About the Opportunity

Job Summary

Northeastern University's Audit & Advisory Services is seeking a motivated and talented individual to join our team as a Senior IT Auditor. This is an exciting opportunity to join our team of skilled professionals that work collaboratively throughout the University as a trusted partner. The team consistently delivers high-quality results in a challenging and fast-paced environment.

Working in a strong and established team and reporting to the IT Audit Manager, the Senior IT Auditor will participate in all phases of assigned audits, from planning to reporting. They will skillfully conduct and successfully execute a range of challenging audit work including executing audits from the annual audit plan, advisory projects, leading audit client engagements, assist in developing data analytics procedures (e.g. Power BI, Tableau, etc.), and developing a robust IT audit program. The Senior IT Auditor will be familiar with new areas of focus for technology audits: process automation, artificial intelligence, while continuous monitoring/auditing continues to evolve.

The ideal candidate will learn the business from the inside and gain broad exposure to a variety of IT systems and professionals working in software development, information and network security, change management, access control, IT infrastructure, server virtualization, cloud computing and other key areas of this growing department. You will have the opportunity to help facilitate positive change by examining business processes and recommending areas for improvement within the University. Your experience will not be limited to auditing IT systems. Our cross-functional approach enables collaboration between IT, Financial, and Operational audits while leveraging our department’s guiding principles. There will be significant exposure to senior management throughout the organization.

As a trusted partner and integral team member, the Senior IT Auditor:

• Maintains the highest level of professional and ethical standards as expressed in Audit & Advisory Services’ Audit Charter and the IIA’s International Professional Practice Framework (IPPF).
• Builds effective relationships with all levels of stakeholders across our campuses
• Provides value-added professional audit work, individually or as a collaborative team member, in conducting reviews of assigned organizational activities in accordance with the IIA and department standards.
• Plans and executes information technology (IT) audit projects designed to provide assessment of internal control processes and operational performance.
• Demonstrates and applies a thorough understanding of complex information systems.
• Prepares detailed plans for performing individual audits including the identification of key risks and controls, determination of audit objectives, and development of an appropriate audit program. Uses knowledge of the current IT environment and industry IT trends to identify potential issues and risks.
• Under minimal supervision, develops clear and concise audit work papers to support findings and recommendations, and writes clear and concise reports for management.
• Identifies potential audit areas, assists with assessing the degree of inherent risk, and estimating the time and skills required to complete audit projects. Contribute to the development of the IT audit plan based upon risk assessment, management’s goals and objectives, and the requirements of the Audit & Risk Committee.
• Performs or assists in performing special projects or studies, including risk assessments, fraud investigations, audit department policy updates, due diligence acquisition reviews.
• Participates in reviews of internal controls and security of systems under development as well as major IT projects and initiatives.

Key Responsibilities

IT Audits

• Perform IT audits including reviews of system development, program changes, operating systems, databases, applications software, data security, computer operations, network security, business continuity, and disaster recovery. Develop and incorporate security vulnerability assessments during audit reviews.
• Perform pre- and post-implementation reviews for new or modified application systems to assess project management, data integrity and security controls.
• Such audit reviews will be conducted by assessing risks and identifying audit objectives and scope for each review, developing audit programs, performing interviews and test work, developing clear and concise audit work papers timely to support findings and recommendations, and writing clear and concise reports to management. Facilitate the communication of audit results through written reports and oral presentation to management.