Information Systems Auditor 2 - 283

Duties Description

Under the direction of the Systems Development and Project Management Office Director, within the NYSOH Bureau, the incumbent will be responsible for managing and directing vendor oversight and system auditing activities that include quality assurance, project and change request monitoring, reporting and data analysis, and solution design reviews. The Information Systems Auditor 2 is a key position in support of the oversight and planning for the expanding DOS system capabilities and operations.

The ISA2 will be responsible for the planning, review, QA, and audit of multiple initiatives that must interoperate and meet strict timelines. Responsibilities will focus on Testing and Release Management processes and will include vendor oversight and reporting on the DOS System Development Lifecycle (SDLC) planning and initiatives, as well as requirements and process design reviews for end-to-end technology solutions.

Experience with auditing systems for quality assurance and accuracy is required, including ITIL and SDLC processes, executing a risk-based audit strategy, planning audits to determine if the system is defective, not operating optimally, protected, and provides value to New York State and its consumers. Participation and oversight includes solution platform design review, internal and external interface specification review, consulting regularly with contractors and Quality Assurance (QA) staff, and working closely with vendor solution and technical teams to ensure alignment with Department planning and support.

Responsibilities require proficiency with tools and associated processes including Rational Team Concert (RTC) and Sharepoint. Excellent management and leadership skills, broad and deep understanding of Department processes, experience using requirements and design tools, as well as industry standard processes and frameworks is required.

Under the direction of the Systems Development and Project Management Office Director, within the NYSOH Bureau, the incumbent will be responsible for managing and directing vendor oversight and system auditing activities that include quality assurance, project and change request monitoring, reporting and data analysis, and solution design reviews. The Information Systems Auditor 2 is a key position in support of the oversight and planning for the expanding DOS system capabilities and operations.

The ISA2 will be responsible for the planning, review, QA, and audit of multiple initiatives that must interoperate and meet strict timelines. Responsibilities will focus on Testing and Release Management processes and will include vendor oversight and reporting on the DOS System Development Lifecycle (SDLC) planning and initiatives, as well as requirements and process design reviews for end-to-end technology solutions.

Experience with auditing systems for quality assurance and accuracy is required, including ITIL and SDLC processes, executing a risk-based audit strategy, planning audits to determine if the system is defective, not operating optimally, protected, and provides value to New York State and its consumers. Participation and oversight includes solution platform design review, internal and external interface specification review, consulting regularly with contractors and Quality Assurance (QA) staff, and working closely with vendor solution and technical teams to ensure alignment with Department planning and support.

Responsibilities require proficiency with tools and associated processes including Rational Team Concert (RTC) and Sharepoint. Excellent management and leadership skills, broad and deep understanding of Department processes, experience using requirements and design tools, as well as industry standard processes and frameworks is required.

Bachelor’s degree and five years of IT auditing experience*; or an associate's degree and seven years of IT auditing experience*.

• IT auditing experience must have been gained in any one or combination of the following: an information system or audit professional with responsibility for designing, developing, and evaluating mainframe and server-based audit systems; an information system or audit professional with responsibility for designing and programming tests to perform audits of physical and logical access controls of mainframe and server-based systems; an information system or audit professional with responsibility for data extraction, manipulation and analysis using information from diverse sources, including preparation and presentation of written reports of findings suitable for non-technical audience;
  
  and an information system or audit professional with responsibility for supporting an audit group, including developing and maintaining audit systems and identifying and providing data in support of audit activity.

Preferred Qualifications:

Five (5) years professional experience in Information Technology;
Three (3) years in project management…