Senior IT Auditor - Hybrid (Richmond) & Cyber Controls

Virginia State Corporation Commission; Richmond (VA); Hybrid; USD 80,000 - 120,000; Full time

Job summary

Virginia State Corporation Commission in Richmond seeks a Senior IT Auditor to plan, conduct, and report on complex IT, cybersecurity, and operational audits in line with professional standards and the SCC's Audit Manual.

This hybrid role requires strong analytical and communication skills, ability to manage multiple audit engagements, and knowledge of SEC 530 and NIST 800-53; CISA/CISSP/CISM or CIA is a plus.

Qualifications

• 4+ years of professional IT audit experience.
• Knowledge of Commonwealth Virginia IT Security Standard SEC530 and/or NIST 800-53.
• Bachelor's degree required or 8 years of direct work experience without a degree.
• Knowledge of federal and state audit laws, rules, and regulations.
• Ability to understand and express ideas clearly, both verbally and in writing.
• Ability to manage multiple audit engagements simultaneously.
• Certification such as CISA, CISSP, CISM, or CIA is a plus.

Responsibilities

• Independently perform the full lifecycle of an IT audit engagement, including risk assessment, planning and scoping, development of audit programs, control evaluation and testing, workpaper documentation, development of findings and recommendations, and communication of results to management.
• Assist in the development of risk-based IT annual and tri-annual plans.
• Perform walkthroughs, interviews, data analysis, and testing to evaluate internal controls.
• Identify root causes, business impacts, and practical recommendations to strengthen governance, risk management, and internal controls.
• Conduct meetings, walkthroughs, entrance conferences, status meetings, and exit conferences with professionalism and confidence.
• Monitor and track identified control deficiencies, CAPs, and remediation timelines.
• Foster collaborative relationships by positioning OIA as a trusted advisor while maintaining independence and objectivity.
• Monitor Virginia IT Agency SEC 530 and other audit legislation; recommend policy and procedure changes.
• Perform other related work as required.

Skills

IT audit

risk assessment

communication

multi-tasking

Education

Bachelor's degree in Accounting, Economics, Finance, Information Systems or related field

Tools

NIST 800-53

SEC 530

Job description

Virginia State Corporation Commission in Richmond seeks a Senior IT Auditor to plan, conduct, and report on complex IT, cybersecurity, and operational audits in line with professional standards and the SCC's Audit Manual.

This hybrid role requires strong analytical and communication skills, ability to manage multiple audit engagements, and knowledge of SEC 530 and NIST 800-53; CISA/CISSP/CISM or CIA is a plus.