A minimum of ten (10) years of IT auditing experience including proficiency in general accepted IT standards, statements and practices and IT security and control practices.
A minimum of five (5) years of experience leading independent Verification and Validation (IV&V) and Quality Assurance/Quality Control functions in supporting State and Federal government agency projects.
A minimum of five (5) years of experience in Program/Project Management supporting State and Federal government agencies.
Strong understanding of technical and business environments and strong communication (verbal and written) skills and the ability to interact and work with senior leadership.
Duties / Responsibilities
Review the installation and security related controls for MHBE computing platforms, including operating systems, sub-systems, databases and software products used to support the processing environment.
Work with a team of Testing Specialists as they design and execute tests and evaluate results to ensure compliance with MHBE policies.
Prepare and perform audit tests, and evaluate results.
Provide documentation of audits to facilitate efficient and effective reviews
Provide third party reviews, ratings and evaluations of IT vendors.
Research project management practices, results and performance records.
Translate agency attestation requirements and business needs to actionable activities.
Develop and lead the IV&V attestation process in compliance with the policies and procedures.
Conduct independent IT audits and publish the reports, as required.
Develop the policies and procedures for IT audit activities.
Provide technology and planning audit support for governing the agency’s IT operations.
Assist in protection of Personally Identifiable Information (PII) data activities.
Assist IT in implementing any corrective actions resulting from IT audit findings.
Validate existing IT policies and procedures for gaps and corrective actions.
Adhere to all security, change control and MHBE Project Management Office (PMO) policies, processes and methodologies.