Job Description

The Assistant Director of Information Technology (IT) Audit reports to the Director of Audits and Investigations and provides leadership in the development of IT audit methodologies, Internal Audit (IA) strategies, and risk assessment processes. The position is responsible for evaluating governance, risk management, cybersecurity, compliance, and internal control processes across the University and affiliated entities.

The Assistant Director serves as Project Manager for audit and advisory engagements, provides technical leadership and mentorship to audit staff, and collaborates with executive leadership, audit clients, IT, compliance personnel, and external stakeholders. The position is responsible for ensuring audit activities are conducted in accordance with the Institute of Internal Auditors Global Internal Audit Standards (GIAS) and relevant control frameworks, while promoting continuous improvement through the use of emerging technologies, data analytics, and innovative audit techniques. The Assistant Director participates in both internal and external efforts to promote the audit profession.

Responsibilities

• Develops and implements technology-driven audit strategies, methodologies, and risk assessments. Assists in the development and execution of the annual risk-based audit plan through assessment of technology, cybersecurity, compliance, operational, and emerging risks.
• Ensures IA team members are provided with ongoing in-house training on IT-related risks and controls, including emerging risks. Assesses and makes recommendations related to the implementation of advanced audit tools and emerging technologies (artificial intelligence (AI), data analytics, etc.) to increase the efficiency and effectiveness of the IA team.
• Serves as Project Manager for IT audit and advisory engagements from planning through reporting and follow-up. Ensure engagements are conducted in accordance with GIAS and applicable frameworks, including but not limited to, National Institute of Standards and Technology (NIST), Control Objectives for Information and Related Technologies (COBIT), International Organization for Standardization (ISO), and related standards.
• Evaluates governance, cybersecurity, privacy, business continuity, disaster recovery, cloud computing, and technology control environments.
• Supervises, mentors, and develops audit staff through work assignments, coaching, performance evaluations, professional development planning, and recruitment activities.
• Utilizes data analytics, automation, artificial intelligence, and other technology-enabled audit techniques to improve effectiveness and efficiency.
• Communicates audit results and emerging risks to management and executive leadership and facilitates development of corrective action plans. Monitors and assesses the implementation of management action plans
• Represents Internal Audit on university committees, working groups, and governance initiatives, and promotes audit initiatives internally and externally.