Senior Internal IT Auditor

Virginia State Corporation Commission; Richmond (VA); Hybrid; USD 72,946 - 90,000; Full time

Job summary

The Virginia State Corporation Commission (SCC) Office of Internal Audit seeks a Senior IT Auditor to plan, conduct, and report on IT, cybersecurity, and compliance audits in accordance with professional standards. The position is based in Richmond, Virginia and operates on a hybrid schedule with remote and in-office work each week.

Essential duties include planning audits, developing risk-based plans, testing internal controls, and presenting findings to management.

Qualifications

• 4+ years of relevant auditing, accounting, and/or IT experience.
• Bachelor’s degree in Accounting, Economics, Finance, Information Systems or related field; or 8 years of direct work experience.
• Knowledge of federal and state audit laws, rules, and regulations.
• Knowledge of IT principles and methods.
• Ability to express ideas clearly, both verbally and in writing.
• Ability to manage multiple audit engagements.
• Ability to collect and analyze data and evaluate processes and systems.
• Ability to work independently and as part of a team.
• Ability to establish professional working relationships with SCC staff and external stakeholders.
• Certifications such as CPA, CFE, CISA, or CIA are a plus

Responsibilities

• Plan and conduct complex IT, cybersecurity, operational, and compliance audits.
• Develop risk-based IT annual and tri-annual plans.
• Develop audit objectives, scope, testing strategies, and work programs.
• Perform walkthroughs, data analysis, and testing of internal controls.
• Identify root causes and practical recommendations to strengthen governance and controls.
• Conduct meetings and present observations to management.
• Monitor action plans and remediation timelines.
• Maintain independence and objectivity as an internal auditor.

Skills

Auditing

IT auditing

Data analysis

Communication

Education

Bachelor’s degree in Accounting, Economics, Finance, Information Systems or related field

8 years of direct work experience in lieu of degree

Job description

Starting Salary Range: $72,946 - $90,000

The State Corporation Commission (“SCC” or “Commission”) Office of Internal Audit seeks a talented and motivated Senior Information Technology (“IT”) Auditor to plan, conduct and report on complex information technology, cybersecurity, and operational compliance audits in accordance with professional auditing standards and the SCC’s Office of Internal Audit (OIA) Audit Manual plan. This position is based in Richmond, Virginia and operates on a hybrid schedule, including remote and in-office work each week (Monday – Friday). The SCC offers career growth and professional development opportunities including on-the-job training, certifications, and designations.

Essential Duties and Responsibilities

• Plan and conduct complex IT, cybersecurity, operational, and compliance audits using a risk-based audit methodology
• Assist in the development of risk-based IT annual and tri-annual plans
• Develop audit objectives, scope, testing strategies, and work programs that align with organizational risks
• Perform walkthroughs, interviews, data analysis, and testing to evaluate the design and operating effectiveness of internal controls
• Identify root causes, business impacts, and practical recommendations that strengthen governance, risk management, and internal controls
• Conduct meetings, walkthroughs, interviews, entrance conferences, status meetings, and exit conferences with professionalism and confidence
• Present audit observations, recommendations, and conclusions clearly and effectively to management
• Monitor and track identified control deficiencies, corrective action plans (CAPs), and remediation timelines
• Foster collaborative relationships by positioning OIA as a trusted advisor while maintaining organizational independence and objectivity
• Monitor Virginia Information Technology Agency SEC 530 and other audit legislation; and recommending policy and procedure development and/or modification
• Perform other related work as required

Preferred Qualifications

• 4 or more years of relevant experience in auditing, accounting, and/or IT
• Direct work experience as an IT auditor is preferred, but not required
• Bachelor’s degree in Accounting, Economics, Finance, Information Systems or a related field
• Without a bachelor’s degree, 8 years of direct work experience is required
• Knowledge of federal and state audit laws, rules, and regulations
• Knowledge of IT principles and methods
• Ability to understand and to express ideas clearly, both verbally and in writing
• Ability to manage multiple audit engagements simultaneously
• Ability to collect and analyze data and evaluate processes and systems
• Ability to effectively manage tasks independently and as a member of a team
• Ability to establish and maintain professional working relationships with SCC staff, and representatives of the utilities and the general public.
• Certification such as CPA, CFE, CISA, or CIA is a plus