IT Audit Manager

Position Details

Summary

Operating Title IT Audit Manager Long Classification Title INTERNAL AUDIT MANAGER Campus Location Concord Department USNH Internal Audit Operations Summary of Position

Manage, plan, and conduct information systems and security audits, and consultations throughout the USNH in both routine and complex situations, while utilizing sound business judgment, including identifying audit objectives and scope, determining and assessing risks, developing time budgets, and writing reports of findings and recommendations either independently or through supervision of an assigned employee.

Acceptable minimum level of education Bachelor's Acceptable minimum years of experience 5-7 years Additional Job Information Posting Number PS4697FY24 Other minimum qualifications

• Bachelor's degree in field determined to be appropriate by hiring department in business, accounting, computer science, auditing, or related field. CISA or equivalent.

• Understanding of risks and internal controls, COSO framework, IT business processes, and professional auditing standards.

• Excellent oral and written communication skills and attention to detail.

Additional Preferred Qualifications Salary Information

Salary is complemented by a comprehensive benefits package which includes medical, dental, retirement, tuition, and paid time off.

Quicklink for Posting https://jobs.usnh.edu/postings/61670 Percent Time Information (FTE) 1.00 Grade 27 EEO Statement

The University System of New Hampshire is an Equal Opportunity/Equal Access/Affirmative Action employer. The University System is committed to creating an environment that values and supports diversity and inclusiveness across our campus communities and encourages applications from qualified individuals who will help us achieve this mission. The University System prohibits discrimination on the basis of race, color, religion, sex, age, national origin, sexual orientation, gender identity or expression, disability, genetic information, veteran status, or marital status.

Institution Information

The University System of New Hampshire is the largest provider of postsecondary education in the Granite State. With approximately 30,000 enrolled students annually and more than 90,000 alumni living in state, the institutions of the University System - the University of New Hampshire - Durham, the University of New Hampshire School of Law, the University of New Hampshire at Manchester, Plymouth State University, and Keene State College - have a direct impact on hundreds of thousands of New Hampshire citizens every year.

In concert with our commitment to teaching, our community outreach and service programs expand knowledge and have a positive impact on the state, and our research efforts add insight and understanding to subjects as varied as air quality, economic development, family health, teacher training, and ocean mapping.

The UNH Diversity Resource Guide with information and programming available in the seacoast area, New Hampshire and the region can be found here: https://www.unh.edu/hr/diversity-resource-guide

Posting Details

Posting Date 06/24/2024 Open Until Filled Yes Closing Date Posting Open to Internal Candidates Only? No Interested Internal Candidates Exist? No Job Category Salaried Staff (Exempt) Appointment Type Regular If TERM position provide projected end date Equipment/Instruments

Desktop/laptop PC's

Drivers License and Physical Requirements. Please check all items that apply. None applicable

Duties / Responsibilities

Job Duties

Duty/Responsibility

Manage, plan, and perform information security audits, security reviews, and consultations within USNH, including the assessment of IT risks and identification of objectives and scope of each review.

Responsible for successfully planning, executing, and completing IT audits according to risk-based approach in line with the department standards; identifying security and efficiency issues and recommending improvements for strengthening internal controls. Prepare well-written reports for communication to management and make initial presentation to appropriate personnel; follow up on recommendations made as a result of audits and evaluate the implementation of recommended changes.

Duty/Responsibility

Maintain professional certification and continually improve competence through continuing education, reading, and networking to stay current on information technology, higher education industry, auditing industry, and regulatory practices; and share relevant information within IA and across the System.

Duty/Responsibility

Assist the Director in shaping the annual audit plan by participating in risk-focused audit planning conversations with USNH/Campus CIOs and other relevant managers, identifying and prioritizing IT and IS elements of the plan, and engaging in continual risk assessment throughout the year.

Duty/Responsibility

Promote and demonstrate commitment to the vision and goals for the IA function by providing a model of professional and ethical behavior to IA staff and customers; completing assigned portions of the annual audit plan on a timely basis; providing outreach to managers throughout the System; and representing USNH Internal Audit and/or the Director as requested in meetings and forums. Follow up recommendations and management actions resulting from audits to substantiate and evaluate the implementation of agreed upon changes.

Duty/Responsibility

Use computer assisted audit techniques to aid in working more efficiently and effectively.

Duty/Responsibility

Assist the Director in selected technical, improvement and administrative activities, including preparation of BOT materials, technical research, enhancement of internal audit policies and practices, deployment of audit technology, ethics investigations, and special projects. Collaborate with other auditors and members of management as appropriate to develop and deliver internal control-oriented training and assessment techniques and to research and facilitate solutions to financial and operating problems.

Duty/Responsibility

Understand and follow IIA, ISACA, NIST, and/or other appropriate standards applicable to assignments via professional reading and training. Demonstrate proficiency in understanding systems and processes reviewed.

Exercise due professional care, engagement planning and supervision, and accumulation and analysis of sufficient audit information and evidence. Follow standards of reporting and comply with USNH and Internal Audit department policies with special attention to those related to information security, confidentiality, conflicts of interest, and ethics.

Duty/Responsibility

Facilitate effective communication and coordination with business management at all levels and must have excellent written, verbal, interpersonal and presentation skills. Must demonstrate knowledge of IT Security Standards and methodologies (e.g., COBIT, NIST, Cybersecurity Framework); process and control industry standards; risk management practices and techniques; and internal audit planning, testing, and reporting.

Must display a high degree of professionalism and leadership and possess proficient organizational, analytical and project management skills.

Develop a thorough understanding and knowledge base of the USNH's IT operations, establish effective business relationships within the System and assist management in the understanding and adaptation of internal principles and practices.

Frequently involved in matters that require complex judgments and solutions based on sophisticated analytical thought such as identifying solutions for a variety of audit control issues. Analyzes reporting findings; recommendations appropriate interventions where needed. Proposes creative and pragmatic solutions for risk and control problems.

Partners with others to develop approaches for addressing broader system-wide emerging issues.

Supplemental Questions