Information Tech Audit Manager

Job no:
Work type: Full-Time (Salaried)
Location: Richmond (City), Virginia
Categories: Health and Human Services

Title: Information Tech Audit Manager

State Role Title: Audit Services Manager II

Hiring Range: $142,508 - $153,828

Pay Band: 6

Agency: Dept of Med Assistance Svcs

Location: Dept of Medical Asst Services

Agency Website: www.dmas.virginia.gov

Recruitment Type: General Public - G

Job Duties

The Department of Medical Assistance Services (DMAS) is excited to offer a competitive opportunity to serve as the Information Tech Audit Manager in the Internal Audit Division.

Job responsibilities will include, but are not limited to:

The IT Audit Manager is responsible for providing management direction in planning all risk-based information technology (including IT security compliance audits) and in the third-party risk assurance in audit and risk management.

The position supervises IA staff on audits, confidential investigations, and special projects.

This position manages and supervises the work and performance of IT Senior Auditor and the Senior Vendor Compliance Analyst.

The position will be a proactive partner in interfacing with all levels of management throughout the Agency, including the Executive Leadership Team and will have full responsibility to plan, conduct, and direct multiple, complex audit engagements concurrently.

Assists the IA Director in developing and implementing a quality assurance review of the audit work being performed by IA staff to ensure compliance with departmental and professional standards.

Reviews and approves audit staff work plans and documentation to ensure the quality of IA staff or contractor work; that the internal control structure is adequate and effective; that operations function
efficiently; and that business processes operate in accordance with applicable laws, regulations and established procedures.

Develops audit reports of findings and test results, makes recommendations to management, and appraises the adequacy of corrective action plans in response to IA findings and recommendations.

The business needs for this position have in office requirements to include but are not limited to attending in-person training and/or internal and external stakeholder's meetings as needed as well as travel within the State of Virginia as needed.

Located in beautiful Central Virginia, the Richmond area puts you just 2 hours from the Blue Ridge Mountains, Virginia Beach and Washington DC. To learn more about the Richmond, VA area visit: https://www.virginia.org/

Minimum Qualifications

Competitive candidates will meet these minimum qualifications:

Considerable experience auditing information technology and security controls against the Commonwealth of Virginia's IT Information Security Standard (SEC530) in accordance with the IT Security Audit Standard (SEC502-03).

Experience reviewing third-party vendor audit reports and SOC reports and reporting risks to management.

Experience reviewing and editing the work of audit staff and performing quality reviews of audit work.

Considerable experience managing and conducting internal audits of IT controls identifying high-risk systems, functions, and controls, and scoping audits based on risk.

Considerable experience with Microsoft Office, SharePoint, and Teams.

Considerable work-related experience interpreting and applying federal, state laws, policies, and regulations.

Experience meeting deadlines.

Considerable experience making presentations to internal and external stakeholders.

Considerable knowledge of the Institute of Internal Auditors (IIA) and/or Government Accountability Office (GAO) auditing standards.

Experience supervising, mentoring, or leading IT audit staff.

Additional Considerations

Competitive candidates should meet these additional considerations:

Certification as a CISA, CIA, CISSP, CISM, or CPA.

Pursuant to the Office of State Inspector General Directive - Oversight of State and Specific Nonstate Agencies' Internal Audit Programs, all executive branch state agencies and institutions with internal audit functions shall adopt and prescribe to the Definition of Internal Auditing, Code of Ethics, and International Standards for the Professional Practice of Internal Auditing (standards), as promulgated by the Institute of Internal Auditors (IIA).

The IIA's Attribute Standard 1210 - Proficiency states that Internal Auditors must possess the knowledge, skills and other competencies needed to perform their indivisible responsibilities. The IIA's interpretation states that Internal Auditor are encouraged to demonstrate their proficiency in by obtaining appropriate professional certifications and qualifications, such as the Certified Internal Auditor designation and other designations offered by the IIA and other appropriate professional organizations.

Special Instructions

You will be provided a confirmation of receipt when your application and/or résumé is submitted successfully. Please refer to "Your Application" in your account to check the status of your application for this position.

The Virginia Department of Medical Assistance Services (DMAS) does not offer employment-based Sponsorship. Selected candidates will have their work authorization completed using the E-Verify Program.

The Department of Medical Assistance Services (DMAS) is an Executive Branch agency that will adhere to all policies and procedures, to include the Commonwealth's Department of Human Resource Management Policy 1.61 Teleworking. This position could be expected to work in the office as driven by business needs.

Telework arrangements are a privilege and may be rescinded at any time based on performance and/or business need. The agency reserves the right to modify or terminate a telework arrangement, provided that reasonable notice is given to the employee.

This position requires a fingerprint based Criminal History Background Check, Education Checks if applicable, Work History Verification with references.

This position requires the submission of a Statement of Economic Interest (financial disclosure).

If you wish to apply for a job with the Department of Medical Assistance Services, an application and/or resume for employment must be submitted electronically through this website. Mailed, faxed, emailed, or hand-delivered applications/resumes will not be accepted. Consideration for an interview is based solely on the relevant information presented in the state application and/or resume submitted before the closing date.

Applications and/or resumes should include relevant work history which indicates your qualifications for this position.

Contact Information

Name: DMAS Talent Acquisition

Phone: 804 - 225 - 4407

Email: [email protected]

Advertised: 25 Sep 2026 Eastern Daylight Time
Applications close: 13 Oct 2026 Eastern Daylight Time

Whatsapp Facebook LinkedIn Email App