Senior IT Auditor

DHRM•Richmond, VA

4d•Onsite

About The Position

For more than three decades, the Virginia Lottery has worked to build a strong reputation, one synonymous with providing fun, entertaining experiences and doing so responsibly and with integrity. Proceeds from traditional Lottery games support K-12 public education in Virginia. Taxes generated by sports wagering and casino gaming, which are regulated by the Lottery, benefit other priorities of the Commonwealth. The Virginia Lottery, an independent state agency, is currently seeking a Senior IT Auditor to join its Audit and Security team. This position is located in Richmond, Virginia.

Requirements

Bachelor’s Degree from an accredited 4-year college or university with major studies in Auditing/Accounting and/or Information Systems.
Five years of experience as an Internal/External Information Technology Auditor with working knowledge of computer-assisted audit techniques.
Extensive knowledge of internal control standards, generally accepted auditing standards, State and Federal regulations as they relate to Lottery operations, automated spreadsheets, database applications, data processing (including system design and documentation), and personal computers.
Demonstrated ability to review functional areas and formulate applicable audit procedures.
Proven ability to interpret applicable laws, regulations, and guidelines.
Working knowledge of State and Federal information security standards and controls.
Working knowledge of governance frameworks.
Ability to evaluate controls over IT infrastructure, operating systems, network components, and business applications.
Demonstrated ability to analyze data and use problem-solving techniques to generate recommendations to management, review and update policies and procedures, and meet deadlines.
Exceptional communication (oral and written), interpersonal, and listening skills; experience writing audit reports and presenting results to senior management.
Proficiency in desktop applications such as, but not limited to, Microsoft Word, Excel, Visio, and PowerPoint, as well as audit software (such as ACL, Pentana, TeamMate, etc.).
Ability to use computer systems and applications in this highly automated environment.
A comparable amount of training and experience may be substituted for the minimum qualifications.

Nice To Haves

Professional certifications such as Certified Public Accountant (CPA), Certified Information Systems Auditor (CISA), or Certified Internal Auditor (CIA) are preferred.
Experience with using audit management software preferred.
Information Security Audit experience: Experience with use of query tools (i.e., ACL, Business Objects, SQL) to retrieve and analyze data; demonstrated knowledge of IT operating systems, internet, LAN, WAN, and database applications, and data processing (including system design and documentation).

Responsibilities

Plan assigned audits: Develop audit objectives and scope for assigned audits. Identify risks and evaluate the effectiveness of internal controls. Develop audit programs and testing procedures based on audit objectives, risks, control assessments, state standards, and Lottery policies. Maintain compliance with Commonwealth IT Security Audit Standards, including reporting requirements and deadlines.
Perform audit test work: Conduct audit fieldwork and document result in work papers. Evaluate internal controls and perform audit testing using appropriate audit techniques and sampling methods. Use data analysis, observations, interviews, and transaction testing to assess control effectiveness. Test controls to evaluate the completeness, accuracy, and reliability of information. Submit audit documentation for management review in a timely manner.
Report audit findings and recommendations to management: Make recommended changes to policies, procedures, and controls based on audit results. Develop and document straightforward audit findings and corrective action recommendations. Communicate significant audit issues and concerns to the Internal Audit Manager. Obtain management responses to audit findings and collaborate with the auditee on developing final corrective action plans. Prepare clear and concise audit reports that communicate audit results and corrective action plans.
Participate in security meetings as a consultant: Consult with management and system owners on information technology and cybersecurity controls, providing guidance on IT policies, standards, procedures, security practices, and compliance with applicable security and audit requirements. Participate in security and governance meetings with stakeholders and third-party vendors to provide an independent audit perspective.
Complete administrative work, training, special projects, reviews, or investigations assigned by Lottery Management: Assist with the development and maintenance of audit policies, procedures, manuals, and the annual audit plan. Maintain audit knowledge, skills, and professional certifications through continuing education and professional development. Complete special projects, reviews, investigations, and other duties as assigned.