IT Auditor

• CURRENT PENN STATE EMPLOYEE (faculty, staff, technical service, or student), please login to Workday to complete the internal application process. Please do not apply here, apply internally through Workday.

• CURRENT PENN STATE STUDENT (not employed previously at the university) and seeking employment with Penn State, please login to Workday to complete the student application process. Please do not apply here, apply internally through Workday.

• If you are NOT a current employee or student, please click "Apply" and complete the application process for external applicants.

JOB DESCRIPTION AND POSITION REQUIREMENTS:

Finance and Business is a values driven organization that supports thousands of university faculty, staff, and students, while also providing services to the broader community and society. The Office of Internal Audit is part of the Finance and Business team and has a mission of "We promote effective stewardship of University assets and resources, respect all people, and support and uphold the highest level of integrity." Our values model those of Penn State's and we firmly believe in the value of Respect, which encourages us to "respect and honor the dignity of each person, embrace civil discourse, and foster a diverse and inclusive community." As an incoming team member of the Office of Internal Audit, it will be expected that all employees embody and model Penn State's and Finance and Business's commitment to diversity, equity, and inclusion.

Penn State Internal Audit is seeking to hire an IT Auditor with internal or external auditing experience to assist in performing audits designed to independently review and evaluate the University's information technology and operational controls.

The position will:

• Work independently to perform all aspects of audit plans for College, Campus, Administrative Area, and process audits, using knowledge of accepted audit techniques and the identification and assessment of the level of risk inherent in the operation under audit. Obtain and analyze evidential matter and document such procedures, together with audit conclusions.
• Develop written audit reports of findings. Present briefings on audit findings to management and appraise adequacy of corrective actions proposed or taken by management to improve deficient conditions.
• Perform audit follow-up procedures and/or review audit follow-up responses to ensure management is addressing control weaknesses and process inefficiencies identified in audit reports in a timely manner.
• Assist the IT Audit Supervisor in developing and/or revising audit programs and questionnaires.
• Assist with investigations into possible fraud, waste, or abuse as assigned, using a high level of professional judgment.
• Maintain high level of understanding and familiarity with current University policies and procedures and with industry standards and best practices in order to assess compliance, and to conclude on the adequacy of internal controls.
• Provide consultation as requested to assure University policies and procedures and provide for adequate internal controls to mitigate and address risks.
• Support departmental, Finance & Business and University wide strategic initiatives by participation in ongoing groups and teams.

The successful candidate will demonstrate:

• Knowledge of auditing principles, practices, and procedures.
• Knowledge of both General IT and Application IT controls.
• Knowledge in data security requirements/standards highly preferred including Health Insurance Portability and Accountability Act (HIPAA), Electronic Protected Health Information (ePHI), National Institute of Standards and Technology (NIST) 800-53 and 800-171, and Payment Cared Industry Data Security Standards (PCI-DSS).
• Excellent verbal and written communication, analytical, and organizational skills.
• The ability to work in a collaborative environment.
• Strong professional judgement and an ability to work with individuals from a variety of cultures and backgrounds.
• A strong commitment to inclusionary practices which support diversity throughout the University.
• Effective and sustainable use of University resources in conduct of audits and decision-making processes.

This position will be filled at an Intermediate or Advanced Professional level, depending on the final candidate's experience and education. The Intermediate level requires a minimum of a Bachelor's degree and one year of relevant experience, or an equivalent combination of education and experience. Additional education and/or experience are required for Advanced Professional level.

A Bachelor's degree in Accounting or Information Systems and certifications, such as CISA, CPA, or CIA are preferred. Experience in auditing information systems or information systems security in higher education is desirable. Experience in programming and data analytics with tools such as ACL and CaseWare is also desirable.

Must be a U.S. citizen to apply to this opportunity.

This position offers a hybrid work schedule that combines on campus and remote work with flexible hours. The expectation for on campus work is a minimum of 3 days a week. Questions related to hybrid/flexible work schedule should be directed to the hiring manager during the interview process.

The Pennsylvania State University is committed to and accountable for advancing diversity, equity, inclusion, and sustainability in all of its forms. We embrace individual uniqueness, foster a culture of inclusion that supports both broad and specific diversity initiatives, leverage the educational and institutional benefits of diversity in society and nature, and engage all individuals to help them thrive. We value inclusion as a core strength and an essential element of our public service mission.

The salary range for this position, including all possible grades is:

Salary Structure - additional information on Penn State's job and salary structure.

CAMPUS SECURITY CRIME STATISTICS: