Senior IT Internal Auditor (Hybrid)

State Corporation Commission (SCC)

$72K — $90K *
Information Technology
Less than 5 years of experience
Job Overview by Ladders

Qualifications

  • 5+ years of experience in IT auditing, cybersecurity, or a related field
  • Strong understanding of risk-based audit methodologies
  • Familiarity with auditing standards and compliance requirements
  • Excellent analytical and communication skills
  • Ability to present complex information clearly to stakeholders
  • Proficiency in data analysis techniques and tools
  • Relevant certifications, such as CISA or CISSP, are preferred

Responsibilities

  • Plan and conduct IT, cybersecurity, and operational audits
  • Develop IT audit plans based on risk assessments
  • Create audit objectives and testing strategies
  • Evaluate internal controls through data analysis and interviews
  • Provide actionable recommendations for governance improvements
  • Conduct various meetings to discuss audit processes
  • Monitor control deficiencies and track remediation plans

Benefits

  • Hybrid work schedule with both remote and in-office options
  • Career growth opportunities and professional development
  • On-the-job training and support for certifications
  • A collaborative work environment within a trusted advisory role
  • Focus on compliance with state legislation and standards
Full Job Description
Additional Detail

Senior Internal IT Auditor

Starting Salary Range: $72,946 - $90,000

The State Corporation Commission ("SCC" or "Commission") Office of Internal Audit seeks a talented and motivated Senior Information Technology ("IT") Auditor to plan, conduct and report on complex information technology, cybersecurity, and operational compliance audits in accordance with professional auditing standards and the SCC's Office of Internal Audit (OIA) Audit Manual plan. This position is based in Richmond, Virginia and operates on a hybrid schedule, including remote and in-office work each week (Monday - Friday). The SCC offers career growth and professional development opportunities including on-the-job training, certifications, and designations.

Essential Duties and Responsibilities
• Plan and conduct complex IT, cybersecurity, operational, and compliance audits using a risk-based audit methodology
• Assist in the development of risk-based IT annual and tri-annual plans
• Develop audit objectives, scope, testing strategies, and work programs that align with organizational risks
• Perform walkthroughs, interviews, data analysis, and testing to evaluate the design and operating effectiveness of internal controls
• Identify root causes, business impacts, and practical recommendations that strengthen governance, risk management, and internal controls
• Conduct meetings, walkthroughs, interviews, entrance conferences, status meetings, and exit conferences with professionalism and confidence
• Present audit observations, recommendations, and conclusions clearly and effectively to management
• Monitor and track identified control deficiencies, corrective action plans (CAPs), and remediation timelines
• Foster collaborative relationships by positioning OIA as a trusted advisor while maintaining organizational independence and objectivity
• Monitor Virginia Information Technology Agency SEC 530 and other audit legislation; and recommending policy and procedure development and/or modification
• Perform other related work as required

Please Note: SCC only accepts applications received through its career center site. Applications submitted through Virginia Jobs site directly will not be considered.
For more information and to apply for this position directly on the SCC Career Center website, click the Additional Detail button on this page.
To view all current SCC job openings, visit the SCC Career Center website and click the Search button under Job Search.

Similar Jobs

More Jobs at State Corporation Commission (SCC)

More Information Technology Jobs

Find similar Senior IT Internal Auditor (Hybrid) jobs: