Senior Internal IT Auditor

Commonwealth of VA Careers; Richmond (VA); Hybrid; USD 80,000 - 120,000; Full time

Benefits offered by this job

Hybrid work schedule

Career development

Job summary

Commonwealth of VA Careers is seeking a Senior Internal IT Auditor in Richmond, VA to plan, conduct, and report on complex information technology, cybersecurity, and compliance audits in accordance with professional auditing standards. This role is based in Richmond and operates on a hybrid schedule with 2 remote and 3 in-office days each week.

The position offers career growth, on-the-job training, and opportunities for professional development as part of the Office of Internal Audit.

Responsibilities

• Independently perform the full lifecycle of an IT audit engagement, including risk assessment, planning and scoping, development of audit programs, control evaluation and testing, workpaper documentation, development of findings and recommendations, and communication of results to management
• Assist in the development of risk-based IT annual and tri-annual plans
• Perform walkthroughs, interviews, data analysis, and testing to evaluate the design and operating effectiveness of internal controls
• Identify root causes, business impacts, and practical recommendations that strengthen governance, risk management, and internal controls
• Conduct meetings, walkthroughs, interviews, entrance conferences, status meetings, and exit conferences with professionalism and confidence
• Monitor and track identified control deficiencies, corrective action plans (CAPs), and remediation timelines
• Foster collaborative relationships by positioning OIA as a trusted advisor while maintaining organizational independence and objectivity
• Monitor Virginia Information Technology Agency SEC 530 (NIST800-53) and other audit legislation; and recommend policy and procedure development and/or modification
• Perform other related work as required

Job description

Senior Internal IT Auditor

Starting Salary Range: $80,000 - $120,000

The State Corporation Commissions (SCC or Commission) Office of Internal Audit seeks a talented and motivated Senior Information Technology (IT) Auditor to plan, conduct, and report on complex information technology, cybersecurity, and operational compliance audits in accordance with professional auditing standards and the SCCs Office of Internal Audit (OIA) Audit Manual plan. This position is based in Richmond, Virginia and operates on a hybrid schedule, including 2 remote and 3 in-office workdays each week (Monday Friday). The SCC offers career growth and professional development opportunities including on-the-job training, certifications, and designations.

Essential Duties and Responsibilities

• Independently perform the full lifecycle of an IT audit engagement, including risk assessment, planning and scoping, development of audit programs, control evaluation and testing, workpaper documentation, development of findings and recommendations, and communication of results to management
• Assist in the development of risk-based IT annual and tri-annual plans
• Perform walkthroughs, interviews, data analysis, and testing to evaluate the design and operating effectiveness of internal controls
• Identify root causes, business impacts, and practical recommendations that strengthen governance, risk management, and internal controls
• Conduct meetings, walkthroughs, interviews, entrance conferences, status meetings, and exit conferences with professionalism and confidence
• Monitor and track identified control deficiencies, corrective action plans (CAPs), and remediation timelines
• Foster collaborative relationships by positioning OIA as a trusted advisor while maintaining organizational independence and objectivity
• Monitor Virginia Information Technology Agency SEC 530 (NIST800-53) and other audit legislation; and recommend policy and procedure development and/or modification
• Perform other related work as required