Remote-Eligible Risk & Internal Controls Lead

Commonwealth of Pennsylvania; Pennsylvania; Hybrid; USD 75,000 - 110,000; Full time

Job summary

Commonwealth of Pennsylvania is seeking a Risk and Internal Controls Officer within the Bureau of PRISM to strengthen the Department of Revenue’s operations and safeguard resources. You will guide risk management, conduct internal control assessments, and oversee vendor oversight to enhance statewide performance.

The role involves risk evaluation, control testing, corrective actions, and coordination with the Audit Liaison on audits, with telework potential and a standard full-time schedule in

Qualifications

• At least five years of progressive work experience in enterprise risk management (ERM), operational risk, internal controls, or internal audit.
• Ability to perform essential job functions.
• Background check and eligibility requirements.

Responsibilities

• Risk Evaluation: Assess risks within new and ongoing departmental initiatives and provide guidance based on established tolerances.
• Control Testing: Establish and oversee testing procedures for key internal controls and evaluate potential gaps.
• Corrective Actions: Support bureaus in developing, monitoring, and reporting progress on corrective action plans.
• Vendor Oversight: Review Service Organization Control reports and coordinate responses with internal partners.
• Audit Coordination: Collaborate with the Audit Liaison to manage departmental responses to Auditor General performance audits.
• Risk Reporting: Prepare annual risk registers and communicate status updates to leadership and the Office of the Budget.

Skills

Risk management

Internal controls

Vendor oversight

Audit coordination

Job description

Commonwealth of Pennsylvania is seeking a Risk and Internal Controls Officer within the Bureau of PRISM to strengthen the Department of Revenue’s operations and safeguard resources. You will guide risk management, conduct internal control assessments, and oversee vendor oversight to enhance statewide performance.

The role involves risk evaluation, control testing, corrective actions, and coordination with the Audit Liaison on audits, with telework potential and a standard full-time schedule in