Background

The Office of Audit and Investigations (OAI) will conduct Information Technology Audit of the UNDP’s Enterprise Resources Planning System, ATLAS (the ATLAS Audit) in the summer of 2013. The ATLAS audit will be carried out by a contracted audit firm. OAI is looking for a qualified consultant who can be a focal point between the contracted audit firm and the management to facilitate the ATLAS Audit implementation and to ensure that the required services and outputs are delivered by the audit firm. The consultant will participate in the meetings with the audit firm and the management, provide technical comments or advice representing OAI at the meetings and/or on the e-mails, memos, notes, draft reports of the auditors, and take the lead in actions to ensure that the auditor’s final report will be of satisfactory quality and issued on time.
 
The audit objectives established for the audit firm are to conduct a full review of the following aspect of the ATLAS system: a) system and data alignment to the established UNDP control framework; b) system alignment to key reporting requirements and data lineage; c) system alignment to International Public Sector Accounting Standards (IPSAS) implementation requirements; d) key interface efficiency and controls; e) database security; and f) continuous monitoring. The review will cover all ATLAS modules/processes/practices relevant to UNDP and exclude other agencies that use ATLAS. 
 
To meet the defined audit objectives, the following PeopleSoft modules and components are included in the scope of the audit: a) PeopleSoft Enterprise Finance/SCM/ESA; b) PeopleSoft Enterprise HCM; b) PeopleSoft Enterprise Performance Management; c) PeopleSoft Customer Relationship Management; d) PeopleSoft Portal; e) underlying Oracle 11g Database; and f) Audit and Monitoring. 
 
In addition to the controlling and oversight of the ATLAS audit implementation, the consultant will update the OAI IT audit universe and risk assessment and create a draft 5-year audit plan, taking into consideration the result of the IT audit risk assessment.

Duties and Responsibilities

Under the supervision of the Chief, Headquarters Audit Section, the IT Audit Consultant will carry out the following functions and produce results:
  •  To gain understanding of the broad design, architecture, and key controls of the ATLAS system at UNDP and create a summary analysis;
  •  To liaise with the UNDP management and the audit firm to launch and facilitate the timely implementation of ATLAS audit through arrangement for and participation in meetings, communication, review and analysis of e-mails, notes, memos, draft reports and any other relevant information;
  • To review the progress of the ATLAS audit and ensure that all key auditable areas are addressed by the auditors;
  • To monitor and control the timeline of production of draft ATLAS audit reports and the final audit report;
  • To review the draft audit reports, provide analysis and comments to the OAI management for follow up actions;
  • To share the updated draft reports with the management of the Office of Information Systems and Technology (OIST), help the auditors obtain comments and replies from OIST on the audit recommendations, and facilitate the process of clarification and finalization of audit issues discussions and recommendations;
  • To update the OAI IT audit universe and risk assessment; and
  • To create a draft 5-year audit plan, taking into account the result of the IT audit risk assessment;

Competencies

Corporate Competencies:
  • Demonstrates integrity by modeling the UN’s values and ethical standards;
  • Promotes the vision, mission, and strategic goals of UNDP;
  • Displays cultural, gender, religion, race, nationality and age sensitivity and adaptability
  • Treats all people fairly without favoritism;
  • Fulfills all obligations to gender sensitivity and zero tolerance for sexual harassment
 
Functional Competencies:
  • Strong interpersonal skills, communication and diplomatic skills, ability to work in a team.
  • Openness to change and ability to receive/integrate feedback.
  • Ability to work under pressure and stressful situations.
  • Strong analytical, reporting, and writing abilities.
  • Excellent public speaking and presentation skills.
 

Required Skills and Experience

Education:
  • Advanced University Degree (Master) in IT, accounting, finance or related fields or first level degree in combination with a professional certification, i.e., Chartered Accountant, Certified Public Accountant or  Chartered Certified Accountant.
  • Professional certification of CISA (Certified Information Systems Auditor)  is a must.
  • Additional professional certifications (CIA, CFE) are desirable. Additional professional certifications on information technology are desirable.
Experience:
  • At least 10 years of practical experience in IT audit, preferably in government, public administration or not-for-profit sector.
  • Expert level knowledge and practical experience in auditing IT governance, security, risk management and management of large IT projects.
  • Knowledge in PeopleSoft applications is a plus.
Language skills:
  • Excellent writing, editing and oral communication skills in English.

Please go to the link below for the following annexes: TOR, P11  and  Procurement Notice as well as detailed information on evaluation criteria for selection.

http://procurement-notices.undp.org/view_notice.cfm?notice_id=10872

FC: 11000