Auditor​/Senior Auditor

Auditor / Senior Auditor

Reporting to the Director of Internal Audit, this position plans, performs, and documents risk-based operational, financial, information technology, and compliance audits and other projects independently to evaluate university governance, risk management, and control processes. This position performs all phases of audits/investigations including conducting an audit risk assessment, conducting audit research, preparing the audit programs, evaluating risks and controls, testing control effectiveness to ensure compliance (with regulations, laws, policies, procedures), documenting audit work papers, drafting audit reports (including findings and recommendations), and presenting findings to auditee and management.

Work assigned to the Auditor is expected to be carried out with an appropriate and reasonable amount of supervision. The Auditor should be proactive in initiating audit steps and checking with the supervisor when clarity is needed. Work assigned to the Senior Auditor is expected to be carried out with minimal supervision.

Required Qualifications
- Auditor:
Bachelor's degree in accounting, finance, business, or a related field. Two years of auditing or related experience, including some IT auditing. Demonstrated intellectual curiosity and critical thinking skills, with the ability to identify inconsistencies, recognize potential issues, and ask probing questions to ensure accuracy and understanding. Demonstrated ability to communicate effectively with individuals at all organizational levels and project a positive attitude.

Ability to work as a team, both within and outside of Internal Audit. Demonstrated experience with audit report writing. Analytical, interpersonal, and communication skills both verbal and written. Strong understanding of internal controls. Demonstrated skillset as a self-directed, service-oriented, forward-thinking, and creative individual with high ethical standards. Ability to learn processes and apply to future scenarios. Ability to handle confidential and sensitive information with discretion.

Demonstrated time management skills with the ability to prioritize and plan multiple projects and activities. Ability to prepare recommendations and reports in a professional and timely manner. Proficiency with Microsoft Office software, including Outlook, Word, Excel, and PowerPoint. Ability to apply or develop a baseline understanding of IT audit practices, including information systems, IT general controls, and technology infrastructure. Ability to apply or develop a baseline understanding of Agile audit practices.

Senior Auditor:
All qualifications listed for an Auditor, plus:
Experience in conducting the full life cycle of an audit with minimal supervision and guidance. Four additional years of auditing or related experience. Certification as a CPA, CIA, CISA or other relevant professional certification.

Preferred Qualifications
- Masters degree or relevant professional certification. Familiarity and work experience in a higher education environment. Familiarity and work experience with SAP. Public accounting or relevant experience. Ability to organize and lead the work of others on an audit team. Knowledge of relevant external regulations such as HIPAA, FERPA, PCI Standards, and GLBA. Experience in or familiarity with vulnerability scanning and penetration testing.

Advanced knowledge and/or experience in completing IT audits. Experience in computer assisted audit techniques using data analytics software. Familiarity with diverse computing environments and architecture, data centers and co-locations facilities/operations. Advanced knowledge and/or experience in Agile auditing skills. Experience in risk assessment and risk management activities. Active in professional auditing organizations. Knowledge of IT control objectives including NIST, COBIT, and GTAG.

Thorough knowledge and experience applying auditing theory and practice in accordance with the IIA standards, ISACA standards, and IIA Code of Ethics.

Duties & Responsibilities
- Auditor:
Performs the following tasks under direct supervision:
Actively participates in the annual risk assessment and audit plan creation process and proactively keeps the Director informed of the progress of audits. Performs planning activities with the audit client to gain an understanding of client operations. Conducts a risk assessment for each audit to identify potential risks and what controls should be in place. Designs audit objectives and procedures for each audit, prepares audit programs, and performs audits, following applicable standards (IIA, ISACA), as well as review for integrity, security, adequacy of controls, effectiveness and efficiency, compliance with policy, regulations or legal requirements, and consistency with management objectives.

Conducts entrance meetings with audit clients to discuss audit objectives, scope and methodology, and timing of the audit. Performs operational, financial, compliance and IT…