|
General
Summary
The
Principal Information Systems Auditor position is responsible for
performing information systems audit work throughout the University
of Minnesota, including the supervision of such work performed by
others. Incumbents are expected to have extensive information systems
audit experience, project management skills, and supervisory skills
necessary to produce information systems audit work which conforms
to professional standards. Incumbents will generally work in ambiguous
situations for which they will need to establish criteria, define
work protocols, and structure assignments for other staff. Incumbents
are expected to fulfill their responsibilities with limited supervision
while maintaining effective communications with the Information
Systems Audit Manager. Principal Information Systems Auditors will
normally be assigned the largest and most complex information systems
audit projects undertaken and will be actively involved in making
decisions regarding the scope of work performed, the depth and breadth
of audit testing needed, and reporting disposition of results with
the final approval of the Information Systems Audit Manager. Principal
Information Systems Auditors are also responsible for reviewing
the work performed by others for accuracy, completeness, relevancy,
and adherence to standards. Incumbents are responsible for communicating
audit results, including the preparation of written reports.
Job
Description
A
Principal Information Systems Auditor is expected to:
-
Possess
extensive knowledge of the University of Minnesota: its business
processes; policies and procedures; governance practices; and
regulatory obligations as it relates to information systems
audits.
-
Be
adept at assessing complex information systems application development,
implementation and processing risks which warrant audit attention.
-
Plan
and direct information systems audit work which sufficiently
evaluates control environments in computer applications of varying
complexity using a repertoire of sound information systems audit
principles, skills and techniques so the areas of material risk
are provided appropriate levels of audit coverage.
-
Identify
when specialized skills/resources are needed to capably assess
unique and complex technology applications (e.g. new operating
system implementations, new network control tools, etc.).
-
Apply
information systems development, implementation and operation
control concepts in a wide variety of technology settings and
appropriately assess the exposures resulting from ineffective
or missing control practices.
-
Be
adept at evaluating information system audit results from management's
perspective, even when defined criteria or standards do not
exist.
-
Provide
appropriate levels of supervision and quality assurance review
to ensure that work performed by others is competently performed
and meets established standards for documentation, thoroughness,
accuracy, etc..
-
Be
effective in evaluating overall audit results, weighing the
relevancy, accuracy, and perspective of conclusions against
the accumulated audit evidence both for individual technology
processes as well as for the technology application as a whole.
-
Be
effective in communicating audit results, both verbally and
in writing, so they are persuasive, placed in the appropriate
context, and understood by the recipient.
-
Structure
work assignments to further individual staff development.
-
Provide
interim performance feedback to staff via written evaluations.
-
Demonstrate
effective project management skills which promote team productivity
and the completion of audit projects within time budgets and
calendar schedules.
-
Be able to provide consulting services for information systems
issues including development of University wide information
systems standards, policies and procedures.
-
Interact
effectively with a wide variety of people in a wide variety
of settings.
-
Handle
multiple assignments simultaneously.
-
Exhibit
creativity and innovation in recommending improvements to departmental
audit practices and processes and encouraging those behaviors
in others.
-
Engage
in professional development activities, including completion
of other professional certification program.
The
Principal Auditor position does not have formal supervisory responsibility
for other staff. Supervision of staff on a project basis is, however,
a major component of this position. Work assignments and direction
of staff support and student personnel is also expected to occur
frequently.
Incumbents
generally interact at the dean and department chair level, although
some interaction with higher level employees may occur when directed
by audit managers. Interaction is expected to occur during audit
projects as well as on a consulting/advisory basis.
Incumbents
must be comfortable working in ambiguous and/or stressful situations.
Flexibility, ability to change priorities quickly, and capacity
to handle multiple tasks are required of this position.
The
Principle Information Systems auditor may also be responsible for
designing and building small automation tools for use by the entire
audit department and for special investigations.
Skill
and Designation Requirements
The
position requires:
-
Bachelor's
degree with business emphasis in a related field
-
5
to 8 years of information system audit experience or a combination
of information systems and financial audit experience totaling
5 years
-
Demonstrated
skills in leading complex information systems audits
-
Effective
interpersonal skills
-
Effective
verbal and written communications skills
-
Critical
thinking and analytical skills
-
Computer
literacy
Periodic
in-state travel may be required.
Overtime may be required occasionally to complete work assignments
on time.
Preferred
Skills and Designations
We
would prefer that the incumbent have some or all of the following
designations and skills:
-
Have
or pursuing a CPA, CIA, CISA certification,
-
Strong knowledge of PeopleSoft
-
SAS
programming skills or programming skills in several other computer
languages
-
Extensive
experience auditing Novell, UNIX and Apple operating systems
-
Extensive
experience auditing network firewall concepts
- Reports
To
-
Information
Systems Audit Manager
|
Return
to: Audits : U
of M Home
