Risk Assessment Internal Auditor

An Official website of the Commonwealth of Massachusetts

Job Description - Risk Assessment Internal Auditor (260006KX)

Job Description

Description

The Department of State Police (the Department) is seeking a Risk Assessment Internal Auditor who will work as a member of the Division of Administrative Services (DAS) Risk Management Unit to review business processes for efficiency, effectiveness, risk exposure, and adequacy of risk management safeguards.

Duties of this role include but are not limited to:

• Perform operational and risk-based internal audits from planning through completion, under the direction of the Director of Risk Management, to evaluate the effectiveness of internal controls, risk mitigation strategies, and risk management processes and assess compliance with applicable policies, procedures, and practices.
• Support the Department’s internal audit plan by performing audit planning, research and analysis, testing, documentation, reporting, follow-up, and validation of remediated audit findings.
• Identify control weaknesses, risk exposures, and opportunities for improvement and assists in developing practical recommendations to mitigate risk and improve financial and operational processes.
• Support the maintenance and periodic update of the DAS risk assessment, risk management policies, and Department Internal Control Plan.
• Coordinate and support the annual review and update of DAS policies, procedures, risk assessments, and risk and control documentation.
• Document and evaluate business processes, procedures, and policies to promote consistency, effective risk management, and an appropriate internal control environment.
• Interview business process owners and work with staff to gather and analyze information, evaluate processes and internal controls, identify potential risks, and assess compliance with applicable policies and procedures.
• Communicate audit and risk management requirements to process owners and provide information and guidance regarding risk mitigation and internal control practices.
• Assist in developing and applying audit procedures, testing methodologies, and analytical techniques appropriate to the objectives and scope of assigned audits and reviews.
• Perform periodic reviews of DAS reports and related information to identify errors, inconsistencies, potential risks, and control deficiencies.
• Perform assigned ad hoc audits, data analyses, special reviews, and other projects requested by executive management or the Director of Risk Management.
• Prepare audit work papers, findings, reports, and presentations for review by the Director of Risk Management and discuss identified issues, associated risks, and potential corrective actions.
• Track corrective actions and performs follow-up testing to validate remediation of audit findings and determine whether identified risks and control weaknesses have been appropriately addressed.
• Coordinate with external auditors, the Office of the State Auditor, third-party entities, and other state agencies to facilitate requests for information and support audit and review activities, under the direction of the Director of Risk Management.
• Perform special projects and other internal audit, internal control, and risk analysis responsibilities as assigned.

Preferred skills include:

• Excellent written and verbal communication and interpersonal skills, including professional writing and editing, and the ability to clearly communicate complex or technical information to a variety of audiences.
• Strong analytical and problem-solving skills, with the ability to analyze data, laws, regulations, policies, procedures, and other information; identify risks and control issues; draw well-supported conclusions; and develop practical recommendations.
• Experience…