Senior Internal IT Auditor

Civicworks; Richmond (VA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

The Senior Information Technology Auditor role at the State Corporation Commission's Office of Internal Audit is based in Richmond, VA with a hybrid schedule (2 remote, 3 in-office days weekly). The position oversees IT, cybersecurity, and operational compliance audits from risk assessment through reporting to management.

Responsibilities include walkthroughs, data analysis, and testing of controls; identifying root causes and practical recommendations to strengthen governance, and monitoring

Qualifications

• Must have extensive IT audit experience and solid understanding of controls, risk assessment, and reporting.

Responsibilities

• Independently perform full lifecycle IT audit engagements including risk assessment, planning, control evaluation, and reporting
• Conduct walkthroughs, interviews, data analysis, and testing to evaluate design and operating effectiveness of internal controls
• Identify root causes, business impacts, and practical recommendations to strengthen governance and risk management
• Monitor Virginia Information Technology Agency SEC 530 (NIST 800-53) and audit legislation
• Foster collaborative relationships while maintaining organizational independence and objectivity

Job description

The State Corporation Commission's Office of Internal Audit seeks a Senior Information Technology Auditor to plan, conduct, and report on complex IT, cybersecurity, and operational compliance audits in accordance with professional standards. The role is based in Richmond, Virginia on a hybrid schedule (2 remote, 3 in-office days weekly) and involves the full lifecycle of IT audit engagements from risk assessment through reporting findings and recommendations to management.

Key qualifications:

• Independently perform full lifecycle IT audit engagements including risk assessment, planning, control evaluation, and reporting
• Conduct walkthroughs, interviews, data analysis, and testing to evaluate design and operating effectiveness of internal controls
• Identify root causes, business impacts, and practical recommendations to strengthen governance and risk management
• Monitor Virginia Information Technology Agency SEC 530 (NIST 800-53) and audit legislation
• Foster collaborative relationships while maintaining organizational independence and objectivity