Senior IT Auditor

** Job Description
** As a UW employee, you have a unique opportunity to change lives on our campuses, in our state and around the world. UW employees offer their boundless energy, creative problem-solving skills, and dedication to build stronger minds and a healthier world.

UW faculty and staff also enjoy outstanding benefits, professional growth opportunities and unique resources in an environment noted for diversity, intellectual excitement, artistic pursuits, and natural beauty.

The Senior IT Auditor plans and performs independent, risk based audit, assurance and consulting activities related to IT internal processes, controls, risk management and governance activities within the University of Washington, while adding value and improving IT operations.  Senior IT Auditor is expected to have internal IT audit experience and to demonstrate proficiency in applying independent judgement in performing internal audit work which conforms to professional  addition, the Senior IT Auditor performs computer forensics, data analytics, and provides IT support for Internal Audit, including maintaining our servers, installing software upgrades, performing test of backup/recovery, and updating of security plans and department policies and procedures.

This position will primarily support the completion of IT audits in the healthcare space.

Internal Audit is a primary tool of the Board of Regents to ensure financial, operational and compliance integrity.  Other auditors examine specific functions, activities, or areas of risk, but the scope of Internal Audit encompasses all of these areas.  Current levels of frequent, significant and costly compliance issues in healthcare, higher education, and IT emphasize the importance of the internal audit function.  

The success and reputation of Internal Audit rest with the work performed by the Principal, Senior and Staff Auditors.
** Duties & Responsibilities
**** Audit Examinations**- Independently performs information security and IT operations audits and/or advisory services across a broad range of systems and technologies including but not limited to: information security, vulnerability management, application controls, network infrastructure, databases, operating systems, IT general controls, pre and post system implementation, development operations, cloud software and platforms, disaster recovery, and incident response.

- Prepare IT audit plan for each audit assignment that ensures effective audit coverage based on an assessment of potential risks and exposures.

- Design detailed audit work programs (in many cases customized for the environment), conduct interviews, document and analyze processes/compliance with applicable federal/state laws and University policies, and apply critical thinking to evalute risks and controls and asses the results of audit testing.

- Consistently document relevant facts and information to support the work performed and conclusions drawn so other reviewers can follow the auditor's logic and methodology.

- Develop audit findings, determine root causes, and develop relevant and achievable recommendations based on leading practice, the risk profile of the client and the UW.

- Effectively communicate audit results, both verbally and in writing, so they are persuasive, placed in the appropriate context, and understood by the recipient. Prepare professional audit reports summarizing findings, recommendations, and management responses.

- Perform follow-up reviews to ensure that recommendations are implemented to appropriately address risks identified.

- Conduct audits in accordance with professional and departmental standards.  Complete work on time and within budget with limited instructions, yet know when to seek guidance from supervising manager when circumstances warrant.  May work on audits independently as part of a team project.

- Partner with other auditors to provide guidance and assistance in using computerized audit techniques to extract and analyze data from complex computer systems or in performing evaluations of IT controls.

- Utilize appropriate tools to conduct computer forensics in support of audits or investigations.
** Guidance…