Senior IT Auditor

DHRM; Richmond (VA); On-site; USD 88,000 - 118,000; Full time

Job summary

Virginia Lottery, located in Richmond, seeks a Senior IT Auditor to lead IT audits, assess controls, and report findings to management. The role requires five years of IT audit experience, strong knowledge of internal controls and security standards, and proficiency with audit software.

You will collaborate with stakeholders to strengthen governance and compliance within a highly automated environment. The position offers a competitive salary range and professional development opportunities,

Qualifications

• Bachelor’s degree in Auditing/Accounting and/or Information Systems.
• Five years of IT audit experience with working knowledge of computer-assisted audit techniques.
• Extensive knowledge of internal control standards, GAAS, and related regulations.
• Demonstrated ability to review functional areas and formulate audit procedures.
• Proven ability to interpret laws, regulations, and governance frameworks.
• Proficiency with MS Office and audit software.

Responsibilities

• Plan assigned IT audits: objectives, scope, risks, controls, and deadlines.
• Perform audit fieldwork and document results in work papers.
• Evaluate controls and perform testing using appropriate techniques and sampling.
• Use data analysis and interviews to assess control effectiveness.
• Report findings, recommendations, and corrective actions to management.
• Consult with stakeholders on IT security controls and governance.
• Complete administrative tasks and maintain audit policies and plans.

Skills

Auditing/Accounting

Information Systems

Data analysis

Communication

Problem solving

Education

Bachelor’s Degree in Auditing/Accounting/IS

Tools

ACL

Pentana

TeamMate

Job description

Title: Senior IT Auditor

Hiring Range: $88,001 - $117,600

Pay Band: UG

Agency: Virginia Lottery

Location: Virginia Lottery

Agency Website: www.valottery.com

Recruitment Type: General Public - G

Job Duties

For more than three decades, the Virginia Lottery has worked to build a strong reputation, one synonymous with providing fun, entertaining experiences and doing so responsibly and with integrity. Proceeds from traditional Lottery games support K-12 public education in Virginia. Taxes generated by sports wagering and casino gaming, which are regulated by the Lottery, benefit other priorities of the Commonwealth.

This position is located in Richmond, Virginia.

Plan assigned audits:

• Develop audit objectives and scope for assigned audits.
• Identify risks and evaluate the effectiveness of internal controls.
• Develop audit programs and testing procedures based on audit objectives, risks, control assessments, state standards, and Lottery policies.
• Maintain compliance with Commonwealth IT Security Audit Standards, including reporting requirements and deadlines.

Perform audit test work:

• Conduct audit fieldwork and document result in work papers.
• Evaluate internal controls and perform audit testing using appropriate audit techniques and sampling methods.
• Use data analysis, observations, interviews, and transaction testing to assess control effectiveness.
• Test controls to evaluate the completeness, accuracy, and reliability of information.
• Submit audit documentation for management review in a timely manner.

Report audit findings and recommendations to management:

• Make recommended changes to policies, procedures, and controls based on audit results.
• Develop and document straightforward audit findings and corrective action recommendations.
• Communicate significant audit issues and concerns to the Internal Audit Manager.
• Obtain management responses to audit findings and collaborate with the auditee on developing final corrective action plans.
• Prepare clear and concise audit reports that communicate audit results and corrective action plans.

Participate in security meetings as a consultant:

• Consult with management and system owners on information technology and cybersecurity controls, providing guidance on IT policies, standards, procedures, security practices, and compliance with applicable security and audit requirements.
• Participate in security and governance meetings with stakeholders and third-party vendors to provide an independent audit perspective.

Complete administrative work, training, special projects, reviews, or investigations assigned by Lottery Management:

• Assist with the development and maintenance of audit policies, procedures, manuals, and the annual audit plan.
• Maintain audit knowledge, skills, and professional certifications through continuing education and professional development.
• Complete special projects, reviews, investigations, and other duties as assigned.

Minimum Qualifications

The person selected for this position will have:

• Bachelor’s Degree from an accredited 4-year college or university with major studies in Auditing/Accounting and/or Information Systems.
• Five years of experience as an Internal/External Information Technology Auditor with working knowledge of computer-assisted audit techniques.
• Extensive knowledge of internal control standards, generally accepted auditing standards, State and Federal regulations as they relate to Lottery operations, automated spreadsheets, database applications, data processing (including system design and documentation), and personal computers.
• Demonstrated ability to review functional areas and formulate applicable audit procedures.
• Proven ability to interpret applicable laws, regulations, and guidelines.
• Working knowledge of State and Federal information security standards and controls.
• Working knowledge of governance frameworks.
• Ability to evaluate controls over IT infrastructure, operating systems, network components, and business applications.
• Demonstrated ability to analyze data and use problem-solving techniques to generate recommendations to management, review and update policies and procedures, and meet deadlines.
• Exceptional communication (oral and written), interpersonal, and listening skills; experience writing audit reports and presenting results to senior management.
• Proficiency in desktop applications such as, but not limited to, Microsoft Word, Excel, Visio, and PowerPoint, as well as audit software (such as ACL, Pentana, TeamMate, etc.).
• Ability to use computer systems and applications in this highly automated environment.

A comparable amount of training and experience may be substituted for the minimum qualifications.

Additional Considerations

Professional certifications such as Certified Public Accountant (CPA), Certified Information Systems Auditor (CISA), or Certified Internal Auditor (CIA) are preferred.

Experience with using audit management software preferred.

Information Security Audit experience:

Experience with use of query tools (i.e., ACL, Business Objects, SQL) to retrieve and analyze data; demonstrated knowledge of IT operating systems, internet, LAN, WAN, and database applications, and data processing (including system design and documentation).

We offer a competitive salary and excellent benefits.

The Virginia Lottery is an Independent state agency, and as such all positions are exempt from the Virginia Personnel Act, as well as most Executive Branch human resources policies.

The Virginia Lottery is an Equal Opportunity Employer.

The Virginia Lottery will provide, if requested, reasonable accommodation to applicants in need of accommodation in order to provide access to the application and/or interview process.

In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly COD) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS/DBVI to get their AHP Letter. Requesting an AHP Letter can be found at AHP Letter or by calling DARS at 800-552-5019.

Note: Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.