DivIHN Integration

Execute audit procedures, including documentation reviews, interviews, and testing, to evaluate the adequacy of internal controls over service providers.. Analyze procurement processes, policies, and procedures to identify areas of strength and weakness specific to internal controls over service providers.. Assess the effectiveness of internal controls related to procurement activities, including vendor selection, any service providers, and related contract management processes.. CISA certification is a MUST. Minimum of 6 years of experience in auditing.. Successful completion of a Illinois State Police Criminal Justice Information Services (CJIS) background check will be required,

information systems auditor

Description:Overview: We are seeking a highly skilled, Senior Information Systems Auditor with a Certified Information Systems Auditor (CISA) certification to establish a control process and related procedures to effectively coordinate with ISP management, understand ISP procurements and related contract provisions, and conduct required reviews of internal controls over ISP service providers through examination and analysis of a System and Organization Controls (SOC) Report or alternative procedures. The ideal candidate will possess a strong understanding of procurement operations and regulations, coupled with extensive experience in reviewing SOC reports, complementary user entity controls, and alternative internal control procedures if a SOC report is unavailable. This role requires meticulous attention to detail, exceptional analytical skills, and the ability to effectively communicate expected controls over service providers, as well as any applicable process improvement or findings and recommendations to stakeholders. Key Responsibilities: Develop comprehensive audit plans tailored to assess the effectiveness and compliance of procurement processes. Execute audit procedures, including documentation reviews, interviews, and testing, to evaluate the adequacy of internal controls over service providers. Analyze procurement processes, policies, and procedures to identify areas of strength and weakness specific to internal controls over service providers. Assess the effectiveness of internal controls related to procurement activities, including vendor selection, any service providers, and related contract management processes. Evaluate/review SOC reports provided by third-party service providers to assess the control environment related to the procured service and related controls. Identify and evaluate control deficiencies or gaps highlighted in SOC reports and determine the impact on the organization's procurement processes and operations through use of an established SOC Report review checklist. Prepare clear and concise audit reports documenting findings, observations, and recommendations for improvement. Communicate audit results and recommendations to management and relevant stakeholders, facilitating discussions on remediation efforts and process enhancements. Qualifications: Bachelor’s degree in information systems, Accounting, Finance, or a related field OR equivalent experience. CISA certification is a MUST. Minimum of 6 years of experience in auditing. In-depth knowledge of procurement regulations, standards (e.g., ISO 27001, NIST), and industry frameworks (e.g., ITIL, COBIT). Proven experience in reviewing SOC reports and assessing controls related to procurement and operations within service organizations. Excellent communication and interpersonal skills, with the ability to effectively collaborate with cross-functional teams and communicate proper service provider controls and findings to various audiences. Successful completion of a Illinois State Police Criminal Justice Information Services (CJIS) background check will be required,

START NEW SEARCH