Information Tech Audit Manager

DHRM • Richmond, VA

19h • Hybrid

About The Position

The Department of Medical Assistance Services (DMAS) is excited to offer a competitive opportunity to serve as the Information Tech Audit Manager in the Internal Audit Division. The IT Audit Manager is responsible for providing management direction in planning all risk-based information technology (including IT security compliance audits) and in the third-party risk assurance in audit and risk management. The position supervises IA staff on audits, confidential investigations, and special projects. This position manages and supervises the work and performance of IT Senior Auditor and the Senior Vendor Compliance Analyst. The position will be a proactive partner in interfacing with all levels of management throughout the Agency, including the Executive Leadership Team and will have full responsibility to plan, conduct, and direct multiple, complex audit engagements concurrently. Assists the IA Director in developing and implementing a quality assurance review of the audit work being performed by IA staff to ensure compliance with departmental and professional standards. Reviews and approves audit staff work plans and documentation to ensure the quality of IA staff or contractor work; that the internal control structure is adequate and effective; that operations function efficiently; and that business processes operate in accordance with applicable laws, regulations and established procedures. Develops audit reports of findings and test results, makes recommendations to management, and appraises the adequacy of corrective action plans in response to IA findings and recommendations. The business needs for this position have in office requirements to include but are not limited to attending in-person training and/or internal and external stakeholder's meetings as needed as well as travel within the State of Virginia as needed. Located in beautiful Central Virginia, the Richmond area puts you just 2 hours from the Blue Ridge Mountains, Virginia Beach and Washington DC. To learn more about the Richmond, VA area visit: https://www.virginia.org/ The Department of Medical Assistance Services (DMAS) is working to improve the health and well-being of Virginians through access to high-quality health care coverage. DMAS wants talented individuals who can align their experience with the mission of the agency and its core values – service, collaboration, trust, problem solving and adaptability. At the Department of Medical Assistance Services (DMAS) we encourage and promote that you Come as you are | Become who you want to be | That is our promise.

Requirements

• Considerable experience auditing information technology and security controls against the Commonwealth of Virginia’s IT Information Security Standard (SEC530) in accordance with the IT Security Audit Standard (SEC502-03).
• Experience reviewing third-party vendor audit reports and SOC reports and reporting risks to management.
• Experience reviewing and editing the work of audit staff and performing quality reviews of audit work.
• Considerable experience managing and conducting internal audits of IT controls identifying high-risk systems, functions, and controls, and scoping audits based on risk.
• Considerable experience with Microsoft Office, SharePoint, and Teams.
• Considerable work-related experience interpreting and applying federal, state laws, policies, and regulations.
• Experience meeting deadlines.
• Considerable experience making presentations to internal and external stakeholders.
• Considerable knowledge of the Institute of Internal Auditors (IIA) and/or Government Accountability Office (GAO) auditing standards.
• Experience supervising, mentoring, or leading IT audit staff.

Nice To Haves

• Certification as a CISA, CIA, CISSP, CISM, or CPA.

Responsibilities

• Providing management direction in planning all risk-based information technology (including IT security compliance audits) and in the third-party risk assurance in audit and risk management.
• Supervising IA staff on audits, confidential investigations, and special projects.
• Managing and supervising the work and performance of IT Senior Auditor and the Senior Vendor Compliance Analyst.
• Planning, conducting, and directing multiple, complex audit engagements concurrently.
• Assisting the IA Director in developing and implementing a quality assurance review of the audit work being performed by IA staff to ensure compliance with departmental and professional standards.
• Reviewing and approving audit staff work plans and documentation to ensure the quality of IA staff or contractor work; that the internal control structure is adequate and effective; that operations function efficiently; and that business processes operate in accordance with applicable laws, regulations and established procedures.
• Developing audit reports of findings and test results, making recommendations to management, and appraising the adequacy of corrective action plans in response to IA findings and recommendations.

Benefits

• Telework arrangements are a privilege and may be rescinded at any time based on performance and/or business need.
• The agency reserves the right to modify or terminate a telework arrangement, provided that reasonable notice is given to the employee.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: No Education Listed