Senior IT Auditor

Title: Senior IT Auditor

Hiring Range: $88,001 - $117,600

Pay Band: UG

Agency: Virginia Lottery

Location: Virginia Lottery

Agency Website:

Recruitment Type: General Public - G

Job Duties

For more than three decades, the Virginia Lottery has worked to build a strong reputation, one synonymous with providing fun, entertaining experiences and doing so responsibly and with integrity. Proceeds from traditional Lottery games support K-12 public education in Virginia. Taxes generated by sports wagering and casino gaming, which are regulated by the Lottery, benefit other priorities of the Commonwealth.

The Virginia Lottery, an independent state agency, is currently seeking a Senior IT Auditor to join its Audit and Security team. This position is located in Richmond, Virginia.

The Senior IT Auditor will:

Plan assigned audits:
• Develop audit objectives and scope for assigned audits.
• Identify risks and evaluate the effectiveness of internal controls.
• Develop audit programs and testing procedures based on audit objectives, risks, control assessments, state standards, and Lottery policies.
• Maintain compliance with Commonwealth IT Security Audit Standards, including reporting requirements and deadlines.

Perform audit test work:
• Conduct audit fieldwork and document result in work papers.
• Evaluate internal controls and perform audit testing using appropriate audit techniques and sampling methods.
• Use data analysis, observations, interviews, and transaction testing to assess control effectiveness.
• Test controls to evaluate the completeness, accuracy, and reliability of information.
• Submit audit documentation for management review in a timely manner.

Report audit findings and recommendations to management:
• Make recommended changes to policies, procedures, and controls based on audit results.
• Develop and document straightforward audit findings and corrective action recommendations.
• Communicate significant audit issues and concerns to the Internal Audit Manager.
• Obtain management responses to audit findings and collaborate with the auditee on developing final corrective action plans.
• Prepare clear and concise audit reports that communicate audit results and corrective action plans.

Participate in security meetings as a consultant:
• Consult with management and system owners on information technology and cybersecurity controls, providing guidance on IT policies, standards, procedures, security practices, and compliance with applicable security and audit requirements.
• Participate in security and governance meetings with stakeholders and third-party vendors to provide an independent audit perspective.

Complete administrative work, training, special projects, reviews, or investigations assigned by Lottery Management:
• Assist with the development and maintenance of audit policies, procedures, manuals, and the annual audit plan.
• Maintain audit knowledge, skills, and professional certifications through continuing education and professional development.
• Complete special projects, reviews, investigations, and other duties as assigned.

Minimum Qualifications

The person selected for this position will have:
• Bachelor's Degree from an accredited 4-year college or university with major studies in Auditing/Accounting and/or Information Systems.
• Five years of experience as an Internal/External Information Technology Auditor with working knowledge of computer-assisted audit techniques.
• Extensive knowledge of internal control standards, generally accepted auditing standards, State and Federal regulations as they relate to Lottery operations, automated spreadsheets, database applications, data processing (including system design and documentation), and personal computers.
• Demonstrated ability to review functional areas and formulate applicable audit procedures.
• Proven ability to interpret applicable laws, regulations, and guidelines.
• Working knowledge of State and Federal information security standards and controls.
• Working knowledge of governance frameworks.
• Ability to evaluate controls over IT infrastructure, operating systems, network components, and business applications.
• Demonstrated ability to analyze data and use problem-solving techniques to generate recommendations to management, review and update policies and procedures, and meet deadlines.
• Exceptional communication (oral and written), interpersonal, and listening skills; experience writing audit reports and presenting results to senior management.
• Proficiency in desktop applications such as, but not limited to, Microsoft Word, Excel, Visio, and PowerPoint, as well as audit software (such as ACL, Pentana, TeamMate, etc.).
• Ability to use computer systems and applications in this highly automated environment.

A comparable amount of training and experience may be substituted for the minimum qualifications.

Additional Considerations

Professional certifications such as Certified Public Accountant (CPA), Certified Information Systems Auditor (CISA), or Certified Internal Auditor (CIA) are preferred.

Experience with using audit management software preferred.

Information Security Audit experience:

Experience with use of query tools (i.e., ACL, Business Objects, SQL) to retrieve and analyze data; demonstrated knowledge of IT operating systems, internet, LAN, WAN, and database applications, and data processing (including system design and documentation).

Special Instructions

You will be provided a confirmation of receipt when your application and/or résumé is submitted successfully. Please refer to "Your Application" in your account to check the status of your application for this position.

The Virginia Lottery is an independent state agency, and as such all positions are exempt from the Virginia Personnel Act, as well as most Executive Branch human resources policies. The Virginia Lottery is a fun place to work and values diversity in the workforce. We offer a competitive salary and excellent benefits. The Virginia Lottery is an Equal Opportunity Employer. Only online applications completed in their entirety will be accepted for this position. The Virginia Lottery will provide, if requested, reasonable accommodation to applicants in need of accommodation in order to provide access to the application and/or interview process. If any assistance is needed when applying online, please contact the Virginia Lottery's Human Resources Department at View phone number on click.appcast.io. Applications will be accepted until a suitable pool of candidates is received. After 5 business days, this position may be closed at any time.

Contact Information

Name: Human Resources

Phone: View phone number on click.appcast.io

Email: N/A

In support of the Commonwealth's commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly COD) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS/DBVI to get their AHP Letter. Requesting an AHP Letter can be found at AHP Letter or by calling DARS at View phone number on click.appcast.io.

Note : Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.

Each agency within the Commonwealth of Virginia is dedicated to recruiting, supporting, and maintaining a competent and diverse work force. Equal Opportunity Employer