IT Security Audit Manager / Lead Auditor

Job Summary:

Seeking an IT Security Audit Manager / Lead Auditor to lead and manage SEC530 security audits for Fairfax Quick Modules, PrintSafe, and Prisma Print. This role serves as the primary client contact and holds full accountability for audit planning, delivery, findings, reports, work papers, and overall quality.

Key Responsibilities:

Develop the project plan, audit schedule, and SEC530 audit programs

Manage entrance conferences, evidence requests, interviews, weekly reporting, findings reviews, and exit conferences

Determine control applicability and approve sampling/testing procedures

Review audit evidence and work papers for completeness and sufficiency

Ensure inquiry is not the primary evidence source; validate timeliness of access termination testing

Develop findings covering condition, criteria, cause, effect, and recommendation

Prepare and finalize separate audit reports for each system

Coordinate management corrective action plans and final deliverable acceptance

Ensure compliance with GAGAS or IIA Global Internal Audit Standards

Required Skills & Certifications:

10+ years of IT audit, cybersecurity assurance, technology risk, or compliance experience

5+ years leading IT security or system compliance audits

Experience with one or more Commonwealth of Virginia standards: SEC530 (Information Security), SEC502 (IT Security Audit), SEC520 (IT Risk Management)

Experience auditing financial, tax, payment-processing, or revenue systems handling sensitive financial data

Experience with NIST SP 800-53 control assessments

Experience preparing audit programs, work papers, findings, corrective action plans, and final reports

Government or regulated-industry audit experience

Strong skills in evidence sufficiency, work-paper review, findings/report development, and third-party/SaaS risk assessment

Project, schedule, risk, and stakeholder management skills

CISA certification required or strongly preferred

Preferred Skills & Certifications:

Commonwealth of Virginia IT audit experience

PMP strongly preferred

CIA, CISSP, or CRISC desirable

Scheduling:

Duration: 3 Months

Working: 40 hrs/week