Information Systems Audit/Control Officer at Dream Mesh

Job brief/Responsibilities

The IS Audit/Control Officer performs detailed evaluation and internal control and audit reviews of computer information systems. Develops and maintains audit software. Consults with administrators, faculty, and staff on computer information systems operational issues.

Job Duties are but not limited to
Responsibilities

• Performs general and application control reviews for simple to complex computer information systems.
• Performs information control reviews to include system development standards, operating procedures, system security, programming controls, communication controls, backup and disaster recovery, and system maintenance.
• Directs and/or performs reviews of internal control procedures and security for systems under development and/or enhancements to current systems.
• Maintains and develops computerized audit software.
• Prepares audit finding memoranda and working papers to ensure that adequate documentation exists to support the completed audit and conclusions.
• Prepares and presents written and oral reports and other technical information in a pertinent, concise, and accurate manner for distribution to management.
• Consults with and advises administrators, management, and staff on various operational issues related to computerized information systems, and on general business operations as needed.
• Follows up on audit findings to ensure that management has taken corrective action(s).
• Assists and trains other audit staff in the use of computerized audit techniques, and in developing methods for review and analysis of computerized information systems.
• Maintains currency of knowledge with respect to relevant state-of-the-art technology, equipment, and/or systems.
• Conduct operational, compliance, financial and investigative audits, as assigned.

Candidate Profile/Requirements

• 3+ years of experience as an IS Control/Audit officer
• Bachelor’s degree in computer science or related field
• Must possess one of the following certifications: CISA, CISSP
• Knowledge of PCI DSS and ISO 27001 scope and requirements
• Knowledge of current technological developments/trends in area of expertise.
• Knowledge of auditing concepts and principles.
• Ability to evaluate and review a range of mainframe, PC, and distributed production and applications computer systems.
• Ability to gather data, compile information, and prepare reports.
• Ability to perform control reviews on systems development, operation, programming, control, and security procedures and standards.
• Ability to review system backup, disaster recovery and maintenance procedures.
• Ability to communicate with and understand the requirements of professional staff in area of specialty.
• Ability to create, compose, and edit written materials.
• Knowledge of software requirements for the auditing of computing systems and procedures.
• Knowledge of computer systems development and programming.