Senior Internal IT Auditor

Essential Duties and Responsibilities

• Plan and conduct complex IT, cybersecurity, operational, and compliance audits using a risk-based audit methodology
• Assist in the development of risk-based IT annual and tri-annual plans
• Develop audit objectives, scope, testing strategies, and work programs that align with organizational risks
• Perform walkthroughs, interviews, data analysis, and testing to evaluate the design and operating effectiveness of internal controls
• Identify root causes, business impacts, and practical recommendations that strengthen governance, risk management, and internal controls
• Conduct meetings, walkthroughs, interviews, entrance conferences, status meetings, and exit conferences with professionalism and confidence
• Present audit observations, recommendations, and conclusions clearly and effectively to management
• Monitor and track identified control deficiencies, corrective action plans (CAPs), and remediation timelines
• Foster collaborative relationships by positioning OIA as a trusted advisor while maintaining organizational independence and objectivity
• Monitor Virginia Information Technology Agency SEC 530 and other audit legislation; and recommend policy and procedure development and/or modification
• Perform other related work as required

Preferred Qualifications

• 4 or more years of relevant experience in auditing, accounting, and/or IT
• Direct work experience as an IT auditor is preferred, but not required
• Bachelor’s degree in Accounting, Economics, Finance, Information Systems or a related field
• Without a bachelor’s degree, 8 years of direct work experience is required
• Knowledge of federal and state audit laws, rules, and regulations
• Knowledge of IT principles and methods
• Ability to understand and to express ideas clearly, both verbally and in writing
• Ability to manage multiple audit engagements simultaneously
• Ability to collect and analyze data and evaluate processes and systems
• Ability to effectively manage tasks independently and as a member of a team
• Ability to establish and maintain professional working relationships with SCC staff, and representatives of the utilities and the general public
• Certification such as CPA, CFE, CISA, or CIA is a plus

How to Apply

Interested candidates are strongly encouraged to apply by August 7, 2026. If you are an external candidate, applications can be submitted on the SCC Career Center website at https://careercenter.scc.virginia.gov. If you are an internal candidate, apply using eSCC (Oracle) - iRecruitment Employee Candidate.