IT Audit Compliance Manager; Program Manager SENIOR II

Introduction

About the Audit Finance and Compliance Unit:
The Audit Finance and Compliance Unit (AFCU) assists agencies with OLA Audit Resolution, follow-up & monitoring of corrective actions, and provides ad hoc audit and consultative support to State agencies. AFCU meets and collaborates regularly with agency staff to discuss corrective actions; to understand programs, processes and procedures; and to ensure corrective actions remain in focus. AFCU also serves as DBM’s Internal Audit Compliance function.

STD
0024

45 Calvert St, Annapolis, MD 21401

General

Purpose:

The Audit Compliance Manager will provide managerial level direction to multiple IT Audit Compliance Analysts. The IT Audit Compliance Manager directs and manages the work of IT Audit Compliance Analysts who assist agencies with monitoring multiple agency corrective actions to IT audit findings. This role will oversee a full spectrum of corrective action plans across agencies related to information technology audit findings.

Coordinates with Department of Information Technology personnel on audit resolutions for statewide, common or repeat IT audit findings. The ideal candidate must possess responsible professional experience in information technology and audit management and be skillful at decision-making, best practices in governance and management practices, and relationship building. This is a Management Service position and serves at the pleasure of the Appointing Authority.

• Reviews Office of Legislative Audit reports, discussion notes, and audit work papers for agencies/programs with repeat or significant IT findings.
• Review agency plans to resolve IT audit findings and assess the adequacy of agency plans to satisfactorily resolve findings.
• Reports to the AFCU Deputy Director on the status of corrective action monitoring activities for IT audit findings.
• Attend agency status meetings and provide guidance to the IT audit compliance analyst to ensure that agency corrective actions are adequately discussed.
• Prepare and present executive level reporting on monitoring activities of agencies receiving assistance from AFCU.
• Develop and implement standard procedures for IT audit compliance analysts.
• Plans, coordinates, and supervises activities of the IT audit compliance analysts.
• Reviews and approves staff-prepared working papers to ensure that adequate, competent, and relevant evidence is acquired to document AFCU’s assessment and conclusions.
• Assist agencies with vendor risk management tasks including reviews of appropriate controls and audit requirements in vendor contracts and reviews of independent security assessments or Service Organization Control (SOC) reports of various third-party service providers that perform work for the State.
• Develop risk assessment tools for audit planning purposes.
• May assist with providing training or working on special audits or reviews.

Education:

Bachelor’s degree in Accounting, Information Systems, Accounting Information Systems, or related field from an accredited college or university.

Experience:

A minimum of seven (7) years of professional auditing experience that includes exposure to information systems audits, network security or general IT controls. Ability to manage multiple information technology audits simultaneously with at least three years of experience supervising staff.

• Experience conducting Service Organization Control (SOC) audits or reviewing SOC reports.
• Active designation as a Certified Internal Auditor (CIA), Certified Fraud Examiner (CFE), Certified Information System Security Professional (CISSP), Certified in Risk and Information System Control (CRISC), Certified…