IT Auditor

POSITION SPECIFICS

Penn State Internal Audit is seeking to hire an IT Auditor with internal or external auditing experience to assist in performing audits designed to independently review and evaluate the University’s information technology and operational controls.

• Work independently to perform all aspects of audit plans for College, Campus, Administrative Area, and process audits
• Apply accepted audit techniques to identify and assess the level of risk inherent in the operation under audit; obtain and analyze evidential matter and document such procedures; formulate and communicate audit conclusions
• Develop written audit reports of findings; present briefings on audit findings to management and appraise adequacy of corrective actions proposed or taken by management to improve deficient conditions
• Perform audit follow-up procedures and/or review audit follow-up responses to ensure management is addressing control weaknesses and process inefficiencies identified in audit reports in a timely manner
• Assist the IT Audit Supervisor in developing and/or revising audit programs and questionnaires
• Assist with investigations into possible fraud, waste, or abuse as assigned, using a high level of professional judgment
• Maintain high level of understanding and familiarity with current University policies and procedures and with industry standards and best practices in order to assess compliance, and to conclude on the adequacy of internal controls
• Provide consultation as requested to assure University policies and procedures and provide for adequate internal controls to mitigate and address risks
• Support departmental, Finance & Business and University wide strategic initiatives by participation in ongoing groups and teams

• Knowledge of auditing principles, practices, and procedures
• Knowledge of both General IT and Application IT controls
• Knowledge in data security requirements/standards highly preferred including Health Insurance Portability and Accountability Act (HIPAA), Electronic Protected Health Information (ePHI), National Institute of Standards and Technology (NIST) 800-53 and 800-171, and Payment Card Industry Data Security Standards (PCI-DSS)
• Excellent verbal and written communication, analytical, and organizational skills
• Strong project and time management skills to develop and adhere to budgets and timelines
• The ability to work in a collaborative environment
• Strong professional judgement and an ability to work with individuals from a variety of cultures and backgrounds
• Effective and sustainable use of University resources in conduct of audits and decision‑making processes

• Bachelor’s degree in Accounting or Information Systems and certifications, such as CISA, CPA, or CIA
• Experience in auditing information systems or information systems security in higher education
• Experience in programming and data analytics with tools such as ACL and Case Ware

If filled as Information Technology Auditor – Advanced Professional, this position requires:
Bachelor’s Degree, 3+ years of relevant experience; or an equivalent combination of education and experience accepted. Required

Certifications:

None.

If filled as Information Technology Auditor – Intermediate Professional, this position requires:
Bachelor’s Degree, 1+ years of relevant experience; or an equivalent combination of education and experience accepted. Required

Certifications:

None.

Must be a U.S. citizen to apply to this opportunity.

Employment with the University will require successful completion of background check(s) in accordance with University policies.

Penn State does not sponsor or take over sponsorship of a staff employment Visa. Applicants must be authorized to work in the U.S.

The salary range for this position, including all possible grades, is $68,200.00 - $.

Penn State provides a competitive benefits package for full‑time employees designed to support both personal and professional well‑being. In addition to comprehensive medical, dental, and vision coverage, employees enjoy robust retirement plans and…