IT Auditor

Incumbent serves as a Technical Regulatory Assessments and Compliance Services (TRACS) Auditor with the National Indian Gaming Commissions (NIGC) Office of the Chief of Staff (OCOS), Division of Technology. This position is under the direction of the Chief Technology Officer who reports to the Chief Information Officer in the Division of Technology within the OCOS. The primary purpose of this position is to develop and document IT policies, standards, and procedures aligned with the Division of Technology and regulatory requirements and industry best practices. The TRACS Auditor reviews existing policies, maintains a centralized policy repository, communicates policy updates, and collaborates with IT teams to ensure policies are enforceable. The position ensures all field technology auditing functions according to NIGC policies procedures and regulations which include investigating known or alleged violations of the IGRA and NIGC regulations. Other duties include IT services i.e. Information Technology Vulnerability Assessments (ITVA's), etc. and any additional Information Technology (IT) services approved by the Chief Technology Officer and/or Chief Information Officer and OCOS. The TRACS Auditor position is designated as a Mobile Worker due to frequent travel. When not in travel status, you will work remotely from your home. Major duties include, but are not limited to: Prepares reports and testifies in administrative hearings or other proceedings as designated by the Commission. Creates and provides the annual IT training material from inception to completion. Advises Chief Technology Officer and senior Technology Division leadership on any information technological advances as it relates to the gaming industry that can assist technical guidance on regulations for Indian Gaming. Performs gaming operations' audits and evaluations to ensure compliance with IGRA, NIGC regulations and the provisions of the tribal gaming ordinances/resolutions. Develops and documents IT policies, standards and procedures to align with regulatory IT controls 25 CFR 543.20 TRACS controls and 25 CFR 547 technical standards. Gathers and analyzes business requirements through interviews, workshops and data analysis. Translates requirements into functional specifications and process documentation. Identifies gaps between current processes and policy requirements, recommending solutions to align operations with governance standards. Provides training and technical assistance to tribal governments, tribal regulatory authorities, gaming operation personnel and contract managers to ensure compliance with the IGRA and NIGC regulations. Revises, if necessary, TRACS objectives designed to accommodate new technologies based on IGRA and NIGC regulations. Maintains liaison as the Chief Technology Officers representative with the tribal governments with respect to IT related gaming matters. Provides site specific training and public speaking engagements related to gaming technology standards and controls with implementation and testing to an audience with extremely varied technical and financial backgrounds. Audits detailed general controls specific to tribal gaming operations, tribal governments, information technology plans, or any other examinations to ensure compliance with the regulations of the Commission, IGRA and the provisions of the tribal gaming ordinance/resolution. May conduct audits to investigate alleged violations of the NIGC regulations, prepare reports and testifies in administrative hearings or other proceedings as designated by the Commission to hear such matters. Salary Information Salary is determined based on where you live. The posted salary is for those locations outside of a designated pay locality area (Rest of U.S.) For OPM salary tables please visit: 2026 Salary Tables This position is in the excepted service and not subject to competitive service procedures. Competitive Civil Service status is not acquired under this appointment. New appointees to the excepted service must serve a two year trial period. Merit Promotion procedures do not apply.