Senior IT Audit Manager

Summary of Job Responsibilities

The Senior Information Technology (IT) Audit Manager conducts audits of complex information systems and application development activities at Colorado PERA. Responsible for conducting risk assessments, developing strategic audit plans, and planning and conducting all stages of highly technical audits in accordance with established Division and professional audit standards. Seeks opportunities to add value to relationships and maintain a strong internal client focus, proactively identifying internal control weaknesses and opportunities to improve business processes.

Assists and supports other internal audit staff with the use of specialized audit tools. Maintains professional expertise in the best practices of the internal audit profession and in the technical areas of responsibility.

Our ideal candidate is a professional team player with hands‑on IT and application/software development, and information security audit experience. The ideal candidate is detail‑oriented, pragmatic, risk‑based, and an effective communicator. The ability to work effectively in a deadline‑driven environment is a must. This position allows an IT audit expert the opportunity to plan and execute all aspects of the IT auditing process.

If you are a dynamic, collaborative professional interested in working to fulfill the retirement expectations of our members, this is a great fit. You will use your unique skills to do important and meaningful work that benefits the state of Colorado.

Employees are held accountable for all duties of the job. Individuals must be able to perform these duties with or without reasonable accommodations.

• Completes risk assessments and develops annual IT audit plans for review by the Chief Audit Executive.
• Manages projects and reviews of the IT, Information Security, Product Development, and Application Development areas at PERA to determine and evaluate the efficiency and effectiveness of the internal control environment.
• Evaluates relevant data, business processes, and procedures, compares that information to best practice or industry accepted standards, and identifies value‑added audit recommendations to improve internal controls and/or the efficiency of business processes.
• Ensures that audit objectives are achieved within assigned project timelines and scope, and workpaper documentation conforms to the Institute of Internal Auditors (IIA) for global internal audit standards.
• Communicates audit issues, observations, and recommendations to PERA leadership and external vendors to meet organizational needs.
• Follow up on audit recommendations from internal audit reporting through completion.
• Seeks, evaluates, and appropriately adapts audit tools and leading audit practices to improve Internal Audits risk‑based methodology and processes.
• Manages outsourced/co‑sourced audits executed by vendors including monitoring contract compliance and service providers' performance.
• Collaborates with other internal auditors, external auditors, and compliance professionals to ensure adequate audit coverage, efficient and effective outcomes.
• Provides advisory services to IT, Information Security, and Application Development as needed.
• Prepares Board of Trustees Audit Committee meeting materials related to areas of responsibility and communicates audit recommendations via written reports and occasional oral presentations to the Committee.
• Proactively identifies, evaluates, and communicates risks and internal control issues to appropriate parties.
• Actively participates in training and educational opportunities for ongoing professional development and stays current on relevant industry topics, best practices, and evolving audit techniques to maintain professional certifications.
• May provide direct supervision and professional development support for direct report(s), including oversight of a Senior IT Auditor.
• Performs other duties as assigned

• Bachelor's degree in computer information systems or management information systems is preferred.
• Must possess and maintain an active certification in one of the following: CISA,…