Apply on Employer Site

City of Colorado Springs · 5 days ago

Information Systems Auditor II

Colorado Springs, CO

Full-time

Onsite

Mid Level

3+ years exp

The City of Colorado Springs is seeking an Information Systems Auditor II to independently plan and conduct audits of IT systems and cybersecurity controls. This role involves evaluating complex systems, ensuring technological risks are managed, and contributing to the city's commitment to accountability and transparency.

GovernmentPublic SafetyTransportation

No H1B

Responsibilities

Plan and perform IT audits and IT audit steps, including risk assessment, audit program development, and fieldwork

Evaluate IT governance, cybersecurity, and internal controls using frameworks such as NIST (National Institute of Standards and Technology), COBIT (Control Objectives for Information Technologies), etc

Conduct interviews, analyze data, and document findings clearly and objectively

Draft audit reports and present findings and recommendations to management

Perform data analysis to identify anomalies, trends, and control gaps using tools such as Excel, Power Query, or Audit Command Language (ACL)

Assess compliance with IT policies, procedures, and regulatory requirements

Support external audits, fraud investigations, and consulting engagements

Participate in internal quality assessments and contribute to process improvements

Qualification

IT auditCybersecurityData analysisIT governanceNIST frameworkCOBIT frameworkProject managementEthical judgmentCommunication skillsCritical thinkingCollaborationConfidentiality

Required

Bachelor's degree from an accredited college or university with major coursework in a related area of study

Three years of full-time, professional experience in a related field

Preferred

Experience in municipal or public sector IT environments

Certifications such as Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Information Systems Security Professional (CISSP), or advanced degree

Experience with cloud security, data analytics, or IT general controls