Senior IT Auditor

Virginia Tech•Blacksburg, VA

23h•$85,000 - $95,000

About The Position

This position, reporting to the Director of Internal Audit, is responsible for planning and conducting audits and advisory engagements with a primary focus on evaluating general IT controls, information security, IT governance, and other technology related risks across the university. The incumbent is expected to fulfill their responsibilities with limited supervision while maintaining effective communication with team and audit leadership and other stakeholders. This position serves as a liaison between Internal Audit and the university’s outsourced IT audit partners, coordinating audit activities, facilitating communication, reviewing deliverables, and helping ensure the quality, consistency, and timely completion of IT audit engagements. The Senior IT Auditor is expected to maintain the highest ethical standards, demonstrate sound professional judgment, and contribute as a collaborative and trusted member of the audit team. Success in this role requires strong analytical, organizational, planning, problem-solving, and self-management skills, along with a comprehensive understanding of information technology risks, cybersecurity, IT control frameworks, and common technology architectures. The incumbent will develop risk-based approaches to assessing information technology processes and systems, communicate the assessment results through clear and concise reports, and establish long-term rapport with university stakeholders. Recommendations developed by this position may significantly impact the effectiveness, efficiency, security, and compliance of university administrative and business IT processes. Accordingly, this position must exercise sound professional judgment and provide practical recommendations that strengthen governance, risk management and internal controls.

Requirements

Bachelor's degree in business administration, business information technology, data analysis, cybersecurity, or related field.
Possession of a professional certification such as Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), or Certified Public Accountant (CPA), or able to obtain upon being hired.
Experience conducting or supporting information technology audits, including evaluation of general IT controls, application controls, and technology related risks.
Working knowledge of information security principles, IT governance, risk management and internal control frameworks.
Knowledge of information systems, technology infrastructure, networking concepts, databases, and cloud-based environments sufficient to assess IT risks and controls.
Experience using data analytics techniques or audit technologies to support audit planning, testing and reporting.
Strong analytical and problem-solving skills with the ability to evaluate complex business and technology processes and develop practical recommendations.
Demonstrated professionalism in working with confidential and sensitive matters with the utmost discretion and tact.
Exceptional interpersonal skills to effectively communicate at all levels within the organization, including executive level management and administrators.
Ability to prepare professional documentation and correspondence in a professional and timely manner.
Time management skills to plan, manage, and coordinate audit projects.
Comfortable working in ambiguous and/or stressful situations and adaptable to quickly changing priorities with the capacity to handle multiple tasks simultaneously.

Nice To Haves

Advanced degree in a related field.
Audit experience in higher education or a not-for-profit organization.
Experience in evaluating business processes of large, decentralized organizations.
Experience with and knowledge of large relational databases, client-server environments, networks in multi-platform environments, secure web design, and the Windows/Linux operating systems.
In-depth knowledge of applicable federal, state, and local legislation.
Knowledge of the Global Internal Audit Standards.

Responsibilities

Planning and conducting audits and advisory engagements with a primary focus on evaluating general IT controls, information security, IT governance, and other technology related risks across the university.
Fulfilling responsibilities with limited supervision.
Maintaining effective communication with team and audit leadership and other stakeholders.
Serving as a liaison between Internal Audit and the university’s outsourced IT audit partners, coordinating audit activities, facilitating communication, reviewing deliverables, and helping ensure the quality, consistency, and timely completion of IT audit engagements.
Developing risk-based approaches to assessing information technology processes and systems.
Communicating assessment results through clear and concise reports.
Establishing long-term rapport with university stakeholders.
Providing practical recommendations that strengthen governance, risk management and internal controls.