IT Auditor

Class Concept

This is advanced professional work in auditing applications and systems that utilize electronic data processing equipment to process and store financial transactions or confidential data. Work involves review of computer applications to determine if data is processed correctly and is secure. Included in the audit is a review of the total configurations and environment to determine if access to computer programs, data, and equipment is limited to authorized personnel, and to assess the measures which have been taken to prevent and/or recover from computer failure. Employees at this level are assigned to audit complex applications and systems and computer centers in State Government. Work may involve assisting financial auditors in developing new audit techniques which involve utilizing the computer as an audit tool. Employees can use a wide variety of software packages and must assess hardware configurations from many different vendors. Work assignments require analysis of complex computer programs and files, utilizing high procedural languages and occasionally machine language. The work requires an understanding of auditing practices coupled with an understanding of the principles of systems design, with skill in one or more computer programming languages.

Recruitment Requirements

Knowledge, Skills, and Abilities

• Thorough knowledge of the principles/fundamentals of auditing.
• Thorough knowledge of the capabilities and use of computer hardware
• Working knowledge of Information Technology Security
• Considerable skill in programming and specialized report generation or data retrieval languages.
• Basic knowledge of auditing practices including risk assessment, performing walkthroughs, sampling and testing methodologies, and analysis of results for potential exceptions/issues.
• Basic knowledge of operating system, data storage, and database platforms (e.g., mainframe, Active Directory, Windows, Linux, Oracle, etc.); network architecture; IT governance processes; IT risk management and assessment processes.
• Working knowledge in computer programming languages, programs, coding, and/or data analytics.
• Ability to write and express oneself clearly.
• Ability to deal effectively with information system, fiscal, and/or management personnel.

Minimum Education and Experience

Graduation from a four-year college or university with a degree in, computer science, accounting, or a related IT degree and four years of experience in data analytics auditing, or information systems, programming, or technology auditing; or A two-year degree in computer science from a technical or community college and six years of experience In data analytics auditing, or information systems, programming, or technology auditing; or an equivalent combination of education and experience may be substituted on a year-for-year basis.