Senior IT Auditor
About The Position
The Virginia Lottery is seeking a Senior IT Auditor to join its Audit and Security team in Richmond, Virginia. The Lottery is an independent state agency whose traditional lottery proceeds support K–12 public education, while taxes from regulated sports wagering and casino gaming benefit other Commonwealth priorities. The Senior IT Auditor plans and conducts assigned audits, evaluates risks and internal controls, performs audit testing and fieldwork, and documents results. The role prepares findings, recommendations, and reports; communicates significant issues to the Internal Audit Manager; and collaborates with management and auditees on corrective action plans. The auditor also consults with management, system owners, stakeholders, and third-party vendors on IT and cybersecurity controls and applicable policies, standards, and requirements. Additional work includes supporting audit policies, procedures, manuals, and the annual audit plan; maintaining professional knowledge and certifications through continuing education; and completing assigned special projects, reviews, and investigations. A comparable amount of training and experience may be substituted for the stated minimum qualifications.
Requirements
- Bachelor’s degree from an accredited four-year college or university with major studies in Auditing/Accounting and/or Information Systems, or a comparable amount of training and experience.
- Five years of experience as an Internal/External Information Technology Auditor.
- Working knowledge of computer-assisted audit techniques.
- Extensive knowledge of internal control standards, generally accepted auditing standards, and State and Federal regulations related to Lottery operations.
- Knowledge of automated spreadsheets, database applications, data processing (including system design and documentation), and personal computers.
- Ability to review functional areas and formulate applicable audit procedures.
- Ability to interpret applicable laws, regulations, and guidelines.
- Working knowledge of State and Federal information security standards and controls, and governance frameworks.
- Ability to evaluate controls over IT infrastructure, operating systems, network components, and business applications.
- Ability to analyze data and use problem-solving techniques to generate recommendations, review and update policies and procedures, and meet deadlines.
- Exceptional oral and written communication, interpersonal, and listening skills; experience writing audit reports and presenting results to senior management.
- Proficiency with desktop applications such as Microsoft Word, Excel, Visio, and PowerPoint, and audit software such as ACL, Pentana, or TeamMate.
- Ability to use computer systems and applications in a highly automated environment.
Nice To Haves
- Professional certification such as Certified Public Accountant (CPA), Certified Information Systems Auditor (CISA), or Certified Internal Auditor (CIA).
- Experience using audit management software.
- Information Security Audit experience.
- Experience using query tools such as ACL, Business Objects, or SQL to retrieve and analyze data.
- Demonstrated knowledge of IT operating systems, the internet, LAN, WAN, database applications, and data processing, including system design and documentation.
Responsibilities
- Develop audit objectives, scopes, audit programs, and testing procedures for assigned audits.
- Identify risks and evaluate the effectiveness of internal controls.
- Maintain compliance with Commonwealth IT Security Audit Standards, including reporting requirements and deadlines.
- Conduct audit fieldwork and document results in work papers.
- Perform audit testing using appropriate techniques and sampling methods, including data analysis, observations, interviews, and transaction testing.
- Test controls to assess the completeness, accuracy, and reliability of information.
- Submit audit documentation for management review in a timely manner.
- Recommend changes to policies, procedures, and controls based on audit results.
- Develop and document audit findings and corrective-action recommendations.
- Communicate significant audit issues and concerns to the Internal Audit Manager.
- Obtain management responses to findings and collaborate with auditees on final corrective-action plans.
- Prepare clear, concise audit reports communicating results and corrective-action plans.
- Consult with management and system owners on IT and cybersecurity controls, policies, standards, procedures, security practices, and compliance requirements.
- Participate in security and governance meetings with stakeholders and third-party vendors, providing an independent audit perspective.
- Assist with developing and maintaining audit policies, procedures, manuals, and the annual audit plan.
- Maintain audit knowledge, skills, and professional certifications through continuing education and professional development.
- Complete assigned special projects, reviews, investigations, and other duties.
Benefits
- Competitive salary
- Excellent benefits
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
