Minimum Education. Bachelor's degree or equivalent experience. Minimum Experience 5 Summary. Under the Office of Inspector General's (OIG) team approach to auditing, the full performance Information Technology (IT) Auditor participates on and, in some cases, leads IT audits, inspections, and evaluations of the Board's mainframe and distributed computer systems. These projects assess and promote economy, efficiency, and effectiveness and help prevent and detect fraud, waste and abuse. The IT audi... more details
Minimum EducationBachelor's degree or equivalent experience
Minimum Experience5
SummaryUnder the Office of Inspector General's (OIG) team approach to auditing, the full performance Information Technology (IT) Auditor participates on and, in some cases, leads IT audits, inspections, and evaluations of the Board's mainframe and distributed computer systems. These projects assess and promote economy, efficiency, and effectiveness and help prevent and detect fraud, waste and abuse. The IT auditor also leads follow-up reviews of previous audits, inspections, and evaluations to determine if recommended actions were implemented and participates in the Systems Development Life Cycle of major systems under development to identify internal control, efficiency, effectiveness, and project management issues. May also assist in non-IT audits, inspections, and evaluations of Board programs and activities, and OIG investigations as appropriate.
Duties and Responsibilities- Participates on a team in planning IT audits, inspections, and evaluations, or major segments thereof, in accordance with generally accepted government auditing standards (GAGAS) or other applicable standards. Obtains comprehensive information about the automated systems and the underlying business requirements that the systems support to develop the appropriate objectives, scope, and methodology. Leads the project planning effort for audits, inspections, and evaluations of moderate complexity. Project objectives will be based upon known deficiencies, perceived risks and vulnerabilities, or areas of interest to the Board or the Congress. Project scope and methodology must be designed to meet the objectives of the specific audit, inspection, and evaluation. New IT audit approaches may also be devised as required to meet project objectives and changes in technological environment. in accordance with generally accepted government auditing standards (GAGAS) or other applicable standards projects,
- In preparation for reviewing computer systems or IT programs and operations, participates on or may lead a team in developing and implementing a scoping plan to obtain an understanding of the area under review, the adequacy of internal controls and audit trails, and areas warranting additional coverage. Establishes objectives, scope, and methodology based on results of the scoping effort.
- Participates on a project team that conducts IT audits, inspections, and evaluations of Board computer systems and applications by gathering, assembling, consolidating and analyzing data and information and by developing appropriate findings, conclusions, and recommendations. Applies a wide range of IT audit techniques and methodologies depending upon the circumstances encountered. Assists senior IT auditors by completing major segments of large or more complex projects. Conducts and leads IT audits, inspections, and evaluations of more moderate scope or complexity. Plans and conducts follow-up reviews to determine if recommendations have been implemented and if additional corrective action is needed.
- Conducts evaluations of IT computer systems under development by assessing the efficiency and effectiveness of the system development methodology being used and the quality of project management. Also, assesses the technical and economic feasibility of the development effort; the adequacy of requirements development; and the appropriateness of testing, internal controls, audit trails, and quality assurance methods.
- Reviews the general controls in data processing environments including data centers, telecommunication operations, local area networks and individual personal computer operations. Determines whether controls have been designed in accordance with guidelines, standards, management direction and legal requirements. Determines whether controls are operating effectively in providing accurate, reliable and secure information.
- Logically develops and organizes working papers that contain evidence and results of analytical work performed to support findings, conclusions, and recommendations, consistent with applicable guidance. Conducts and documents audit work in accordance with generally accepted government auditing standards (GAGAS).
- Prepares written and oral reports and other correspondence for presentation to Board Members and Board senior staff conveying results of audits, inspections, and evaluations using appropriate skills, formats, and technology.
- Represents the OIG at professional meetings and conferences in the audit community, the Federal Reserve System, the President’s Council on Integrity and Efficiency, the Executive Council on Integrity and Efficiency, and interagency groups.
EDUCATION/EXPERIENCE REQUIREMENTS
Bachelor’s degree from an accredited college or university in IT, accounting, finance, economics, business, or related field, or equivalent experience, plus at least five years of progressive specialized experience in the reviewing of IT programs/systems, obtained in an OIG or similar position. At the FR-27 grade, at least six years of progressive specialized experience that demonstrates managerial or leadership skills. Additional professional experience in a financial, managerial, or consulting position is preferred.
Knowledge of principles, theories, practices, and techniques of information systems management, computer science, management, and auditing/inspecting/evaluating to independently plan and conduct reviews of the Board’s or the CFPB’s operational programs and activities. Knowledge of information technology and its application to Board and CFPB programs and operations and reviewing such programs and operations. Knowledge and skill to evaluate compliance with applicable laws and regulations, the adequacy of internal controls, and the operational efficiency and effectiveness of systems and activities. Strong knowledge/understanding of automated data processing procedures and controls. Ability to assist in non-IT reviews. High degree of proficiency in oral and written communication skills. Excellent interpersonal skills and ability to work well in a team environment. At the FR-27 grade, ability to integrate complex analysis of policies, programs, and operations. Ability to develop new approaches for the study and evaluation of programs.
Ability to obtain a Secret, or at the FR-27 grade Top Secret, clearance, and is subject to the Board’s drug testing program. Prefer certification in one or more of the following: Certified Information Systems Auditor, Certified Information System Security Professional, Certified Public Accountant, Certified Internal Auditor, and/or Certified Fraud Examiner.
What We Do
FISMA
IT Audit FAQs
REMARKS
- Prior experience conducting IT and cybersecurity-related audits (e.g., FISMA audits, security control reviews, etc.) within a federal IT environment is strongly preferred.
- Knowledge of federal IT initiatives, including zero trust architecture, cloud computing, supply chain risk management, and SDLC is preferred.
- Knowledge of risks and related audit considerations with financial payment systems modernization is a plus.
- Knowledge of data analytics, to include data literacy and artificial intelligence/large language models, and other tools to test IT controls is a plus.
- Past performance evaluations may be requested.
- The OIG’s telework policy requires employees to be physically present in the office a minimum of 4 days per month. Employees may be expected to be physically present in the office more than 4 days per month, as required by business needs.
