IT Security Auditor

Phone/Skype Hire. Onsite from day 1

Location: Columbia, SC

Duration: 12+ months

This position will plan and conduct Information Technology (IT) audits and activities. Working in a team environment, this position will analyze and assess the agency's technology infrastructure to ensure processes and systems run accurately and efficiently, while remaining secure and meeting compliance regulations. This position will identify risks and evaluate internal controls in information system environments and assists the Internal Audit Director in developing and managing IT Continuous Auditing Programs.

Responsibilities

• Identifies risks and evaluates internal controls in information system environments.
• Assist the Internal Audit Director in developing and managing IT Continuous Auditing Programs
• Plans and analyzes IT systems leveraging COBIT, COSO, ISO, ITIL, NIST, and other relevant frameworks, regulations, and guidelines.
• Performs test of design and operating effectiveness over IT general controls.
• Reviews the selection and implementation of IT technical controls.
• Validates baseline security configuration for operating systems, application, networking and telecommunications equipment.
• Prepares working papers and reports to support recommendations and conclusions with related IT standards.
• Develops, builds, and implements tools to analyze data to improve audit efficiency and effectiveness, including risk assessments.
• Provides analytics to be used to incorporate best practices in continuous auditing.
• Performs risk assessments (e.g., data security, IT Governance, Disaster Recovery)
• Provides IT input to Internal Audit Director in development of the Annual Five Year Audit Plan to improve IT compliance and effectiveness of DHEC's information systems environment.
• Follows up on recommendations made by external auditors or outsourced firms on IT external audit reports; as well as recommendations made from IT internal audit reports.
• Utilizes data analytics software to assist OIA with auditing, consulting, and special reviews.
• Performs data extractions, analytical testing and security reviews utilizing Audit Command Language (ACL) and other analytical tools.
• Provides IT technical support for the Office of Internal Audits (e.g., hardware, software, ACL, etc.).
• The position will be utilized for 40 hours per week for the duration of this project. The selected candidate should be able to work flexible hours where it may be necessary for work to be completed outside traditional business hours.
• The applicant will work closely with the Internal Audits team to identify, prioritize, and schedule audits to maintain compliance. The applicant will work closely with customer and subject matter experts for the system design, migration to the new framework, and testing.
  
  

Skills Needed

• Experience in projects involving PCI/NIST security implementations and/or audits.
• Accounting, Audit Experience.
• Experience working with risk management, ITIL.
• Knowledge of Information Technology Field, best practices, organization, and operations.
• Verbal Communication Skills, written communication skills, organizational skills.
• Flexible and easily adapts to changing priorities.
• Knowledge of the frameworks and standards for information systems auditing (i.e., cobit, coso, iso, itil or nist) as well as generally accepted government auditing standards (gagas) and/or generally accepted accounting principles (gaap).
• Ability to integrate technical systems with agency goals and objectives.
• Working knowledge of acl or other auditing software and the ability to analyze and interpret complex accounting.
  
  

Required Education

Bachelor's degree in a related area and 1-3 years of experience in the field or in a related area.

Required Certifications

Prefer a CISA, CIA, or CPA