Details
Posted: 23-Jun-22
Location: Knoxville, Tennessee
Type: Full Time
Required Education: 4 Year Degree
Salary: $58,300-$77,700
Additional Information:
Telecommuting is allowed.
ANNOUNCEMENT: 22-15
IT Auditor, Level II
Opening Date: June 22, 2022
Closing Date: July 22, 2022
Department: IT Audits
Work Location: Knoxville, Tennessee
Salary Range: $58,300-$77,700
Named one of the "Best Places to Work" in the federal government in each of the last
6 years by the Partnership for Public Service, the TVA Office of the Inspector General is a federally-mandated oversight organization charged with preventing and detecting fraud, waste, and abuse and fostering efficient and effective operations within the Tennessee Valley Authority. TVA is the largest government-owned electric utility in the United States, providing electricity to 10 million people in 7 states.
The IT Audits department performs IT audits to detect internal information system control deficiencies and policy noncompliance, evaluate the integrity of data and assets, identify cybersecurity risks, and detect and prevent fraud in TVA IT operations. The Auditor, Level II is an experienced position within this team, and will work with increasing levels of independence to demonstrate familiarity and proficiency with all of the audit processes and tasks required.
Primary Responsibilities
- Demonstrates the ability to conduct routine audits, reviews, and testing of TVA’s IT infrastructure, application controls, and general controls associated with TVA information technology systems. Asks effective questions and leverages the knowledge of senior team members in completing these audits. Learns effective techniques for leading audits.
- Conducts technical research regarding regulatory, compliance, and cybersecurity risk requirements and technical issues related to the federal government, utilities, and TVA. Builds audit criteria based on research.
- Understands and applies OIG strategic goals and behaviors, CIGIE professional standards, governmental auditing standards, and the requirements of the Inspector General Act to the audit process. Demonstrates knowledge of proper audit policies, techniques, and procedures and seeks guidance in applying these to assess TVA IT programs and operations to ensure the highest standards of ethics and integrity.
- Develops an understanding of how to establish project milestones and draft an audit plan. Develops strategies to ensure milestones and review objectives are met. Adjusts priorities based on guidance from senior team members to ensure consistent and effective progress.
- Collects audit data with guidance from more senior team members. Learns to use more advanced data collection methods such as penetration testing and scanning. Analyzes data using Microsoft Excel, Access, and other data analysis tools. Builds knowledge of more advanced data analysis skills such as automated scripting.
- Demonstrates consistency in preparing written work papers. With guidance from a team lead, prepares more complex work papers including testing documentation. Uses knowledge of governmental auditing and department standards to draft work papers, audit findings, and results. Seeks and applies feedback to make improvements.
- Becomes familiar with preparing audit reports. Drafts audit reports as a team lead. Demonstrates consistency in other written work products such as work papers and requests for audit evidence. Seeks guidance and applies feedback for improvements.
- Conducts entrance and exit conferences as a team lead. Assists with conducting entrance and exit conferences for more complex reviews. Independently conducts and facilitates audit interviews.
- Continues to build knowledge of TVA operations and IT processes, and develops a network of related points of contact.
- Participates in audit planning discussions, and offers input on areas of greatest risk within TVA’s IT structure, processes, security, and controls.
- Becomes familiar with quality control review process and documentation standards/requirements in the audit management software.
- Demonstrates the ability to perform the audit team lead role on small, less complex audits with guidance from the audit manager or audit director. When leading a review, completes the supervisory review of team members audit documentation to verify the accuracy of work papers and evidence to support audit findings/conclusions.
- Performs other duties as assigned by management.
Success Profile
Job Specific Competencies
- Communication Skills - Communicates with team members to share actions, audit status, challenges, and priorities. Develops rapport with other team members to effectively collaborate on audit assignments. Drafts effective, concise written reports and presents to internal and external stakeholders.
- Data Analysis - Demonstrates knowledge of PowerBI, MS Excel, and MS Access to analyze data. With assistance, utilizes scripting to automate data analysis.
- Problem Solving - Independently plans and completes routine audits including addressing delays and challenges with guidance from more senior team members. Draws correct conclusions from audit testing and fieldwork.
- Leadership - Collaborates effectively with all team members, and assists others with audit assignments as requested. Develops strong rapport with TVA stakeholders to build relationships and credibility of the OIG.
- Flexibility and Judgement - Makes routine decisions regarding audit activities, and seeks input from senior team members to respond to changes. Remains open to making changes or adjustments to audit approach based on feedback. Develops an understanding of when to use auditor judgement.
- Project Management and Accountability - Applies project management techniques such as planning and prioritization to audit projects. May seek guidance from senior level team members on prioritization. Produces high quality work products, and proactively discusses delays.
- Continuous Improvement - Makes suggestions for improving audit work processes and procedures that will improve efficiency, security, or quality. Identifies relevant training and applies lessons learned.
Knowledge/Skills/Abilities
- Auditing policies and procedures - With guidance, applies governmental auditing standards and OIG policies and procedures to routine IT audits. With guidance, identifies TVA SPP’s that are applicable to the audit process.
- Cybersecurity principles - Understands cybersecurity principles, best practices, policies, procedures, and services and assesses risk factors and advises on basic vulnerability attacks from a variety of sources.
- IT Audit assessments and controls- Applies knowledge of ITGSC’s, FISMA, and NIST as well as other applicable external standards, laws, guidelines, and controls to assigned audit work.
- Vulnerability assessment tools - Has a general understanding of the use of vulnerability assessment tools.
- Network/Server architecture and information security concepts - Demonstrates basic understanding of network and server architectures and vital information security concepts.
- Multi-platform networked computing environments - Has an understanding of controls in multi-platform networked computing environments.
- Use of office tools and software - Demonstrates knowledge of PowerBI, MS Excel, and MS Access to analyze data. With assistance, writes code to build automated sampling scripts.
Qualifications
Education
Bachelor’s degree required in Computer Science, Computer Information Systems/Management Information Systems, Information Technology, Business, Accounting, Finance, or a related field of study.
Experience
Minimum of 2 years of experience conducting Information Technology audits or experience in Information Technology and Security.
Certifications/Licenses
CISA, CIA, or CISSP are desirable, but not required.
Other
- Must pass a background investigation, which includes a credit and criminal history check, and qualify for and maintain a Top Secret Security Clearance.
- Must possess a valid US driver's license, and travel as needed for the position.
- US Citizenship required.
- Must pass a pre-employment drug screening.
Working Conditions/Environment
- This job operates in a normal professional office environment and routinely uses standard office equipment, such as computers, phones, copiers, fax machines, and filing cabinets.
- While performing the duties of this job the employee is regularly required to talk/hear customers, use hands to type/write, and spend prolonged periods sitting at desk, working on a computer.
- TVA OIG is able to offer a flexible work environment that incorporates regular telework. In order to participate in telework, employees need to maintain a remote work environment that meets the standards required in the OIG telework program policy. Frequency of remote work may vary by employee depending on personal preference and operational needs/conditions.
How to Apply
The TVA OIG only accepts applications
e-mailed to oigcareers@tvaoig.gov. You can send an e-mail directly from your
e-mail app; or click the apply button below, and it will create a blank e-mail in your e-mail app with an appropriate subject line.
In your e-mail, please include:
- Job number in the subject line.
- Attached resume and cover letter.
- The source where you found the vacancy announcement.
All supporting documentation related to work authorization or veteran preference must be submitted to the OIG at oigcareers@tvaoig.gov by the closing date of the job announcement. For more information about our office, please see our Web site at http://oig.tva.gov. For more information about TVA, please see their Web site at http://www.tva.gov.