Assistant Director - IT Audit

About the Opportunity

JOB SUMMARY

Reporting to the Director of Audit & Advisory Services, the Assistant Director - IT Audit is responsible for assessing, evaluating and making recommendations to management regarding the effectiveness of information technology (IT) risk management, governance, and internal controls inherent in the processes and activities of the University.

The Assistant Director will serve as a subject matter expert in evaluating IT risk, governance, and controls. The Assistant Director leads the IT audit program which has been established to evaluate the system and process controls to ensure the confidentiality, integrity, and availability of the university’s information assets and data. To meet the program’s objectives, the Assistant Director will examine the University’s IT infrastructure, systems, processes and technology-dependent operations.

The Assistant Director will lead high-impact audit projects and advisory engagements, and deliver strategic insights to University leadership. Our cross-functional approach to auditing involves close collaboration between IT and Operational audit areas. In this capacity, the Assistant Director will need to be familiar with the mission and strategy of the University and is expected to generate value-added recommendations that enhance the University's overall operations. The role requires strong leadership, project management, communication skills, and significant exposure to Senior Management throughout the organization.

The Assistant Director will participate in IT risk assessments, identify emerging IT risks, be familiar with complex systems and IT transformation projects, and maintain the IT audit universe which informs the development of the annual enterprise risk-based IT Audit Plan.

The Assistant Director is expected to:

• Perform and oversee professional audit work, individually and as a team leader, in conducting reviews of assigned organizational activities in accordance with both IIA and departmental standards.

• Plan and execute IT audit projects designed to provide an assessment of internal control processes and operational performance.

• Prepare detailed plans for performing individual audits including the identification of key IT risks and controls, determination of audit objectives, and development of an appropriate audit program. Use knowledge of the current environment and industry trends to identify potential issues and risks.

• Under minimal supervision, develop clear, concise, accurate, and complete audit work papers to support findings and recommendations, and write clear and concise reports for management.

• Conduct or assist in the performance of special projects or studies, including risk assessments, fraud investigations, audit department policy updates, and due diligence reviews.

• Participate in University-wide initiatives, bringing a risk and controls perspective to institutional planning, transformation, and technology strategy.

• Oversee engagements with external auditors, as needed, ensuring quality, consistency, and timeliness in deliverables.

• Assist the Director with resource planning and organizational strategy to meet department and University needs.

MINIMUM QUALIFICATIONS

• Knowledge and skills required for this position are normally acquired through a bachelor’s degree in Management Information Systems, Information Security/Assurance, Computer Science, or a related discipline plus at least five years or more in IT Auditing, IT Risk and Compliance, and\or Information Security. Master’s degree is a plus.

• Proficiency with data analytics using Excel, Tableau, Cognos, or PowerBI is preferred.

• Proficient with Microsoft Office applications including Word, Excel, Power Point, and Visio.

• Project management skills with demonstrated experience in meeting project timelines and deliverables and the ability to handle multiple project assignments simultaneously.

• Excellent written and verbal communication skills, effective report writing, and comfort presenting complex findings to both technical and non-technical audiences.

• Strong analytical and problem-solving skills.

• Proven ability to build relationships and influence across diverse group of stakeholders.

• Understanding of the Institute of Internal Auditor’s International Professional Practices Framework, COSO Framework, and/or other professional i