Information Technology (IT) - Internal Audit Assistant Manager (CS27-023)

Information Technology (IT) - Internal Audit Assistant Manager Salary: $75,000.00 - $95,000.00 Annually Location: Edwardsville, IL Job Type: Full Time Job Number: 01406 Organization: President, Ofc of Opening Date: 07/14/2026 Closing Date: Continuous FLSA: Non-Exempt Description Information Technology (IT) - Internal Audit Assistant Manager (CS27-023) Are you ready to lead IT audits that strengthen technology, manage risk, and help shape a more secure and effective organization? If so, Southern Illinois University Edwardsville (SIUE) invites applications for the position of Information Technology (IT) - Internal Audit Assistant Manager (CS27-023). Why SIUE? Employing more than 2,400 faculty and staff members, SIUE is one of the largest employers in the Metropolitan St. Louis area. A study by SIUE School of Business faculty shows the University has a $1.3 billion annual economic impact on the region. Each year, the University's presence generates almost 9,000 additional jobs and more than $250 million in labor income for the area. Function The overall objective of the position is to assist members of management in the effective discharge of their responsibilities by furnishing them with objective analyses, appraisals, recommendations, and pertinent comments concerning the activities reviewed. An Internal Auditor Assistant Manager is concerned with any phase of the activity wherein he or she can be of service to management. Organizational Relationships The position reports to the Executive Director of Audit. The Executive Director of Audit reports to the President and has a reporting responsibility to the Audit Committee of the Board of Trustees. Internal Audit Assistant Manager, regardless of campus location, works under the direct supervision of the Executive Director of Audit. As delegated by Audit Management, the position may be the in-charge auditor for audits that require the use of more than one auditor. What You Will Do Auditors at this level are advanced internal auditors who conduct complex audits, which include IT. An Internal Audit Assistant Manager typically: Assists in planning and completing the risk-based annual IT audit plan. Supports business management processes improvement in the IT environment by performing audits of the design, installation, operation, maintenance, and systems development reviews. Tests IT general controls and application controls (e.g., access, change management, operations, backup/recovery) and uses data analytics where appropriate to identify anomalies and trends. Validates dashboards and report data by tracing key metrics to source systems, assessing data definitions and transformation logic, and documenting results to support audit conclusions and stakeholder reporting. As part of assigned audits: Reviews third-party assurance (e.g., SOC reports) and vendor security documentation and evaluates whether contractual control requirements are defined and monitored; communicates gaps and recommendations to management for remediation. Evaluates the design and operating effectiveness of cybersecurity governance and key controls (e.g., access management, configuration/change control, incident response readiness, and logging/monitoring) and communicates observations and recommendations to management. Evaluates governance and controls over the use of Artificial Intelligence (AI)-enabled tools and processes (e.g., data protection, access controls, vendor oversight, and monitoring/quality controls) and communicates control gaps and recommendations to management. Assists the department in responsibly leveraging AI-enabled tools (e.g., automation, analytics, and document review) to improve efficiency and consistency across internal audit and compliance workflows, consistent with applicable policies and data protection requirements. Develops and performs consulting services for planned and special projects related to information systems, security, audit, and control on all campuses. Prepares detailed programs for other complex audits and performs risk assessments, subject to review by higher-level auditors. Plans the scope of the audit; drafts detailed audit programs for complex audits, which include specific audit objectives and appropriate audit procedures to accomplish the objectives. Performs audit work as outlined by current state and federal regulations (e.g., the Fiscal Control and Internal Auditing Act). Examines records and interviews workers to ensure recording of transactions and compliance with laws and regulations. Reviews and evaluates complex internal controls and their application in the IT and/or management operations of an institution. Prepares reports of audit results, which may include opinions on the adequacy and effectiveness of complex systems and the efficiency with which activities are carried out, subject to review by higher level auditors. May assist with the management of an overall auditing operation such as assisting with training of new auditors or leading the activities of other auditors, when applicable, documenting policies and procedures for the department. Prepares special reports, performs special projects, and provides management advisory services as necessary to assist in monitoring on-going operations and activities. As assigned, performs University audit liaison responsibilities with third parties, which may include external auditors and auditors from state and federal agencies. Performs and/or supervises audits as assigned by the Director at any University location or other location as required. Ability to manage several projects simultaneously. Performs duties of the lower-level in this series as required. Performs other related duties as assigned. Minimum Acceptable Qualifications Possession of a Bachelor's Degree in information technology (IT), accounting, business administration, finance or a related field Two (2) years (24 months) of work experience performing duties comparable to those listed for the Internal Auditor Associate Preferred Qualifications Minimum of 5 years of experience in IT audit, IT risk management, cybersecurity, technology controls, or a related area in a complex organization (higher education or similarly decentralized environment preferred). Demonstrated knowledge of IT audit methodology, including planning/scoping, walkthroughs, control design and operating effectiveness testing, sampling, and evidence/workpaper standards. Knowledge of common technology control frameworks and standards (e.g., NIST, ISO 27001, COBIT, ITIL) and the ability to apply them to assess control maturity and risk. Possess technical experience in the area of information technology concepts, practices, and procedures; and a demonstrated understanding of complex information systems and infrastructure, with project management methodology skills and experience. Possess a management-oriented perspective. An ability to communicate effectively both orally and in writing, and to present issues for discussion with all levels of University management. The ability to act independently in appraisal and analysis of any University operation. Possession of a Certified Internal Auditor, Certified Information Systems Auditor, or Certified Information Systems Security Professional certificate. Working knowledge of Microsoft Office Suite and data analysis software. Background in an academic, public institution environment. Strong interest in data analytics and knowledge of data analytical software (e.g., ACL, IDEA or other comparable products). Knowledge, Skills, and Abilities Possession of the attributes required for the lower levels of this series Thorough knowledge of federal and state laws, rules, and regulations related to internal auditing Thorough knowledge of the principles, theories, and practices used in internal auditing and/or a knowledge of those used in specialized area(s) Skill in detecting complex violations and non-compliance with laws, regulations, and policies Skill in explaining and interpreting complex irregularities Skill in preparing complete and accurate reports of complex audits Ability to identify, analyze, and classify risks across the University's environment Ability to make practical and feasible recommendations to improve operating inefficiencies and/or operations of the University Supervisory Controls Reports to the Director. Perform assigned duties with only general direction of the Director or project team leader. Expectation is that some independence exists in the performance of required duties. Working Conditions Physical requirements include using computers and other office machines. Southern Illinois University Edwardsville