IT Auditor II

My HR-Rescue; McLean (VA); Hybrid; USD 80,000 - 100,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive health benefits

Paid Time Off

Flexible work arrangements

Job summary

A leading audit and risk management firm in McLean, Virginia is seeking an Auditor II. This role involves participating in planning and executing audits, identifying control issues, and documenting findings. Candidates need 2-5 years of relevant IT audit experience and a bachelor's degree in a technology-related field. Preferred certifications include CISA or CRISC. The firm offers a competitive compensation package along with flexible/hybrid work arrangements.

Qualifications

• Minimum of 2-5 years of related experience in IT Audit.
• Must demonstrate understanding of audit techniques and risk assessment.
• Bachelor's degree in a technology-related major is necessary.

Responsibilities

• Participate in planning and driving audit projects.
• Identify and document potential control issues.
• Assist with audit execution and reporting under supervision.

Skills

IT Audit Experience

Risk Assessment

Audit Techniques

Problem Solving

Education

Bachelor's degree in technology-related field

Job description

Pay, Benefits & Perks

Company has a great benefits package for all full-time direct-hire positions.

• Competitive compensation, including base pay and annual incentive.
• Comprehensive health, life, and well-being benefits (based on location).
• Paid Time Off & other leave of absence benefits.
• Flexible / Hybrid Work Arrangements.

What you can expect in this position

• The Internal Audit function's ideal Auditor II candidate is predominantly passionate about audit projects, participating in planning, driving fieldwork, and assisting with report clearance.
• The primary measure of success for this role is identifying potential issues about the design and efficiency of controls and crafting reliable documentation to support their work.
• The Auditor II must run multiple auditee relationships, be a good team player, and take accountability for their personal growth and professional development.
• Strategic Control Impact Identifies meaningful issues in which controls are not accurately crafted or are not operating efficiently. Assesses the risk and control environment for processes within coverage areas. Works closely with auditees to verify timely progress and completion of agreed upon issue closure, under the mentorship of a supervisor. Understands the financial services industry and risk and control environment for coverage areas and identifies new risks.
• Audit Execution Assists a Senior Auditor or Audit Manager with the execution of audit planning, fieldwork, and reporting. Completes risk-focused fieldwork on time and within the allocated budget, advising the auditor in charge promptly of issues that arise or when budgets or timelines are at risk. Understands and performs root cause analysis for issues; possesses and demonstrates a strong understanding of audit techniques.
• Quality Process Demonstrates a validated understanding of our policies & procedures, particularly work paper documentation standards. Independently prepares work papers that fully follow IAD policies and procedures. Participates in continuous improvement initiatives. Aligns risk and control processes into day-to-day responsibilities to supervise and mitigate risk; escalates appropriately

Minimum Qualifications

Please ensure the following qualifications are reflected in your resume to be considered.

REQUIRED

• Minimum of 2-5 years of related experience in IT Audit.
• Bachelors degree, preferably with a technology-related major.
• Capable of identifying, assessing, and advising on risks for large‑scale technology projects, IT general controls and completing IT process audits (e.g., SDLC, Organizational Change, Logical Security, Business Continuity/Disaster Recovery, and Incident/Problem Monitoring).

PREFERRED

• Certifications related to the candidates coverage responsibilities are beneficial, but not required, such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), and Certified Information Systems Security Professional (CISSP).