IT Senior Auditor

Teams with Business Process Analyst/Specialist to perform internal audits and assessments of administrative, operational, and budgetary indicators to develop risk mitigation strategies and evaluate the effectiveness of processes, databases, and internal controls such as policies and standard operating procedures. Prepares written audit reports and follows up on the implementation of prior audit comments and recommendations that identify opportunities to increase the effectiveness and efficiency of operations. Audits and analyzes City programs, departments, budgets, and complex processes to identify areas of efficiency, effectiveness, and risk. Evaluates the adequacy of applicable internal controls. Develops and executes audit programs to identify and document areas for improvement. Conducts audit planning and field work. Documents audit steps and working papers. Utilizes specialized data analysis techniques and approaches to analyze agency performance. Identifies Key Performance Indicators, process improvements, core services, and work processes. Establishes metrics, targets, and benchmarks. Evaluates operations, programs, and services. Collects, validates, and analyzes data. Develops and communicates audit findings and develops recommendations in the form of presentations, process maps, and templates, etc. Participates in the review and update of audit programs and computer-assisted reports. Provides support to operating units to identify and improve controls, procedures, and system efficiencies. Provides training and guidance to other team members. May conduct technical training sessions. Continuously expands technical and business knowledge in personal and related disciplines. May participate in the execution of a variety of special investigations and projects with only general instructions. Performs other job-related duties as required.Bachelor’s Degree in Accounting, Economics, Business/Public Administration, or related field from an accredited four-year college or university required.  Two years of experience (may include educational internships in one or more of the following: Performance Auditing and/or Management, Quality Control, Finance, Banking, Business Process Analytics and/or Improvements, and Operations Research and Supply Chain Management) in project management methodologies, process improvement tools (e.g.:  Lean, Six Sigma), or statistics as well as business process mapping, charting software, and organizing Information Technology initiatives required.  (Substitution:  Two years of any equivalent combination of education, training and experience may substitute for each year of college education lacking.)  Post graduate education in relevant fields may substitute for experience on a year-for-year basis.)  Valid State of Ohio Driver’s License required.  Proficiency in MS Word, Excel, and PowerPoint (Microsoft Office Suite) required.  The following are preferred:  Professional performance auditing, analytical, or policy work experience; Professional certifications; A Master’s Degree in Public Administration, Public Policy, or a related field; Advanced data analysis skills; Experience in government performance auditing; And experience utilizing enterprise reporting tools (e.g.:  Crystal reporting, Sequel Server Reporting Services, Analytics Software) to extract and analyze data from information systems).Duties 

•  Execute detailed audits of IT general controls (ITGCs), application controls, cybersecurity controls, and system development processes. 
• Support the conduct of risk assessments to identify vulnerabilities, control gaps, and areas of improvement in IT environments. 
• Review and test control design and operational effectiveness in accordance with established frameworks and compliance requirements (e.g., NIST, CSF). 
• Assist in the planning, scoping, and execution of regulatory compliance audits. 
•  Test IT risks associated with new or updated systems, applications, and infrastructure components. 
• Collaborate with IT and business teams to understand processes, assess control environments, and issue audit findings. 
• Prepare clear, concise reports of audit results and recommendations for management. 
• Track and monitor remediation activities to ensure timely closure of audit issues. 
• Keep up to date on IT audit best practices, industry regulations, and emerging technology risks. 
• Maintain confidentiality of sensitive information and handle audit engagements with a high degree of professionalism. 
• Performs other job-related duties as required. 

Preferred Requirements 

• Professional certifications such as CISA, CIA, CISSP, or related accreditations. 
• Prior experience in IT auditing with a public accounting firm or corporate internal audit department. 
• Knowledge of cybersecurity concepts and tools, vulnerability assessments, and penetration testing basics. 
• Familiarity with city government enterprise resource planning (ERP) systems, IT service management, or system development life cycle (SDLC). 
• Strong interpersonal skills with ability to build collaborative working relationships. 
• Advanced data analysis skills.

The City's guiding principles are as follows: Placing Clevelanders at the Center, Empowering Employees to Do Purposeful Work, Defining Clear and Pragmatic Objectives, Leading with Trust and Transparency, Striving for Equity in All We Do, and Embracing Change. All City employees are responsible for embracing and carrying out these principles in all that they do. 

The City of Cleveland makes available a variety of benefit options depending upon your employment status and any applicable union membership. In general, benefit options include comprehensive medical, dental, vision, prescription medical and life insurance. Specific information regarding benefit eligibility will be discussed and reviewed at the time of hire.