IT Security Audit Manager

Job Summary:

The IT Security Audit Manager / Lead Auditor is responsible for leading and managing SEC530 security audits across multiple systems including Fairfax Quick Modules, PrintSafe, and Prisma Print. This role acts as the primary client contact and oversees all aspects of audit planning, execution, findings, reporting, and quality assurance to ensure compliance with relevant standards. Responsibilities:

• Develop project plans, audit schedules, and SEC530 audit programs.
• Manage entrance conferences, evidence requests, interviews, weekly reporting, findings reviews, and exit conferences.
• Determine control applicability and approve sampling and testing procedures.
• Review audit evidence and work papers for completeness and sufficiency.
• Ensure inquiry is not the primary evidence source and validate timeliness of access termination testing.
• Develop findings covering condition, criteria, cause, effect, and recommendations.
• Prepare and finalize separate audit reports for each system.
• Coordinate management corrective action plans and final deliverable acceptance.
• Ensure compliance with GAGAS or IIA Global Internal Audit Standards.

Required Skills & Certifications:

• 10+ years of IT audit, cybersecurity assurance, technology risk, or compliance experience.
• 5+ years leading IT security or system compliance audits.
• Experience with Commonwealth of Virginia standards such as SEC530, SEC502, and SEC520.
• Experience auditing financial, tax, payment-processing, or revenue systems handling sensitive financial data.
• Knowledge of NIST SP 800-53 control assessments.
• Experience preparing audit programs, work papers, findings, corrective action plans, and final reports.
• Government or regulated-industry audit experience.
• Strong skills in evidence sufficiency, work-paper review, findings/report development, and third-party/SaaS risk assessment.
• Project, schedule, risk, and stakeholder management skills.
• CISA certification required or strongly preferred.

Preferred Skills & Certifications:

• Commonwealth of Virginia IT audit experience.
• PMP certification strongly preferred.
• CIA, CISSP, or CRISC certifications desirable.

Special Considerations:

• Must ensure audit compliance with GAGAS or IIA Global Internal Audit Standards.

Scheduling:

• Duration: 3 months.
• Work schedule: 40 hours per week.