2. Monitor the progress and management of corporate IT initiatives or projects, as assigned. Advise and consult on risk management and controls for new systems and/or processes associated with the assigned corporate projects, following a system development life cycle methodology, as appropriate. Work collaboratively with the project team to identify project and post-implementation risk/issues and develop recommendations for corrective actions. Follow-up with project management to resolve identified problems, including internal control testing, coding and unit testing, system and acceptance testing, conversion testing, implementation testing, post-implementation review, as appropriate. Write memoranda and status reports to management communicating the risks and recommended corrective action plans identified in these monitoring and advisory activities.
3. Through audit and advisory assignments, identify and maintain a repository of best practices and benchmarking information related to CareFirst’s IT business operations. Maintain a repository of IT audit issues and relative corrective action plan and update management on outstanding issues and potential risks on a scheduled basis.
6. Perform control self-assessment, process improvement reviews, and problem resolution facilitation for management of business areas, as assigned by the Audit Manager. Promote these services within the organization.
Skills/Abilities: Incumbent must fully understand auditing techniques, concepts and principles, and how they are applied to individual audits or a strong Project management background. Must be knowledgeable of internal controls, and system development life cycle (SDLC) methodologies, complex integrated computer systems, applications and environments. Must be proficient with PC applications and have experience in and knowledge of IT audit related issues concerning operating systems (UNIX, Windows NT and Novell), computer networking, firewalls, penetration tests, access control software (RACF, Control-SA and Ringneck) and database management systems (Sybase, Oracle and SQL Server). Experience with Audit Command Language (ACL) performed.
Incumbent much have excellent project management skills including workflow balancing, activity scheduling, problem solving facilitation, the ability to prioritize and manage multiple complex tasks and demonstrated experience in meeting deadlines. Must be highly motivated, organized, committed to professional development, with demonstrated progression and achievement. Ability to work independently with minimal supervision is required. Must be able to work effectively in a team-oriented atmosphere. Incumbent must have highly developed oral and written communication skills to effectively communicate complex auditing information and business risks to a non-technical audience. Also must have effective public speaking skills and be able to prepare and deliver presentations. Additional qualities are good analytical skills and judgment and strong decision-making ability.