Senior IT Auditor - Hybrid: Risk, Controls & Compliance

State Corporation Commission; Richmond (VA); Hybrid; USD 110,000 - 140,000; Full time

Job summary

State Corporation Commission in Richmond, Virginia seeks a Senior Information Technology Auditor to plan, conduct, and report on complex IT, cybersecurity, and compliance audits. The role is based in Richmond with a hybrid schedule (2 remote, 3 in-office days weekly) and covers full audit lifecycles from risk assessment through reporting findings and management recommendations.

The ideal candidate will independently perform full lifecycle IT audit engagements, conduct walkthroughs, data

Qualifications

• Experience leading full lifecycle IT audits (planning, fieldwork, reporting).
• Strong ability to map controls to business processes and identify gaps.
• Familiarity with IT governance, risk management, and regulatory requirements.
• Ability to communicate findings clearly to management and foster independence.

Responsibilities

• Plan and conduct IT, cybersecurity, and operational audits.
• Perform risk assessments, control evaluations, and testing.
• Develop actionable recommendations and manage reporting to management.
• Maintain objectivity and professional skepticism throughout engagements.

Skills

IT audit

Risk assessment

Control evaluation

Reporting

Walkthroughs

Interviews

Data analysis

Testing

Governance & risk management

Independence & objectivity

Tools

NIST 800-53

Job description

State Corporation Commission in Richmond, Virginia seeks a Senior Information Technology Auditor to plan, conduct, and report on complex IT, cybersecurity, and compliance audits. The role is based in Richmond with a hybrid schedule (2 remote, 3 in-office days weekly) and covers full audit lifecycles from risk assessment through reporting findings and management recommendations.

The ideal candidate will independently perform full lifecycle IT audit engagements, conduct walkthroughs, data