What are the responsibilities and job description for the IT Auditor position at NJ CURE?
IT Auditor
The IT auditor plays a crucial role in ensuring the IT Process and procedures, reliability, and efficiency of an organization's information systems through a periodic review and documentation. The candidate needs a combination of technical skills, IT Security knowledge, analytical abilities, and a strong understanding of business processes.
Job Responsibilities
Responsible for audit projects through all stages of the audit process like scoping, planning, documenting, and reporting. Identify and evaluate controls for gaps and opportunities, propose solutions, and partner with IT and business leaders to determine remediation
Work independently and within teams under the guidance of more senior IT leaders to identify opportunities for improvement of the standard operating procedures and develop creative solutions
Document IT policies, controls independently, and work with vendors to maintain and update the IT Process and procedures to stay current and to identify deficiencies addressing risk and providing value to the organization
Perform internal IT audit, status monitoring and reporting activities to Senior IT Leaders
Other duties assigned by the IT team
Qualifications
Bachelor's degree: In computer science, information technology, or a related field.
3 years of experience in IT auditing and documenting skills of IT policies and procedures
Experience in working with IT and Business leaders to review and monitor and improve IT process and controls
Certifications: While not always mandatory, certifications like Certified Information Systems Auditor (CISA), or Certified Information Security Manager (CISM) are a strong Plus
IT systems and networks: Understanding of hardware, software, databases, and network infrastructure.
Security protocols: Knowledge of security best practices, risk assessment, and control implementation.
Ability to work with external vendors and consultants to document and maintain IT Process and controls
Knowledge in any of audit software (e.g ACL, IDEA, etc) and data analytics tools is a plus
Programming languages: Basic understanding of programming languages (e.g., SQL, Python) for data analysis is nice to have not needed.
Have strong Analytical and Problem-Solving Skills, Critical thinking to have ability to identify potential risks, vulnerabilities, and control deficiencies.
Ability to clearly articulate complex technical concepts to both technical and non-technical audiences.
Understanding of business processes: Knowledge of how IT systems support organizational goals and objectives.
Risk management: Ability to assess the impact of IT risks on the business and recommend appropriate mitigation strategies.
