Principal IS Auditor - St Paul, United States - University of Minnesota

Description

About the Job

Come join the University of Minnesota's widely respected Office of Internal Audit (OIA) as the principal information technology (IT) auditor The University's technology portfolio is vast, with thousands of technologies that include cloud-based applications, in-house infrastructure and data centers, and cutting-edge supercomputers and research systems. In this role, you will perform internal audit work related to these and other technologies supporting the wide array of operations throughout the University system.

Additionally, the OIA will fund training and exam fees for key certifications such as the CIA, CISA, CFE and CPA, and you'll earn bonuses for achieving certifications.
Flexible work arrangements are available. Work mode: Hybrid, some remote and some in person.

This is a 100% time, 12-months, annually renewable appointment in the academic and professional series (classification 9781IS, Principal Auditor-IS Audit).

Essential Responsibilities:

1. (~25%) Perform engagement management activities associated with IT audits of University units or processes. This will include:

• Managing work assignments and evaluating work product of staff assigned to the audit. This includes being responsible for ensuring the work product is complete, logical and complies with both the Institute of Internal Auditor's professional standards and department practices.
• Ensuring staff are using appropriate audit judgment when drawing conclusions and evaluating the significance of audit findings.
• Coaching staff regarding completion of IT audit processes, evaluation of the units and IT business processes being reviewed, and creation of recommendations.
• Coordinating work effort and communication with line management responsible for assigned areas.
• Performing reviews of others' audit work to ensure it contains relevant facts to support audit scope and conclusions and adhere to internal audit policies and procedures.
• Managing client interaction during course of audit.
• Providing guidance to non-IT auditors (i.e., generalist auditors) leading audits where IT concerns are only a subset of the overall project. The incumbent will be assigned to review the IT audit planning, field work and reporting material associated with these audits. For these audits, the incumbent will normally consult with the IT Audit Manager before and after field work is performed for advice and concurrence on planning and reporting strategies.
  

2. (~25%) Plan IT audits of all levels of complexity independently with minimal supervision from audit management. The plans and procedures are to be developed using a risk-based methodology, focusing our audit effort on those activities creating the greatest risks to the institution. Plans must be developed in recognition of the limited audit resources available for each audit engagement. This will include:

• Collecting background material needed through a variety of mechanisms including interviews and data queries for defining the scope of planned audits based on risk analysis and management needs.
• Summarizing discoveries during the planning process.
• Drafting engagement letters, audit programs, time budgets, and work schedules for the audit.
  

3. (~25%) Communicate the results of the audit work performed, using both verbal and written skills. This will include:

• Developing and documenting findings, and recommendations that properly address risks and conclusions.
• Meeting with the audit client(s) to discuss both the preliminary and final audit results.
• Using appropriate audit judgment in evaluating the significance of audit findings and the impact/risk of the issue.
• Drafting the initial audit report in a clear, concise, manner that effectively communicates results to all relevant levels of management.
• Ensuring recommendations made are both actionable and cost-effective, and that they identify appropriate root cause.
  

4. (~25%) Perform IT audit testing of both University units and processes to evaluate the efficiency and effectiveness of internal control, risk management, and governance processes independently with minimal supervision from audit management. This includes assessing whether:

• Risks are appropriately identified and managed by the process owners and/or University management.
• Employees' actions comply with policies, standards, procedures, and applicable laws and regulations.
• Resources are acquired economically, used efficiently, and adequately protected.
• Programs, plans, and objectives are achieved.
• Quality and continuous improvement are fostered in the University's control processes.
• Significant legislative or regulatory issues impacting the University are recognized and addressed appropriately.
  

Other responsibilities:

• Conduct follow-up work to determine the status of prior recommendations made to management.
• Complete training and other activities to maintain and enhance professional skills and abilities.
• Gather, review, and assess audit evidence as part of investigating allegations of misconduct.
• Provide consultative advice and recommendations to business areas and clients to improve processes and controls as needed.
  

