Senior IT Auditor: Risk & Controls (Hybrid)

Civicworks; Richmond (VA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

The Senior Information Technology Auditor role at the State Corporation Commission's Office of Internal Audit is based in Richmond, VA with a hybrid schedule (2 remote, 3 in-office days weekly). The position oversees IT, cybersecurity, and operational compliance audits from risk assessment through reporting to management.

Responsibilities include walkthroughs, data analysis, and testing of controls; identifying root causes and practical recommendations to strengthen governance, and monitoring

Qualifications

• Must have extensive IT audit experience and solid understanding of controls, risk assessment, and reporting.

Responsibilities

• Independently perform full lifecycle IT audit engagements including risk assessment, planning, control evaluation, and reporting
• Conduct walkthroughs, interviews, data analysis, and testing to evaluate design and operating effectiveness of internal controls
• Identify root causes, business impacts, and practical recommendations to strengthen governance and risk management
• Monitor Virginia Information Technology Agency SEC 530 (NIST 800-53) and audit legislation
• Foster collaborative relationships while maintaining organizational independence and objectivity

Job description

The Senior Information Technology Auditor role at the State Corporation Commission's Office of Internal Audit is based in Richmond, VA with a hybrid schedule (2 remote, 3 in-office days weekly). The position oversees IT, cybersecurity, and operational compliance audits from risk assessment through reporting to management.

Responsibilities include walkthroughs, data analysis, and testing of controls; identifying root causes and practical recommendations to strengthen governance, and monitoring