Risk Assessment Internal Auditor

The Department of State Police (the Department) is seeking a Risk Assessment Internal Auditor who will work as a member of the Division of Administrative Services (DAS) Risk Management Unit to review business processes for efficiency, effectiveness, risk exposure, and adequacy of risk management safeguards.

Duties of this role include but are not limited to:

• Perform operational and risk-based internal audits from planning through completion, under the direction of the Director of Risk Management, to evaluate the effectiveness of internal controls, risk mitigation strategies, and risk management processes and assess compliance with applicable policies, procedures, and practices.

• Support the Department’s internal audit plan by performing audit planning, research and analysis, testing, documentation, reporting, follow-up, and validation of remediated audit findings.

•  Identify control weaknesses, risk exposures, and opportunities for improvement and assists in developing practical recommendations to mitigate risk and improve financial and operational processes.

•  Support the maintenance and periodic update of the DAS risk assessment, risk management policies, and Department Internal Control Plan.

•  Coordinate and support the annual review and update of DAS policies, procedures, risk assessments, and risk and control documentation.

• Document and evaluate business processes, procedures, and policies to promote consistency, effective risk management, and an appropriate internal control environment.

•  Interview business process owners and work with staff to gather and analyze information, evaluate processes and internal controls, identify potential risks, and assess compliance with applicable policies and procedures.

•  Communicate audit and risk management requirements to process owners and provide information and guidance regarding risk mitigation and internal control practices.

• Assist in developing and applying audit procedures, testing methodologies, and analytical techniques appropriate to the objectives and scope of assigned audits and reviews.

•  Perform periodic reviews of DAS reports and related information to identify errors, inconsistencies, potential risks, and control deficiencies.

•  Perform assigned ad hoc audits, data analyses, special reviews, and other projects requested by executive management or the Director of Risk Management.

•  Prepare audit workpapers, findings, reports, and presentations for review by the Director of Risk Management and discuss identified issues, associated risks, and potential corrective actions.

•  Track corrective actions and performs follow-up testing to validate remediation of audit findings and determine whether identified risks and control weaknesses have been appropriately addressed.

• Coordinate with external auditors, the Office of the State Auditor, third-party entities, and other state agencies to facilitate requests for information and support audit and review activities, under the direction of the Director of Risk Management.

•  Perform special projects and other internal audit, internal control, and risk analysis responsibilities as assigned.

 Preferred skills include:

• Excellent written and verbal communication and interpersonal skills, including professional writing and editing, and the ability to clearly communicate complex or technical information to a variety of audiences.

• Strong analytical and problem-solving skills, with the ability to analyze data, laws, regulations, policies, procedures, and other information; identify risks and control issues; draw well-supported conclusions; and develop practical recommendations.

• Experience conducting audits, monitoring activities, risk assessments, or internal reviews, including evaluating internal controls, performing audit testing, documenting audit procedures and results, and preparing findings, reports, presentations, and recommendations for corrective action.

• Experience documenting and evaluating standard operating procedures, business processes, policies, internal controls, and risk mitigation practices.

• Knowledge of electronic data processing systems and techniques used for data analysis, data extraction, auditing, monitoring, and reporting, with proficiency in Microsoft Office applications, including Outlook, Word, Access, and Excel.

• Experience generating and analyzing reports from the Commonwealth Information Warehouse (CIW) or similar financial, operational, or reporting systems.

• Ability to work independently and collaboratively, manage multiple priorities, meet established deadlines, exercise sound judgment and discretion when handling confidential or sensitive information, and appropriately escalate significant risks, control deficiencies, or other concerns to management.