Auditor (Information Systems) - Technology Operations Directorate

The United States Postal Service Office of Inspector General (USPS OIG) is seeking a qualified applicant to fill our Auditor (Information Systems) position in our Office of Audit's Technology Operations Directorate , located in: Arlington, VA About Our Directorate: The Technology Operations directorate conducts various types of audits and evaluations of the Postal Service's cybersecurity and technology processes, tools, and operations. The directorate oversees one of the world's largest technology infrastructures, which includes five national deployment and solution centers, 32,000 network locations, 20,000 servers, and more than 930 applications operating on more than 180,000 devices. The directorate helps to reduce the risk of fraud, inappropriate disclosure of sensitive data, and disruption of critical postal operations and services by assessing whether USPS information resources provide the highest level of security, reliability, and value expected by USPS customers. The directorate also provides oversight of the Postal Service's responsibility to safeguard employees, customers, critical infrastructure, and information systems against cyberthreats. About the Position: As an Auditor (Info Sys), you will serve as a full-performance senior member of an audit team conducting systematic reviews and audits of Postal Service information systems and technology including assessments of security and vulnerability, adequacy of internal controls; compliance with laws, regulations, policies, and/or contracts; and detection of fraud, waste, and abuse. You will apply a wide range of auditing and information technology concepts, laws, policies, practices, analytical, and diagnostic methods and techniques to address substantive technical issues or problems characterized by complex, controversial, and/or sensitive matters that contain several inter-related issues. You will have relevant experience in: Performing all functions of an audit, individually and as a member of an audit team, with limited oversight in accordance with OIG policies and procedures and Generally Accepted Government Auditing Standards. Assessing such matters as general, application, and security controls; data integrity; systems life cycles; acquisitions; and information technology management. Planning audits by considering organization objectives, structure, policies, processes, internal controls, and external regulations; identifying risk areas; preparing audit scope and objectives. Developing individual audit programs and plans that provide a clear path for developing convincing findings and actionable recommendations, including functional responsibilities; specific project assignments; audit objectives and requirements; advanced field work knowledge, skills and abilities; references; and special instructions covering contingencies. Leading data collection efforts, ensuring that evidence collected is reliable, sufficient, relevant, and properly documented in the project work papers. Selecting and applying appropriate information systems software, tools and testing methods to collect, arrange, process, analyze, and present data; develop conclusions; and make recommendations. Reviewing and interpreting complex systems data and reports; policies; standard operating procedures, and contracts to determine validity and compliance with procedures, internal directives, and regulatory requirements. Performing tests and evaluations, obtaining samples, and retrieving and analyzing computer-processed information. Using critical thinking, data analytics, and applied logic to discern meaning of and interpret data, identify risks, evaluate strengths and weaknesses of alternative solutions, develop novel approaches to problems, and reach insightful conclusions. Developing well-supported findings and appropriate recommendations that are cost-effective and actionable. Producing audit documentation such as internal review reports, management agreements, follow-up assessment reports, findings, corrective and preventive action plans, internal reviews, scopes of work and process flow charts to effectively communicate to internal and external stakeholders. Drafting audit reports and other documents that are clear, convincing, accurate, technically thorough, and appropriately targeted to the OIG's customers' needs. Performing lead duties as assigned, coordinating the activities of an audit team or leading sections of the audit including developing project budget, tracking staff hours, establishing and monitoring milestones, and mentoring junior staff. Representing the audit team at meetings with OIG and USPS management. Making recommendations to Office of Audit management concerning improvements to audit policies and procedures. Maintaining liaison with other offices, agencies and other appropriate organizations as needed. Conducting follow-up reviews of management actions taken to correct identified deficiencies. You must meet all the minimum qualifications listed below. Professional Experience Requirement: Two to four (2-4) years of professional, full-time experience conducting program and/or performance technical audits or evaluations in accordance with Generally Accepted Government Auditing Standards at an Office of Inspector General or similar audit organization to determine the efficiency and effectiveness of programs, functions, and operations; OR Two to four (2-4) years of professional, full-time experience in evaluating the efficiency and effectiveness of programs, functions, and operations, or related responsibilities for managing and maintaining system security postures. (your resume must reflect where, when, and how you gained this experience) Education Requirement: Degree in auditing or in a related field (see below for related field degree list) such as computer science, information technology, cybersecurity, or information assurance (must submit transcripts from an accredited college or university.) OR A combination of education and experience - at least four (4) years of experience in Performance Auditing, or an equivalent combination of performance auditing experience, college-level education, and training that provided professional auditing knowledge. The applicant's background must also include one of the following: Technical certificate such as a Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM); OR Completion of the requirements for a degree that included substantial course work in auditing or accounting, e.g., 15 semester hours (must submit transcripts from an accredited college or university.) Evaluation Factors | How you will be evaluated: Mastery of a professional knowledge of theories, practices, methods, and techniques of information systems auditing; and knowledge of organizational or program practices, policies, and functions sufficient to independently plan and conduct a variety of assignments or investigations and to develop or modify methods and techniques to resolve a variety of problems. Skill in analyzing various information systems related problems and in developing findings, recommendations, and technical solutions for emerging technologies. Ability to evaluate computer security associated with various information technology environments, operating systems, hardware, software components, systems, and/or subsystems. Ability to apply advanced technology as required to conduct tests and evaluations, obtain samples, retrieve and analyze computer-processed information. Ability to write communications that convey concise and comprehensive information on matters of a complex nature which are appropriate for the targeted audience and require minimal editing. Ability to communicate verbally and deliver presentations to convey information and issues of a complex and technical nature, incorporating information obtained through research in a manner understandable to a non-technical audience. #J-18808-Ljbffr USPS OIG