NASCO *Position Title: *Location: *Position Type: *Compensation: *Start Date: Senior IT Auditor Atlanta, GA (1200 Abernathy Road, Ste 1000, Atlanta GA 30328) Full-Time Salaried Hoping for 2015 ISACA Atlanta is not responsible for the content or accuracy of this job posting. *JOB DESCRIPTION Under general direction, the Senior IT auditor assumes a pro-active approach to assisting management of the company in managing risk throughout NASCO Information Systems operations. This is done by identifying and assessing risk, participating in the development of the annual Audit Plan to address the more significant risks, advising and consulting on risk management and controls for new systems and/or processes associated with corporate projects, and employing innovative audit techniques to maximize risk management coverage. Communicates with manager regarding projects and initiatives. Responsibilities: Directs and conducts information systems audits utilizing computer assisted audit techniques. Tracks and monitors execution and closure of audit action plans; evidence that audit action items were closed Analyzes and evaluates IT operations and strategies to identify opportunities for improvement in processes and outcomes Provides technical audit advice relating to systems/operations; systems development, design and controls; systems security; change/project management; business process improvement; complex integrated systems and related computer applications; disaster recovery; and IBM mainframe and mid-tier environments. Interacts with business area personnel regularly, including entrance and exit interviews, in order to gather information, interpret results, communicate potential risks/issues and develop appropriate corrective actions including strengthening controls, improving efficiency and effectiveness of operations and controlling costs. Monitors the progress and management of corporate IT initiatives or projects, as assigned. Works collaboratively with the project team to identify project and post-implementation risk/issues and develop recommendations for corrective actions. Resolves identified problems by working with others, including internal control testing, coding and unit testing, system and acceptance testing, conversion testing, implementation testing, post-implementation review, as appropriate. Writes memoranda and status reports to management communicating the risks and recommended corrective action plans identified in these monitoring and advisory activities. Performs follow-up to validate completion of action plans. Identifies and maintains a repository of best practices and benchmarking information related to NASCO’s IT business operations. Maintains a repository of IT audit issues and relative corrective action plans and updates management on outstanding issues and potential risks on a scheduled basis. Participates in the performance of risk assessment of the business process and project level. Maintains a database repository of business processes and related risk documentation. Assists in the coordination/management of all external audits of IT information systems as operations as assigned. Identifies, reports timely, and resolves with management, issues within NASCO affecting achievement of corporate goals and objectives, efficient and effective use of resources, safeguarding of assets, and compliance with applicable laws and regulations. Performs other duties as assigned by manager. *JOB REQUIREMENTS ISACA Atlanta Job Posting Form – Template Version 1.2: 03/23/04 Page #1 Required Knowledge, Skills, Abilities and Experience: Incumbent must fully understand auditing techniques, concepts and principles, and how they are applied to individual audits. Must be knowledgeable of internal controls, and system development life cycle (SDLC) methodologies, complex integrated computer systems, applications and environments. Must be proficient with PC applications and have experience in and knowledge of IT audit related issues concerning operating systems (computer networking, firewalls, penetration tests, access control software (and database management systems). Experience with Audit Command Language (ACL) preferred. Incumbent must have excellent project management skills including workflow balancing, activity scheduling, and problem solving facilitation. Ability to prioritize and manage multiple complex tasks and demonstrated experience in meeting deadlines. Must be highly motivated, organized, committed to professional development, with demonstrated progression and achievement. Ability to work independently with minimal supervision is required. Must be able to work effectively in a team-oriented atmosphere. Highly developed oral and written communication skills to effectively communicate complex auditing information and business risks to a non-technical audience. Also must have effective public speaking skills and be able to prepare and deliver presentations. Good analytical skills and judgment and strong decision-making ability. Must have demonstrated experience and knowledge in business process improvement, risk assessment and mitigation. Minimum 7 years relative experience 5 or more years of progressively responsible systems analyst/programmer and/or consulting and business advisory services experience. Proven success in IT Auditing Required Training and Education: BS/BA degree in Business Administration, Management Sciences, Information Systems, Finance and/or Accounting Desired Training and Education: Master degree or Audit related certifications such as CISA, CISSP NASCO is a Minority/Female/Disability/Vet/Affirmative Action Employer. Travel: Education: Experience: Certification: 0 to 20% Bachelor’s degree required, Master’s degree preferred At least 7 years of relevant experience Required:none Desired:CISA or CISSP COMPANY INFORMATION Learn more about NASCO at www.nasco.com CONTACT INFORMATION Job Reference: Reference Number or Job Code *Contact Name: Pam Clayton is recruiter on position *Method: Please apply directly to https://careers-nasco.icims.com/jobs/2740/senior-it-auditor/job Website: https://careers-nasco.icims.com/jobs/2740/senior-it-auditor/job SPECIAL INTRUCTIONS: Please provide additional/special instructions for the potential applicant to follow-up (e.g., provide a cover letter, résumé, and salary history…). ISACA Atlanta Job Posting Form – Template Version 1.2: 03/23/04 Page #2