Director Internal Audit Ref 10137

Description

Duties Description

Under the direction of the Chief Information Officer and Administrative Supervisor, the Director of Internal Audit will manage the internal audit program for the Office of Information Technology Services (ITS), responsible for reviewing agency operations and IT systems to assure compliance with management policies, federal and state laws, rules, and regulations, and the effectiveness of internal controls. Duties include, but are not limited to:

Audit planning and execution

• Develop, receive approval for and implement the annual risk-based internal audit plan.
• Align the annual risk-based internal plan with the agencys mission and goals to ensure objectives are being met and linking strategic initiatives to the key audit, cyber security, and technology risks.
• Oversee and manage the execution of audit engagements from planning to completion.
• Conduct risk assessments to identify and prioritize areas of concern.
• Ensure audits are conducted in compliance with professional standards.
• Provide objective, independent assurance by evaluating and making recommendations to improve the effectiveness of agency operations, internal control functions, and program efficiencies.
• Help the agency achieve its mission by providing consulting services designed to identify and mitigate risk.
• Meet with Executive staff and program managers to discuss audit findings and recommendations.
• Establish audit schedules for agency operations, modifying as needed to meet priorities or address identified and potential problems.
• Develop, review, and modify audit policies, standards, procedures, guidelines and practices.
• Prepare and present comprehensive audit reports with findings and actionable recommendations, with supporting documentation for management.
• Advise ITS executive team of effects proposed policy changes might have on internal accounting and auditing controls.
• Develop, revise, and implement training of staff to ensure they have an understanding of management standards and their roles and obligations to ensure adherence to the standards.
• Perform regular follow-up on audit findings and recommendations to evaluate the adequacy of corrective actions.
• Prepare, review, and approve an annual independence statement identifying actual and potential impairments to independence.
• Meet with Directors of Internal Audit from other state agencies as needed to share audit resources and best practices with them.
• Perform full range of supervisory responsibilities.
  
  

Team leadership and development

• Lead, mentor, and develop a team of audit professionals.
• Manage staff performance, training, and career development.
• Assist in developing and managing the departmental budget.
  
  

Special projects and continuous improvement

• Monitor the implementation of audit recommendations and track corrective actions.
• Stay up-to-date with industry trends, best practices, and regulatory changes.
  
  

Qualifications

Minimum Qualifications

Bachelor’s degree, preferably in accounting, finance, or an IT related field, and seven years of relevant experience. * Relevant experience includes but is not limited to: conducting internal audits following IIA guidance, demonstrated familiarity with federal and state laws, rules, and regulations, and a minimum of two (2) years of management or supervisory experience.

• Substitutions: four years of specialized experience or associate’s degree and two years of specialized experience may substitute for bachelor’s degree; J.D. or master’s degree may substitute for one year of specialized experience; Ph.D. may substitute for two years of specialized experience.
  
  

Preferred Qualifications

• Certified Internal Auditor (CIA), Certified Public Accountant (CPA), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Public Accountant (CPA)
• Experience with both audit management and Governance, Risk, and Compliance (GRC) software tools.
• Experience in the technology and cyber security sectors, including good understanding of best practices regarding IT system security measures; IT and cloud infrastructure, software development life cycle and working knowledge of a variety or operating systems.
• Experience with and deep understanding of both technology audits and government operations
• Ability to multitask, manage multiple projects simultaneously, and prioritize workload.
• Communicate effectively with C-level managers and other stakeholders, including process owners and management, about audit results and corrective action plan recommendation.
• Strong critical thinking skills and problem-solving skills.
  
  

Additional Comments

Salary commensurate with experience.

Benefits of Working for NYS

Generous benefits package, worth 65% of salary, including:

• Holiday & Paid Time Off
• Thirteen (13) paid holidays annually
• Up to thirteen (13) days of paid vacation leave annually
• Up to five (5) days of paid personal leave annually
• Up to thirteen (13) days of paid sick leave annually for PEF
• Up to three (3) days of professional leave annually to participate in professional development
  
  

Health Care Benefits

• Eligible employees and dependents can pick from a variety of affordable health insurance programs
• Family dental and vision benefits at no additional cost
  
  

Additional Benefits

• New York State Employees’ Retirement System (ERS) Membership
• NYS Deferred Compensation
• Access to NY 529 and NY ABLE College Savings Programs, as well as U.S. Savings Bonds
• Public Service Loan Forgiveness (PSLF)
• Up to 50% telecommuting
• And many more.

---