Kushani - Senior Information Security Auditor

Duties and Responsibilities:

1.Performs general and application control reviews for simple to complex computer information systems.

2. Performs information control reviews to include system development standards, operating procedures, system security, programming controls, communication controls, backup and disaster recovery, and system maintenance.

3. Directs and/or performs reviews of internal control procedures and security for systems under development and/or enhancements to current systems.

4. Maintains and develops computerized audit software.

5. Prepares audit finding memoranda and working papers to ensure that adequate documentation exists to support the completed audit and conclusions.

6. Prepares and presents written and oral reports and other technical information in a pertinent, concise, and accurate manner for distribution to management.

7. Follows up on audit findings to ensure that management has taken corrective action(s).

8. Coordinates and interacts with internal auditors, IT staff and compliance officials as appropriate.

9. Assists and trains other audit staff in the use of computerized audit techniques, and in developing methods for review and analysis of computerized information systems.

10. Maintains currency of knowledge with respect to relevant state-of-the-art technology, equipment, and/or systems.

11. Conduct operational, compliance, financial and investigative audits, as assigned..

12. Performs miscellaneous job-related duties as assigned

Minimum Job Requirements : 

- Bachelor's degree in Computer Science or Business related field; at least 3 years of experience directly related to the duties and responsibilities specified.

- Certification/Licensure Cert Information Systems Auditor (CISA), OR CEH, OR Cert Internal Auditor (CIA).

Knowledge, Skills and Abilities Required:

- Knowledge of current technological developments/trends in area of expertise.

- Knowledge of auditing concepts and principles.

- Ability to evaluate and review a range of mainframe, PC, and distributed production and applications computer systems.

- Ability to gather data, compile information, and prepare reports.

- Ability to perform control reviews on systems development, operation, programming, control, and security procedures and standards.

- Ability to review system backup, disaster recovery and maintenance procedures.

- Ability to communicate with and understand the requirements of professional staff in area of specialty.

- Ability to create, compose, and edit written materials.

- Knowledge of software requirements for the auditing of computing systems and procedures.

- Knowledge of computer systems development and programming.

- Knowledge of general accounting principles.

- Knowledge of university and/or public auditing policies, standards, and procedures.

- Knowledge of local and banking laws, regulations, and standards governing all aspects of the utilization of computer systems.

- Ability to persuade and influence others.