Information Systems Auditor

Under the direction of the Systems Development and Project Management Office Director, within the NYSOH Bureau, the incumbent will be responsible for managing and directing vendor oversight and system auditing activities that include quality assurance, project and change request monitoring, reporting and data analysis, and solution design reviews. The Information Systems Auditor 2 is a key position in support of the oversight and planning for the expanding DOS system capabilities and operations.

The ISA2 will be responsible for the planning, review, QA, and audit of multiple initiatives that must interoperate and meet strict timelines. Responsibilities will focus on Testing and Release Management processes and will include vendor oversight and reporting on the DOS System Development Lifecycle (SDLC) planning and initiatives, as well as requirements and process design reviews for end-to-end technology solutions.

Experience with auditing systems for quality assurance and accuracy is required, including ITIL and SDLC processes, executing a risk‑based audit strategy, planning audits to determine if the system is defective, not operating optimally, protected, and provides value to New York State and its consumers. Participation and oversight include solution platform design review, internal and external interface specification review, consulting regularly with contractors and Quality Assurance (QA) staff, and working closely with vendor solution and technical teams to ensure alignment with Department planning and support.

Responsibilities require proficiency with tools and associated processes including Rational Team Concert (RTC) and SharePoint. Excellent management and leadership skills, broad and deep understanding of Department processes, experience using requirements and design tools, as well as industry standard processes and frameworks is required.

• IT auditing experience must have been gained in any one or combination of the following: an information system or audit professional with responsibility for designing, developing, and evaluating mainframe and server‑based audit systems.
• IT auditing experience must have been gained in any one or combination of the following: an information system or audit professional with responsibility for designing and programming tests to perform audits of physical and logical access controls of mainframe and server‑based systems.
• IT auditing experience must have been gained in any one or combination of the following: an information system or audit professional with responsibility for data extraction, manipulation and analysis using information from diverse sources, including preparation and presentation of written reports of findings suitable for a non‑technical audience.
• IT auditing experience must have been gained in any one or combination of the following: an information system or audit professional with responsibility for supporting an audit group, including developing and maintaining audit systems and identifying and providing data in support of audit activity.

Five (5) years professional experience in Information Technology;
Three (3) years in project management oversight responsibilities (e.g., planning, design, development, implementation, and operation of large‑scale Information Technology project);
Three (3) years’ experience in a health‑related information technology program;
Demonstrated experience extracting, transforming, analyzing and reporting on health information system data from multiple sources;
Demonstrated experience supporting audit activities, including identifying and providing data in support of State and Federal audit;
Demonstrated strong analytical, organizational and problem‑solving abilities; and Demonstrated ability to implement a large‑scale IT system on‑time and on‑budget.

The NYSOH System is a key component of New York’s Medicaid Enterprise system portfolio, and provides critical support for eligibility and enrollment policy and operations for Medicaid, Child Health Plus (CHP), the Essential Plan (EP), and Qualified Health Plans (QHPs), as well as…