Salary range: $100,000-$120,000

Work Mode: Hybrid

Qualifications

Required Qualifications:

• A bachelor's degree, with a major in technology, technology management, accounting, finance, business management, or similar emphasis preferred
• Six or more years of audit, IT or other related experience to include project management experience
• Understanding of standard IT audit principles, including IT general controls
• Knowledge of IT systems and system security audit principles and techniques (e.g., server and database configuration reviews)

Preferred Qualifications:

• Professional certification (e.g., CISA, CPA, CIA, CFE) and/or an advanced degree, with a CISA particularly desired
• Experience with enterprise resource planning (ERP) systems' (e.g., PeopleSoft) financial, human resource, and student components
• Advanced data analytic skills including experience with data analytics and visualization tools and techniques such as SQL and Tableau to query, analyze and present data

About the Department

The University of Minnesota's Office of Internal Audit (OIA) is known both within the University and throughout the internal audit profession as an industry leader. The mission of OIA is to enhance and protect organizational value by providing stakeholders with risk-based and objective assurance, advice, and insight. We accomplish this through a combination of audit assurance engagements, consultation with senior leaders, and investigative work. This work is conducted in a systematic and disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes.

While based primarily on the Twin Cities campus, OIA has audit responsibility for all aspects of the University system's operations. This includes academic support functions, sponsored research, large-scale business operations, academic health care, intercollegiate athletics, municipal/utility operations, and information technology and security.

Benefits

Working at the University

At the University of Minnesota, you'll find a flexible work environment and supportive colleagues who are interested in lifelong learning. We prioritize work-life balance, allowing you to invest in the future of your career and in your life outside of work.

The University also offers a comprehensive benefits package that includes:

• Competitive wages, paid holidays, and generous time off
• Continuous learning opportunities through professional training and degree-seeking programs supported by the Regents Scholarship
• Low-cost medical, dental, and pharmacy plans
• Healthcare and dependent care flexible spending accounts
• University HSA contributions
• Disability and employer-paid life insurance
• Employee wellbeing program
• Excellent retirement plans with employer contribution
• Public Service Loan Forgiveness (PSLF) opportunity
• Financial counseling services
• Employee Assistance Program with eight sessions of counseling at no cost
• Employee Transit Pass with free or reduced rates in the Twin Cities metro area

Please visit the Office of Human Resources website for more information regarding benefits.

How To Apply

Applications must be submitted online. To be considered for this position, please click the Apply button and follow the instructions. You will be given the opportunity to complete an online application for the position and attach a cover letter and resume.

Additional documents may be attached after application by accessing your "My Job Applications" page and uploading documents in the "My Cover Letters and Attachments" section.

To request an accommodation during the application process, please e-mail or call

Diversity

The University recognizes and values the importance of diversity and inclusion in enriching the employment experience of its employees and in supporting the academic mission. The University is committed to attracting and retaining employees with varying identities and backgrounds.

The University of Minnesota provides equal access to and opportunity in its programs, facilities, and employment without regard to race, color, creed, religion, national origin, gender, age, marital status, disability, public assistance status, veteran status, sexual orientation, gender identity, or gender expression. To learn more about diversity at the U:

Employment Requirements

Any offer of employment is contingent upon the successful completion of a background check. Our presumption is that prospective employees are eligible to work here. Criminal convictions do not automatically disqualify finalists from employment.

About the U of M

The University of Minnesota, Twin Cities (UMTC)

The University of Minnesota, Twin Cities (UMTC), is among the largest public research universities in the country, offering undergraduate, graduate, and professional students a multitude of opportunities for study and research. Located at the heart of one of the nation's most vibrant, diverse metropolitan communities, students on the campuses in Minneapolis and St. Paul benefit from extensive partnerships with world-renowned health centers, international corporations, government agencies, and arts, nonprofit, and public service organizations.

At the University of Minnesota, we are proud to be recognized by the Star Tribune as a Top Workplace for 2021, as well as by Forbes as Best Employers for Women and one of America's Best Employers (2015, 2018, 2019, 2023), Best Employer for Diversity (2019, 2020), Best Employer for New Grads (2018, 2019), and Best Employer by State (2019,