Summary

Under indirect supervision, performs detailed evaluation and internal control and audit reviews of computer information systems. Develops and maintains audit software. Consults with administrators, faculty, and staff on computer information systems operational issues.

Duties and Responsibilities

1. Performs general and application control reviews for simple to complex computer information systems.
2. Performs information control reviews to include system development standards, operating procedures, system security, programming controls, communication controls, backup and disaster recovery, and system maintenance.
3. Directs and/or performs reviews of internal control procedures and security for systems under development and/or enhancements to current systems.
4. Maintains and develops computerized audit software.
5. Prepares audit finding memoranda and working papers to ensure that adequate documentation exists to support the completed audit and conclusions.
6. Prepares and presents written and oral reports and other technical information in a pertinent, concise, and accurate manner for distribution to management.
7. Consults with and advises administrators, faculty, and staff on various operational issues related to computerized information systems, and on general business operations as needed.
8. Follows up on audit findings to ensure that management has taken corrective action(s).
9. Coordinates and interacts with external auditors, administrators, faculty, staff and law enforcement officials as appropriate; may be required to testify in court.
10. Assists and trains other audit staff in the use of computerized audit techniques, and in developing methods for review and analysis of computerized information systems.
11. Maintains currency of knowledge with respect to relevant state-of-the-art technology, equipment, and/or systems.
12. Conduct operational, compliance, financial and investigative audits, as assigned.
13. Administer departmental Novell LAN.
14. Performs miscellaneous job-related duties as assigned.

Minimum Job Requirements

• Bachelor's degree in Computer Science or Business related field; at least 3 years of experience directly related to the duties and responsibilities specified. Certification/Licensure Cert Information Systems Auditor (CISA), OR Cert Internal Auditor (CIA), OR Cert Public Account (CPA).
• Completed degree(s) from an accredited institution that are above the minimum education requirement may be substituted for experience on a year for year basis.

Knowledge, Skills and Abilities Required

• Knowledge of current technological developments/trends in area of expertise.
• Knowledge of auditing concepts and principles.
• Ability to evaluate and review a range of mainframe, PC, and distributed production and applications computer systems.
• Ability to gather data, compile information, and prepare reports.
• Ability to perform control reviews on systems development, operation, programming, control, and security procedures and standards.
• Ability to review system backup, disaster recovery and maintenance procedures.
• Ability to communicate with and understand the requirements of professional staff in area of specialty.
• Ability to create, compose, and edit written materials.
• Knowledge of software requirements for the auditing of computing systems and procedures.
• Knowledge of computer systems development and programming.
• Knowledge of general accounting principles.
• Knowledge of university and/or public auditing policies, standards, and procedures.
• Knowledge of federal, state, and local laws, regulations, and standards governing all aspects of the utilization of computer systems.
• Ability to persuade and influence others.

Conditions of Employment

• Must maintain certification status.
• Must be Bondable.

Working Conditions and Physical Effort

• No or very limited physical effort required.
• No or very limited exposure to physical risk.
• Work is normally performed in a typical interior/office work environment.

The University of New Mexico provides all training required by OSHA to ensure employee safety.

Revised Date: 03/20/2017