audit findings. The ideal candidate must possess responsible professional experience in information technology and audit management and be skillful at decision-making, best practices in governance and management practices, and relationship building. This is a Special Appointment position and serves at the pleasure of the Appointing Authority.

Core Responsibilities

• Reviews Office of Legislative Audit reports, discussion notes, and audit work papers for agencies/programs with repeat or significant IT findings.
• Review agency plans to resolve IT audit findings and assesses the adequacy of agency plans to satisfactorily resolve findings.
• Lead agency status meetings to discuss the adequacy of agency corrective actions.
• Assists and advises agencies on the adequacy of their plans to resolve findings.
• Identifies where planned corrective actions appear inadequate and where areas of disagreement exist.
• Highlights for the IT Audit Compliance Manager, those agencies where planned corrective actions appear inadequate and where areas of disagreement exist (e.g., agency vs. Legislative Audits).
• May also hold interviews or discussions with legislative auditors and agency personnel regarding IT findings and agency action plans.
• Monitors overall implementation of agency corrective and ongoing actions to resolve IT audit findings, through status reports from agency to DBM.
• Reports to the IT Audit Compliance Manager and agency management, on the adequacy of agency actions.
• Assist agencies with vendor risk management tasks including reviews of appropriate controls and audit requirements in vendor contracts and reviews of independent security assessments or Service Organization Control (SOC) reports of various third-party service providers that perform work for the State.
• May assist with providing training or working on special audits or reviews.

MINIMUM QUALIFICATIONS

Education: Bachelor’s degree in Accounting, Information Systems, Accounting Information Systems, or related field from an accredited college or university.

Experience: A minimum of seven (5) years of professional auditing experience that includes exposure to information systems audits, network security or general IT controls. Ability to manage multiple information technology audits simultaneously.

DESIRED OR PREFERRED QUALIFICATIONS

• Experience conducting Service Organization Control (SOC) audits or reviewing SOC reports.
• Active designation as a Certified Internal Auditor (CIA), Certified Fraud Examiner (CFE), Certified Information System Security Professional (CISSP), Certified in Risk and Information System Control (CRISC), Certified Information System Auditor (CISA).
• Extensive experience managing internal audit programs and systems and developing and implementing audit plans.
• Experience identifying and proactively evaluating the design and operation of programs and core management functions, and policies; and providing recommendations for improving the effectiveness and efficiency of existing programs, systems, operations and procedures.
• Experience writing reports and preparing materials for presentations; expressing facts, conclusions, and recommendations clearly and concisely, both orally and in writing.
• Three years of experience auditing government or legislative systems, policies, and programs (federal, state or local).

EXAMINATION PROCESS

The assessment may consist of a rating of your education, training, and experience related to the requirements of the position. It is important that you provide complete and accurate information on your application. Please report all experience and education that is related to this position.

GENERAL REQUIREMENTS

Specific educational and experience requirements are set by the agency based on the essential job functions assigned to the position.

BENEFITS

STATE OF MARYLAND BENEFITS

FURTHER INSTRUCTIONS

The State of Maryland is committed to diversity among its staff, and recognizes that its continued success requires the highest commitment to obtaining and retaining a diverse staff that provides the best quality services to supporters and constituents.

The State of Maryland is an equal opportunity employer and it is our policy to recruit, hire, train, promote and administer any and all personnel actions without regard to sex, race, age, color, creed, national origin, religion, economic status, sexual orientation, veteran status, gender identity or expression, ethnic identity or disability, or any other legally protected basis.

The State of Maryland is committed to providing reasonable accommodations to individuals with disabilities in the hiring process and on the job, as required by applicable law.

The State of Maryland will not tolerate any unlawful discrimination and any such conduct is strictly prohibited.