Information Systems Auditor (Auditor IV)

Plans and conducts information systems audit assignments and other projects. Other projects will include integrated operational audits, management advisory services and investigations. This auditor will perform analysis, design, and conduct tests, assess procedures, examine compliance with policies, determine the reliability and effectiveness of internal control systems and interact with all levels of county personnel.

Additionally, serves as a technical consultant and provide advice on internal controls for current and planned it systems and applications. This involves evaluating system integrity, data protection, computer security, audit trails, systems development methodology, transaction flow, and separation of duties.

The position also has a responsibility for providing the Internal Audit Office staff with support on help desk issues, learning new County application tools, performing system administrator duties for audit management software and is appointed as the office Information Security Coordinator.

The successful candidate must have the ability to build strong working relationships, stay up to date on new technologies affecting the County, perform data analytics, analyze risk and develop measures to mitigate it, assess the reliability and effectiveness of controls, and effectively present results concisely and descriptively through verbally and through written reports containing information graphics to all levels of management.

This position is eligible for scheduled telework as permissible by the county telework policy which allows for a hybrid environment of in office and telework days.

Salary: The selected applicant's starting salary will be in the minimum to midpoint range ($81,382.29 - $108,509.86) of the advertised compensation range. Note: Promotional rules apply for current Fairfax County Government and Fairfax County Public Schools employees.

(The illustrative duties listed in this specification are representative of the class but are not an all inclusive list. A complete list of position duties and unique physical requirements can be found in the position description.)

• Acts as consultant in systems planning, design, and implementation ensuring effective use of control techniques and efficient use of resources;
• Plans the scope of an audit, performs risk assessment, and develops a risk-based fieldwork audit program;
• Evaluates procedures and preparations for system backup and reconstruction, and business continuity;
• Examines and analyzes automated files, records, and other documentation of existing systems to determine accuracy and compliance with County policies, procedures, and standards;
• Tests transactions and reviews system specifications to ensure that controls are adequate and operational;
• Advises Internal Audit staff in uses and techniques of the computer as an audit tool;
• Presents oral and written reports to management, communicating findings and recommendations;
• Plans and conducts all phases of computer system audits (of both hardware and software), including security, data integrity, and industry standards;
• Analyzes complex department operations for efficiency, effectiveness, and compliance with policies and procedures;
• Conducts investigative audits to examine allegations of fraud, waste, and abuse;
• Evaluates department responses to audit reports;
• Performs assigned follow-up audits of department action plans;
• Performs quality control reviews of other staff members' workpapers.
• Directs, monitors, and supervises assigned audits and projects;
• Counsels and guides lower level auditors on assigned projects;

(The knowledge, skills and abilities listed in this specification are representative of the class but are not an all inclusive list.)

• Thorough knowledge of computer data and system security;
• Thorough knowledge of the design and testing of computer applications controls;
• Thorough knowledge of client server, Windows, and network controls;
• Thorough knowledge of information systems general controls;
• Thorough knowledge of data extraction and analysis software tools;
• Thorough knowledge of internal auditing standards, procedures, techniques, and internal control;
• Thorough knowledge of governmental accounting principles, methods, and practices;
• Thorough knowledge of management principles, methods, and practices;
• Ability to effectively use personal computers and common software, i.e., word processing, spreadsheet, and flowcharting;
• Ability to establish and maintain effective working relationships;
• Ability to problem solve and analyze complex County operations;
• Ability to plan work, develop audit methodology, and complete assignments within established deadlines;
• Ability to work independently within established policies, procedures, and guidelines;
• Ability to communicate clearly and concisely both orally and in writing with all levels, including senior management.

MINIMUM QUALIFICATIONS:
Any combination of education, experience, and training equivalent to the following:
(Click on the aforementioned link to learn how Fairfax County interprets equivalencies for "Any combination, experience, and training equivalent to")
Graduation from an accredited four-year college or university with a bachelor's degree in business administration, public administration, information systems, or related a field with major course work in accounting, auditing, finance, information systems and/or computer science; plus four years of professional experience in information systems or auditing.

CERTIFICATES AND LICENSES REQUIRED:
Must possess any one of the following certifications: Certified Information Systems Auditor (CISA); Certified Information Security Manager (CISM); Certified in Risk and Information Systems Control (CRISC); Certified Information Systems Security Professional (CISSP); Certified in Governance, Risk and Compliance (CGRC); Certified Cloud Security Profession (CCSP) Microsoft Certified; Power BI Data Analyst Associate; or CompTIA Data Analytics Plus Certification.

NECESSARY SPECIAL REQUIREMENTS:
The appointee to this position will be required to complete a criminal background check to the satisfaction of the employer.

PREFERRED QUALIFICATIONS:

• Government auditing experience.
• Professional experience performing operational, financial or program, internal controls reviews and/or internal audits.
• Strong communication skills and experience writing official correspondence and memoranda, preparing presentations, preparing official written reports, and leading and/or facilitating meetings.
• Strong computer skills including high proficiency with Electronic Workpapers/Automated workflow systems, Microsoft Office Suite applications including Excel, Word, Outlook, SharePoint, and MS Teams.
• Experience in performing data analytics.
• Ability to work effectively with minimal supervision and prioritize multiple tasks.
• Ability to analyze complex processes and to determine the efficiency and effectiveness of the process and related control.