To Apply for this Job Click Here
Always Connecting, Always Evolving.
TECHEAD is seeking qualified applicants for the following Contract (6-12 Months) position – Senior IT Auditor / Richmond VA – (JOB-22810). If you are looking for a new opportunity and this position looks to be a fit, please apply to see the TECHEAD difference that has made us successful for 30+ years!
You can find more about our team and values by checking us out at TECHEAD.com or on Glassdoor
Job Details:
Title: Senior IT Auditor
Location: Richmond, VA
Compensation: $ – $ /
Work Type: Contract (6-12 Months)
Work Location: Hybrid
Job Description:
We are seeking an exceptionally strong IT Auditor for our client, within its Office of Internal Audit to evaluate technology systems, risk management, and cybersecurity compliance. This individual will have experience conducting or supporting information technology audits, risk assessments, and evaluating IT infrastructure, networking, databases, or cloud environments.
Job Duties & Responsibilities
Audits & Risk Management: Execute IT risk assessments, assist in building audit plans, and conduct full-lifecycle IT and performance audits.
Control Testing & Compliance: Evaluate internal controls, document workpapers, and test for cybersecurity and policy compliance under IIA standards.
Recommendations & Monitoring: Formulate corrective action plans, track remediation efforts, and communicate findings through interviews and presentations.
Extensive experience performing the full lifecycle of an IT audit engagement, including:
o Risk assessment: Support and assist with IT risk assessments, develop audit plans, and perform IT and performance audits aligned with Institute of Internal Auditors (IIA) Standards
o Planning and scoping
o Development of audit programs
o Control evaluation and testing: Conduct testing for policy, procedure, and cybersecurity compliance, including general IT controls and application controls
o Workpaper documentation and reporting: Prepare clear audit workpapers, document findings, analyze root causes and business impacts, and help develop practical recommendations to strengthen governance and risk management.
o Development of findings: Monitor and track identified control deficiencies, corrective action plans (CAPs), remediation timelines, and maintain audit tracking
o Recommendations, and communication of results to management
o Assist in the development of risk-based IT annual and tri-annual plans: Contribute to presentations, annual audit planning, and special audit projects
Deep knowledge in GRC tooling, specifically leveraging ServiceNow GRC, ServiceNow modules Policy & Compliance, Risk Management, Audit Management and Archer GRC.
Highly Proficient in technical environments using SQL data extraction, cloud platforms (AWS, Azure, GCP), and IAM.
Perform walkthroughs, interviews, data analysis, and testing to evaluate the design and operating effectiveness of internal controls
Proven track record in the validation of remediation evidence for regulatory findings, including MRAs and MRIAs.
Identify root causes, business impacts, and practical recommendations that strengthen governance, risk management, and internal controls
Conduct meetings, walkthroughs, interviews, entrance conferences, status meetings, and exit conferences with professionalism and confidence
Monitor and track identified control deficiencies, corrective action plans (CAPs), and remediation timelines
Foster collaborative relationships by positioning OIA as a trusted advisor while maintaining organizational independence and objectivity
Monitor SEC 530 (NIST800-53) and other audit legislation; and recommend policy and procedure development and/or modification
Exceptional interpersonal and communication skills collaborating with cross-functional engineering, legal, and executive
Education & Experience: A bachelors degree in IT, cybersecurity, data analysis, or business, paired with practical experience…