EDP AUDITOR - 65200

Executive Service

Please visit the link below for information about the selection process and its duration

https://www.tn.gov/content/dam/tn/safety/documents/Applicant_Process_Memo_signed.pdf

The EDP Auditor position is an Executive Service position, is housed in the Internal Audit Division, and reports directly to the Director of Internal Audit. The position is eligible for the Alternative Workplace Solutions (AWS) initiative, which allows the applicant to work from home most of the time. The EDP Auditor will be required to attend meetings scheduled by the Director and other team members as well as travel to other state offices during audit engagements.

Who we are and what we do:

The mission of the Department of Safety and Homeland Security (TDOSHS) is to serve, secure, and protect the people of Tennessee.

How to make a difference in this role:

We are looking for individuals who desire to support the mission of the Tennessee Department of Safety and Homeland Security by making meaningful change to the department's Internal Audit function. The individual will play a critical role on the team by assessing IT security risks within the department's operations, software products and third-party agreements.

Job Overview:

Specific duties of the EDP Auditor include the following:

• The EDP Auditor will be responsible for completing systems related testing on our operational audits, which may include access testing, the review of access roles within our software applications, review of information security policies of the division, and physical security concerns at facilities across the state.

The EDP Auditor will also lead stand-alone engagements of a technical nature which may include the following:

• Audits of IT general and application controls within department software products to ensure that all controls in place are operating effectively and efficiently.
• Audits of the department's Business Continuity and Disaster Recovery plans.
• Risk assessments of the department's various software products using an agreed upon framework (e.g. NIST Cybersecurity Framework, SOC 2, COBIT, ISO, etc.)
• Review of third-party providers providing technical services to the department, which may include assessments of their compliance with agreements with TDOSHS as well as risk assessments of the third-party's control environment.
• The EDP Auditor will also act in a consultatory role to the Internal Audit Division as our audit teams work to integrate data analytics and automation into our audit processes. The EDP Auditor may assist the Internal Audit Team with query requests, data analytics, and the development of robotic applications to utilize untapped functionalities within our audit software product.

Key Responsibilities:

• Participation in the department's annual risk assessment
• Review of service organization control (SOC) reports for third-party systems providers
• Technical assistance on systems-related issues noted during internal audit engagements
• Coordination of IT and systems-related projects with the department's liaison in the Strategic Technology Solutions group
• Assessment of Internal Audit function during the annual Business Impact Analysis.
• Special projects as assigned by the Director of Internal Audit.

Minimum Qualifications:

• Bachelor's Degree from an accredited college or university in either computer science or accounting.
• Meaningful work experience in IT auditing, preferably in an internal audit role.
• Willingness to pursue IT-related professional certifications, such as CISA, CIA, IIA Certificate programs in the IT-audit space, etc

Preferred Requirements:

• Master's Degree from an accredited college or university with an emphasis in Accounting/Auditing, Information Systems or Data Analytics
• Professional certification(s): CISA, CIA, CISSP, or CPA (with ISC discipline section)
• Experience reviewing or developing SOC reports
• Proficiency in electronic workpapers such as TeamMate or Diligent/HighBond
• Analytical knowledge of the following: SAS, SQL, Oracle, Edison, EDI communication, Linux operating systems, Identity and Access Management tools, and Visual Basic programming

Key Competencies Required:

• Excellent verbal and written communication skills are critical
• Ability to collaborate and work with other team members to resolve problems and achieve the goals of the Internal Audit Division
• Ability to lead engagements and work independently on IT-related assignments
• Proficient in Microsoft Office Suite: Excel, Word, Outlook, PowerPoint
• Self-starter and detail oriented
• Strong critical thinking, analytical, and problem-solving skills
• Strong multitasking and project management skills

Pursuant to the State of Tennessees Workplace Discrimination and Harassment policy, the State is firmly committed to the principle of fair and equal employment opportunities for its citizens and strives to protect the rights and opportunities of all people to seek, obtain, and hold employment without being subjected to illegal discrimination and harassment in the workplace. It is the States policy to provide an environment free of discrimination and harassment of an individual because of that persons race, color, national origin, age (40 and over), sex, pregnancy, religion, creed, disability, veterans status or any other category protected by state and/or federal civil rights laws.