Senior IT Internal Auditor

Hamilton•Richmond, VA

8d•Hybrid

About The Position

The Senior IT Internal Auditor supports the organization’s Sarbanes-Oxley (SOX) compliance program and contributes to risk-based internal audit and advisory engagements. This role is responsible for executing audit procedures, including walkthroughs and testing of control design and operating effectiveness, with a primary focus on IT General Controls (ITGCs), automated controls, and IT-dependent controls. The Senior IT Internal Auditor performs audit procedures with moderate supervision and contributes to the delivery of high-quality audit and advisory engagements. The position requires close collaboration with control owners, IT teams, and external auditors to ensure timely and high-quality audit execution. The IT Internal Auditor also contributes to broader internal audit initiatives by identifying risks, evaluating control environments, and providing recommendations to enhance operational effectiveness and compliance. This position is a hybrid role requiring three days in the home office based in Richmond, VA. The Senior IT Internal Auditor reports to the IT Internal Audit Manager based in Richmond, VA.

Requirements

Bachelor’s degree in accounting, Finance, Information Systems, or a related field.
Minimum of 4+ years of relevant experience in IT audit, internal audit, or information systems control environments.
Proficiency in Microsoft Office suite.
Strong written and verbal communication skills.
Ability to work independently while contributing effectively within a team environment.
Curiosity and passion for understanding emerging technology, cyber, and AI‑related risks.
Experience with information systems auditing, SOX compliance, and internal controls frameworks.
Strong analytical, organizational, and problem-solving skills with attention to detail.

Nice To Haves

Experience in public accounting (assurance or advisory), with Big Four or a reputable regional firm, preferred.
Knowledge of generally accepted accounting principles (GAAP), the IIA International Professional Practices Framework (IPPF), COSO’s Internal Control – Integrated Framework, preferred.
Certified Information Systems Auditor (CISA)
Certified Internal Auditor (CIA)
Certified Public Accountant (CPA)

Responsibilities

Participate in the planning, execution, and completion of risk-based internal IT audits covering infrastructure, applications, cybersecurity, data governance, technology operations, business continuity processes, and IT‑enabled business areas.
Perform design and operating effectiveness testing of IT general controls, including ITGCs, automated controls, and key reports/IT-dependent controls.
Participate in the annual risk assessment of IT audit topics and support the development of the annual IT audit plan.
Work collaboratively with colleagues at all levels to understand, plan, and perform IT audits and tests of controls.
Work collaboratively with external auditors, including supporting reliance activities and coordinating testing efforts.
Perform special projects, as assigned.
Demonstrate sound judgment, maintain confidentiality, and handle sensitive information appropriately.
Conduct Standards You must act with integrity You must act with due skill, care and diligence You must be open and cooperative with the CBI, FCA, the PRA and other regulators You must pay due regard to the interests of customers and treat them fairly You must observe proper standards of market conduct You must act to deliver good outcomes for retail customers