IT Auditor

IT Auditor

The IT Senior Internal Auditor performs independent audits and assessments of information technology systems, processes, and controls to evaluate effectiveness, compliance, and risk exposure. This role supports business units and IT teams by identifying control gaps, ensuring adherence to regulatory requirements, and providing recommendations to strengthen the organization's IT risk posture. The IT Senior Auditor reports to the Manager of Internal Audit and works closely with internal stakeholders and external auditors to facilitate efficient audit processes and contribute to the organization's overall governance and compliance strategy.

Examples of Duties

Teams with Business Process Analyst/Specialist to perform internal audits and assessments of administrative, operational, and budgetary indicators to develop risk mitigation strategies and evaluate the effectiveness of processes, databases, and internal controls such as policies and standard operating procedures. Prepares written audit reports and follows up on the implementation of prior audit comments and recommendations that identify opportunities to increase the effectiveness and efficiency of operations. Audits and analyzes City programs, departments, budgets, and complex processes to identify areas of efficiency, effectiveness, and risk. Evaluates the adequacy of applicable internal controls. Develops and executes audit programs to identify and document areas for improvement. Conducts audit planning and field work. Documents audit steps and working papers. Utilizes specialized data analysis techniques and approaches to analyze agency performance. Identifies Key Performance Indicators, process improvements, core services, and work processes. Establishes metrics, targets, and benchmarks. Evaluates operations, programs, and services. Collects, validates, and analyzes data. Develops and communicates audit findings and develops recommendations in the form of presentations, process maps, and templates, etc. Participates in the review and update of audit programs and computer-assisted reports. Provides support to operating units to identify and improve controls, procedures, and system efficiencies. Provides training and guidance to other team members. May conduct technical training sessions. Continuously expands technical and business knowledge in personal and related disciplines. May participate in the execution of a variety of special investigations and projects with only general instructions. Performs other job-related duties as required.

Minimum Qualifications

Bachelor's Degree in Accounting, Economics, Business/Public Administration, or related field from an accredited four-year college or university required. Two years of experience (may include educational internships in one or more of the following: Performance Auditing and/or Management, Quality Control, Finance, Banking, Business Process Analytics and/or Improvements, and Operations Research and Supply Chain Management) in project management methodologies, process improvement tools (e.g.: Lean, Six Sigma), or statistics as well as business process mapping, charting software, and organizing Information Technology initiatives required. (Substitution: Two years of any equivalent combination of education, training and experience may substitute for each year of college education lacking.) Post graduate education in relevant fields may substitute for experience on a year-for-year basis. Valid State of Ohio Driver's License required. Proficiency in MS Word, Excel, and PowerPoint (Microsoft Office Suite) required. The following are preferred: Professional performance auditing, analytical, or policy work experience; Professional certifications; A Master's Degree in Public Administration, Public Policy, or a related field; Advanced data analysis skills; Experience in government performance auditing; And experience utilizing enterprise reporting tools (e.g.: Crystal reporting, Sequel Server Reporting Services, Analytics Software) to extract and analyze data from information systems).

Supplemental Information

Duties

• Execute detailed audits of IT general controls (ITGCs), application controls, cybersecurity controls, and system development processes.
• Support the conduct of risk assessments to identify vulnerabilities, control gaps, and areas of improvement in IT environments.
• Review and test control design and operational effectiveness in accordance with established frameworks and compliance requirements (e.g., NIST, CSF).
• Assist in the planning, scoping, and execution of regulatory compliance audits.
• Test IT risks associated with new or updated systems, applications, and infrastructure components.
• Collaborate with IT and business teams to understand processes, assess control environments, and issue audit findings.
• Prepare clear, concise reports of audit results and recommendations for management.
• Track and monitor remediation activities to ensure timely closure of audit issues.
• Keep up to date on IT audit best practices, industry regulations, and emerging technology risks.
• Contribute to continuous improvement initiatives of audit methodologies and tools.
• Maintain confidentiality of sensitive information and handle audit engagements with a high degree of professionalism.
• Performs other job-related duties as required.

• Bachelor's degree in Information Systems, Information Technology, Accounting, Finance, Business, or related analytical discipline with emphasis on IT and cybersecurity.
• Minimum of 3-5 years of experience in IT auditing, IT risk assessment, information security risk assessment, or related IT compliance roles.
• Practical understanding of IT general controls, application controls, and risk management practices.
• Familiarity with audit standards, internal control frameworks (e.g., NIST, CSF), and compliance regulations.
• Experience in performing control testing, risk analysis, and preparing audit documentation.
• Strong analytical and problem-solving skills with attention to detail.
• Good verbal and written communication skills, capable of articulating technical issues to diverse audiences.
• Ability to work effectively independently and as part of a team.
• A valid State of Ohio Driver's License is required

• Professional certifications such as CISA, CIA, CISSP, or related accreditations.
• Prior experience in IT auditing with a public accounting firm or corporate internal audit department.
• Knowledge of cybersecurity concepts and tools, vulnerability assessments, and penetration testing basics.
• Familiarity with city government enterprise resource planning (ERP) systems, IT service management, or system development life cycle (SDLC).
• Strong interpersonal skills with ability to build collaborative working relationships.

The City's guiding principles are as follows: Placing Clevelanders at the Center, Empowering Employees to Do Purposeful Work, Defining Clear and Pragmatic Objectives, Leading with Trust and Transparency, Striving for Equity in All We Do, and Embracing Change. All City employees are responsible for embracing and carrying out these principles in all that they do. The City of Cleveland makes available a variety of benefit options depending upon your employment status and any applicable union membership. In general, benefit options include comprehensive medical, dental, vision, prescription medical and life insurance. Specific information regarding benefit eligibility will be discussed and reviewed at the time of hire.