Traveling IT Audit & Cybersecurity Specialist

Civicworks; Town of Broome (NY); On-site; USD 90,000 - 120,000; Full time

Job summary

Civicworks is seeking an Information Systems Auditor 1 based in the Binghamton Regional Office to perform cybersecurity and IT audits for local governments and schools across New York State. You will analyze information systems, evaluate IT controls, and report findings to non-technical audiences, traveling statewide as needed.

The role emphasizes compliance with government auditing standards and effective communication of technical concepts to diverse stakeholders for risk mitigation and

Qualifications

• Seven years of IT audit experience including compliance reviews and access controls assessment.
• Experience performing IT examinations for agencies, authorities, municipalities, and schools.
• Ability to write and present technical findings to non-technical audiences.
• IT industry experience and/or IT/information systems degree (preferred).
• Relevant professional certification such as CISA, CISSP, CISM, or CRISC (preferred).
• Familiarity with GAGAS, CIS, COBIT, COSO, and NIST CSF frameworks (preferred).

Responsibilities

• Conduct cybersecurity and IT audits for local governments and schools.
• Analyze information systems and evaluate IT controls.
• Report technical findings to non-technical audiences.
• Travel throughout New York State for engagements.

Skills

IT audit experience

Compliance reviews

Access controls assessment

Communication of findings

Education

Information systems degree

CISA

CISSP

CISM

CRISC

GAGAS familiarity

Job description

Civicworks is seeking an Information Systems Auditor 1 based in the Binghamton Regional Office to perform cybersecurity and IT audits for local governments and schools across New York State. You will analyze information systems, evaluate IT controls, and report findings to non-technical audiences, traveling statewide as needed.

The role emphasizes compliance with government auditing standards and effective communication of technical concepts to diverse stakeholders for risk mitigation and