Senior IT Auditor

Virginia Lottery; Richmond (VA); On-site; USD 88,000 - 118,000; Full time

Job summary

The Virginia Lottery is seeking a Senior IT Auditor to join its Audit and Security team in Richmond. You will plan audits, test controls, and report findings to management, ensuring compliance with state standards and Lottery policies.

Ideal candidates have a degree in auditing or information systems and several years of IT audit experience, with strong analytical and communication skills. The role involves collaboration with management and external stakeholders on IT governance and security

Qualifications

• Bachelor’s Degree in Auditing/Accounting and/or Information Systems is required.
• At least five years of IT audit experience with knowledge of computer-assisted audit techniques.
• Extensive knowledge of internal control standards, GAAS, and state/federal regulations related to Lottery operations.
• Ability to interpret applicable laws and guidelines and review functional areas to determine audit procedures.
• Working knowledge of IT security standards, governance frameworks, and IT infrastructure controls.
• Excellent written and verbal communication and experience presenting audit results.
• Proficiency with Microsoft Office and common audit software.

Responsibilities

• Plan assigned audits with objectives and scope.
• Perform audit fieldwork and document results.
• Evaluate controls and perform testing using appropriate methods.
• Prepare clear audit reports and communicate findings to management.
• Consult with management and stakeholders on IT controls and security.
• Maintain audit policies and participate in special projects.
• Complete administrative work, training, or investigations.

Skills

Auditing standards

Data analysis

IT governance

Internal controls

Communication skills

Education

Bachelor’s Degree in Auditing/Accounting or Information Systems

Tools

ACL

Pentana

TeamMate

Microsoft Word

Excel

Visio

PowerPoint

Job description

Title: Senior IT Auditor

Hiring Range: $88,001 - $117,600

Pay Band: UG

Agency: Virginia Lottery

Location:Virginia Lottery

Agency Website:www.valottery.com

Recruitment Type: General Public - G

For more than three decades, the Virginia Lottery has worked to build a strong reputation, one synonymous with providing fun, entertaining experiences and doing so responsibly and with integrity. Proceeds from traditional Lottery games support K-12 public education in Virginia. Taxes generated by sports wagering and casino gaming, which are regulated by the Lottery, benefit other priorities of the Commonwealth.
The Virginia Lottery, an independent state agency, is currently seeking a Senior IT Auditor to join its Audit and Security team. This position is located in Richmond, Virginia.
The Senior IT Auditor will:

Plan assigned audits:

• Develop audit objectives and scope for assigned audits.
• Identify risks and evaluate the effectiveness of internal controls.
• Develop audit programs and testing procedures based on audit objectives, risks, control assessments, state standards, and Lottery policies.
• Maintain compliance with Commonwealth IT Security Audit Standards, including reporting requirements and deadlines.

Perform audit test work:

• Conduct audit fieldwork and document result in work papers.
• Evaluate internal controls and perform audit testing using appropriate audit techniques and sampling methods.
• Use data analysis, observations, interviews, and transaction testing to assess control effectiveness.
• Test controls to evaluate the completeness, accuracy, and reliability of information.
• Submit audit documentation for management review in a timely manner.

Report audit findings and recommendations to management:

• Make recommended changes to policies, procedures, and controls based on audit results.
• Develop and document straightforward audit findings and corrective action recommendations.
• Communicate significant audit issues and concerns to the Internal Audit Manager.
• Obtain management responses to audit findings and collaborate with the auditee on developing final corrective action plans.
• Prepare clear and concise audit reports that communicate audit results and corrective action plans.

Participate in security meetings as a consultant:

• Consult with management and system owners on information technology and cybersecurity controls, providing guidance on IT policies, standards, procedures, security practices, and compliance with applicable security and audit requirements.
• Participate in security and governance meetings with stakeholders and third-party vendors to provide an independent audit perspective.

Complete administrative work, training, special projects, reviews, or investigations assigned by Lottery Management:

• Assist with the development and maintenance of audit policies, procedures, manuals, and the annual audit plan.
• Maintain audit knowledge, skills, and professional certifications through continuing education and professional development.
• Complete special projects, reviews, investigations, and other duties as assigned.

Minimum Qualifications

The person selected for this position will have:

• Bachelor’s Degree from an accredited 4-year college or university with major studies in Auditing/Accounting and/or Information Systems.
• Five years of experience as an Internal/External Information Technology Auditor with working knowledge of computer-assisted audit techniques.
• Extensive knowledge of internal control standards, generally accepted auditing standards, State and Federal regulations as they relate to Lottery operations, automated spreadsheets, database applications, data processing (including system design and documentation), and personal computers.
• Demonstrated ability to review functional areas and formulate applicable audit procedures.
• Proven ability to interpret applicable laws, regulations, and guidelines.
• Working knowledge of State and Federal information security standards and controls.
• Working knowledge of governance frameworks.
• Ability to evaluate controls over IT infrastructure, operating systems, network components, and business applications.
• Demonstrated ability to analyze data and use problem-solving techniques to generate recommendations to management, review and update policies and procedures, and meet deadlines.
• Exceptional communication (oral and written), interpersonal, and listening skills; experience writing audit reports and presenting results to senior management.
• Proficiency in desktop applications such as, but not limited to, Microsoft Word, Excel, Visio, and PowerPoint, as well as audit software (such as ACL, Pentana, TeamMate, etc.).
• Ability to use computer systems and applications in this highly automated environment.

A comparable amount of training and experience may be substituted for the minimum qualifications.

Additional Considerations

Professional certifications such as Certified Public Accountant (CPA), Certified Information Systems Auditor (CISA), or Certified Internal Auditor (CIA) are preferred.

Experience with using audit management software preferred.

Information Security Audit experience:

Experience with use of query tools (i.e., ACL, Business Objects, SQL) to retrieve and analyze data; demonstrated knowledge of IT operating systems, internet, LAN, WAN, and database applications, and data processing (including system design and documentation).

Contact Information

Name: Human Resources

Phone: [phone]

Email: N/A

In support of the Commonwealth's commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly COD) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS/DBVI to get their AHP Letter. Requesting an AHP Letter can be found at AHP Letter or by calling DARS at 800-552-5019.

Note: Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.