IT Auditor

DHRM • Chesterfield, VA

8d • Onsite

About The Position

The Virginia Information Technologies Agency (VITA) is excited to offer a competitive opportunity to serve as an IT Auditor with the Commonwealth Security and Risk Management Division. The purpose of this position is to plan, coordinate and conduct IT security audits for participating customer agencies. Either independently or as a team leader within existing guidelines, objectively develops, interprets, and/or evaluates compliance with policies, procedures, standards, and frameworks. Develops audit plans, target objectives, review procedures, and project plans. Performs work of varied and considerable difficulty requiring advanced data collection, analysis, forecasting, and report writing. Exercises considerable discretion and judgment in making recommendations related to the overall audit process. Serves as a resource to others in resolving more complex problems. Provides risk evaluation and mitigation services to enhance operational effectiveness and efficiency. Frequently contacts internal and external senior officials regarding sensitive and confidential matters. Join VITA at The Boulders in Richmond, VA, where innovation meets impact! As the Commonwealth’s leading IT agency, we’re connecting, protecting, innovating, and powering Virginia’s digital future through collaboration, creativity, and purpose. Our team thrives in a vibrant, customer-focused environment that values growth, accountability, and forward thinking — all while making technology work for every corner of Virginia.

Requirements

• Considerable Experience working as an IT Auditor in a public accounting firm or internal audit department, following Generally Accepted Auditing Standards (GAAS).
• Considerable Experience with Government Auditing Standards (Yellow Book) and/or the International Professional Practices Framework (Red Book).
• Experience in-depth knowledge of Commonwealth of Virginia IT Security Standard SEC530 and/or NIST 800-53.
• Experience performing control evaluations of IT infrastructure, operating systems, network components, and business applications.
• Considerable Experience proficiently drafting professional audit reports requiring minimal revision.
• Considerable Experience working effectively with all levels of management and internal and external stakeholders.

Nice To Haves

• Possess one or more of the following professional certifications: Certified Internal Auditor, Certified Public Accountant, or Certified Information Systems Auditor.

Responsibilities

• Plan, coordinate and conduct IT security audits for participating customer agencies.
• Develop audit plans, target objectives, review procedures, and project plans.
• Perform work of varied and considerable difficulty requiring advanced data collection, analysis, forecasting, and report writing.
• Exercise considerable discretion and judgment in making recommendations related to the overall audit process.
• Serve as a resource to others in resolving more complex problems.
• Provide risk evaluation and mitigation services to enhance operational effectiveness and efficiency.
• Frequently contact internal and external senior officials regarding sensitive and confidential matters.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed