Senior Internal IT Auditor (Hybrid)

The State Corporation Commission's Office of Internal Audit seeks a Senior Information Technology Auditor to plan, conduct, and report on complex IT, cybersecurity, and operational compliance audits in accordance with professional standards. The role is based in Richmond, Virginia on a hybrid schedule (2 remote, 3 in-office days weekly) and involves the full lifecycle of IT audit engagements from risk assessment through reporting findings and recommendations to management.

Key qualifications:

• Independently perform full lifecycle IT audit engagements including risk assessment, planning, control evaluation, and reporting
• Conduct walkthroughs, interviews, data analysis, and testing to evaluate design and operating effectiveness of internal controls
• Identify root causes, business impacts, and practical recommendations to strengthen governance and risk management
• Monitor Virginia Information Technology Agency SEC 530 (NIST 800-53) and audit legislation
• Foster collaborative relationships while maintaining organizational independence and objectivity