Senior IT Auditor

Virginia Tech; Blacksburg (VA); On-site; USD 85,000 - 95,000; Full time

Job summary

Virginia Tech is seeking a Senior IT Auditor to plan and conduct IT and security audits across the university. The role liaises with outsourced IT audit partners, coordinates activities, and ensures timely, high-quality deliverables while upholding professional standards.

The position requires a Bachelor's degree in a related field, professional certifications (CISA/CIA/CPA) or ability to obtain, and experience evaluating IT controls and risks.

Qualifications

• Bachelor's degree in business administration, business information technology, data analysis, cybersecurity, or related field.
• Possession of a professional certification such as CISA, CIA, or CPA, or able to obtain upon being hired.
• Experience conducting or supporting information technology audits, including evaluation of general IT controls, application controls, and technology related risks.
• Working knowledge of information security principles, IT governance, risk management and internal control frameworks.
• Knowledge of information systems, technology infrastructure, networking concepts, databases, and cloud-based environments sufficient to assess IT risks and controls.

Responsibilities

• Plan and conduct audits and advisory engagements focusing on IT controls, information security, and related risks across the university.
• Act as liaison between Internal Audit and outsourced IT audit partners; coordinate activities, review deliverables, ensure quality and timely completion.
• Develop risk-based approaches to assessing IT processes and systems; communicate assessment results through clear reports.
• Establish rapport with university stakeholders and provide practical recommendations to strengthen governance and internal controls.

Skills

IT auditing

Information security

IT governance

Data analytics

Stakeholder communication

Professional judgment

Time management

Problem solving

Adaptability

Confidentiality

Education

Bachelor's degree in business administration

Bachelor's degree in business information technology

Bachelor's degree in data analysis

Bachelor's degree in cybersecurity

Advanced degree in related field

Job description

Job Description

This position, reporting to the Director of Internal Audit, is responsible for planning and conducting audits and advisory engagements with a primary focus on evaluating general IT controls, information security, IT governance, and other technology related risks across the university. The incumbent is expected to fulfill their responsibilities with limited supervision while maintaining effective communication with team and audit leadership and other stakeholders. This position serves as a liaison between Internal Audit and the university’s outsourced IT audit partners, coordinating audit activities, facilitating communication, reviewing deliverables, and helping ensure the quality, consistency, and timely completion of IT audit engagements. The Senior IT Auditor is expected to maintain the highest ethical standards, demonstrate sound professional judgment, and contribute as a collaborative and trusted member of the audit team. Success in this role requires strong analytical, organizational, planning, problem-solving, and self-management skills, along with a comprehensive understanding of information technology risks, cybersecurity, IT control frameworks, and common technology architectures The incumbent will develop risk-based approaches to assessing information technology processes and system, communicate the assessment results through clear and concise reports, and establish long-term rapport with university stakeholders. Recommendations developed by this position may significantly impact the effectiveness, efficiency, security, and compliance of university administrative and business IT processes. Accordingly, this position must exercise sound professional judgment and provide practical recommendations that strengthen governance, risk management and internal controls.

Required Qualifications

• Bachelor's degree in business administration, business information technology, data analysis, cybersecurity, or related field.
• Possession of a professional certification such as Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), or Certified Public Accountant (CPA), or able to obtain upon being hired.
• Experience conducting or supporting information technology audits, including evaluation of general IT controls, application controls, and technology related risks.
• Working knowledge of information security principles, IT governance, risk management and internal control frameworks.
• Knowledge of information systems, technology infrastructure, networking concepts, databases, and cloud-based environments sufficient to assess IT risks and controls.
• Experience using data analytics techniques or audit technologies to support audit planning, testing and reporting.
• Strong analytical and problem-solving skills with the ability to evaluate complex business and technology processes and develop practical recommendations.
• Demonstrated professionalism in working with confidential and sensitive matters with the utmost discretion and tact.
• Exceptional interpersonal skills to effectively communicate at all levels within the organization, including executive level management and administrators.
• Ability to prepare professional documentation and correspondence in a professional and timely manner.
• Time management skills to plan, manage, and coordinate audit projects.
• Incumbents must be comfortable working in ambiguous and/or stressful situations and adaptable to quickly changing priorities with the capacity to handle multiple tasks simultaneously.

Preferred Qualifications

• Advanced degree in a related field.
• Audit experience in higher education or a not-for-profit organization.
• Experience in evaluating business processes of large, decentralized organizations.
• Experience with and knowledge of large relational databases, client-server environments, networks in multi-platform environments, secure web design, and the Windows/Linux operating systems.
• In-depth knowledge of applicable federal, state, and local legislation.
• Knowledge of the Global Internal Audit Standards.

Overtime Status

Exempt: Not eligible for overtime

Appointment Type

Regular

Salary Information

Commensurate with experience with a salary range of $85,000-$95,000

Hours per week

40

Review Date

August 20, 2026

Additional Information

The successful candidate will be required to have a criminal conviction check.

About Virginia Tech

Dedicated to its motto, Ut Prosim (That I May Serve), Virginia Tech pushes the boundaries of knowledge by taking a hands-on, transdisciplinary approach to preparing scholars to be leaders and problem-solvers. A comprehensive land-grant institution that enhances the quality of life in Virginia and throughout the world, Virginia Tech is an inclusive community dedicated to knowledge, discovery, and creativity. The university offers more than 280 majors to a diverse enrollment of more than 36,000 undergraduate, graduate, and professional students in eight undergraduate colleges, a school of medicine, a veterinary medicine college, Graduate School, and Honors College. The university has a significant presence across Virginia, including Blacksburg, the greater Washington, D.C. area, the Health Sciences and Technology Campus in Roanoke, sites in Newport News and Richmond, and numerous Extension offices and research institutes. A leading global research institution, Virginia Tech conducts more than 650 million in research annually.

Virginia Tech endorses and encourages participation in professional development opportunities and university shared governance. These valuable contributions to university shared governance provide important representation and perspective, along with opportunities for unique and impactful professional development.

Virginia Tech does not discriminate against employees, students, or applicants on the basis of age, color, disability, sex (including pregnancy), gender, gender identity, gender expression, genetic information, ethnicity or national origin, political affiliation, race, religion, sexual orientation, or military status, or otherwise discriminate against employees or applicants who inquire about, discuss, or disclose their compensation or the compensation of other employees or applicants, or on any other basis protected by law.

If you are an individual with a disability and desire an accommodation, please contact Marisela Garza at [e-mail] during regular business hours at least 10 business days prior to the event.