Internal IT Auditor/Senior

Title: Senior IT Auditor
Virginia Lottery
Virginia Lottery
Agency Website:
Proceeds from traditional Lottery games support K-12 public education in Virginia. Taxes generated by sports wagering and casino gaming, which are regulated by the Lottery, benefit other priorities of the Commonwealth.
The Virginia Lottery, an independent state agency, is currently seeking a Senior IT Auditor to join its Audit and Security team. The Senior IT Auditor will:
Plan assigned audits:

• Develop audit objectives and scope for assigned audits.
• Identify risks and evaluate the effectiveness of internal controls.
• Develop audit programs and testing procedures based on audit objectives, risks, control assessments, state standards, and Lottery policies.
• Maintain compliance with Commonwealth IT Security Audit Standards, including reporting requirements and deadlines.

Perform audit test work:

• Conduct audit fieldwork and document result in work papers.
• Evaluate internal controls and perform audit testing using appropriate audit techniques and sampling methods.
• Use data analysis, observations, interviews, and transaction testing to assess control effectiveness.
• Submit audit documentation for management review in a timely manner.

Report audit findings and recommendations to management:

• Make recommended changes to policies, procedures, and controls based on audit results.
• Develop and document straightforward audit findings and corrective action recommendations.
• Communicate significant audit issues and concerns to the Internal Audit Manager.
• Obtain management responses to audit findings and collaborate with the auditee on developing final corrective action plans.
• Prepare clear and concise audit reports that communicate audit results and corrective action plans.

Consult with management and system owners on information technology and cybersecurity controls, providing guidance on IT policies, standards, procedures, security practices, and compliance with applicable security and audit requirements.
• Participate in security and governance meetings with stakeholders and third-party vendors to provide an independent audit perspective.
Complete administrative work, training, special projects, reviews, or investigations assigned by Lottery Management:

• Assist with the development and maintenance of audit policies, procedures, manuals, and the annual audit plan.
• Maintain audit knowledge, skills, and professional certifications through continuing education and professional development.
• Complete special projects, reviews, investigations, and other duties as assigned.

Bachelor's Degree from an accredited 4-year college or university with major studies in Auditing/Accounting and/or Information Systems.

• Five years of experience as an Internal/External Information Technology Auditor with working knowledge of computer-assisted audit techniques.
• Extensive knowledge of internal control standards, generally accepted auditing standards, State and Federal regulations as they relate to Lottery operations, automated spreadsheets, database applications, data processing (including system design and documentation), and personal computers.
• Demonstrated ability to review functional areas and formulate applicable audit procedures.
• Working knowledge of State and Federal information security standards and controls.
• Ability to evaluate controls over IT infrastructure, operating systems, network components, and business applications.
• Demonstrated ability to analyze data and use problem-solving techniques to generate recommendations to management, review and update policies and procedures, and meet deadlines.
• experience writing audit reports and presenting results to senior management.
• Proficiency in desktop applications such as, but not limited to, Microsoft Word, Excel, Visio, and PowerPoint, as well as audit software (such as ACL, Pentana, TeamMate, etc.).
• Ability to use computer systems and applications in this highly automated environment.

A comparable amount of training and experience may be substituted for the minimum qualifications.
Professional certifications such as Certified Public Accountant (CPA), Certified Information Systems Auditor (CISA), or Certified Internal Auditor (CIA) are preferred.
Experience with using audit management software preferred.
Information Security Audit experience:
ACL, Business Objects, SQL) to retrieve and analyze data; demonstrated knowledge of IT operating systems, internet, LAN, WAN, and database applications, and data processing (including system design and documentation).
You will be provided a confirmation of receipt when your application and/or résumé is submitted successfully. Please refer to "Your Application" in your account to check the status of your application for this position.
The Virginia Lottery is an independent state agency, and as such all positions are exempt from the Virginia Personnel Act, as well as most Executive Branch human resources policies. The Virginia Lottery is a fun place to work and values diversity in the workforce. Only online applications completed in their entirety will be accepted for this position. The Virginia Lottery will provide, if requested, reasonable accommodation to applicants in need of accommodation in order to provide access to the application and/or interview process. If any assistance is needed when applying online, please contact the Virginia Lottery's Human Resources Department at View phone number on click.appcast.io. Applications will be accepted until a suitable pool of candidates is received. Phone: View phone number on click.appcast.io
In support of the Commonwealth's commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS/DBVI to get their AHP Letter. Note : Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.