> Markdown version of [/jobs/ext/3095593-it-security-audit-manager](https://www.wearedevelopers.com/jobs/ext/3095593-it-security-audit-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Audit Manager

- **Company:** vTech Solution Inc
- **Location:** Richmond, VA, United States
- **Experience:** Expert
- **Salary:** $96,500.0 - $110,100.0
- **Contract:** Temporary to permanent
- **Skills:** Software as a Service, Cyber Security, Information Technology Audit
- **Published:** September 26, 2026
- **Apply:** https://www.careerjet.com/jobad/us63411ef1a86ef568ff48bb83613435e7

## About the Role

* 10+ years of IT audit, cybersecurity assurance, technology risk, or compliance experience.
 * 5+ years leading IT security or system compliance audits.
 * Experience with Commonwealth of Virginia standards such as SEC530, SEC502, and SEC520.
 * Experience auditing financial, tax, payment-processing, or revenue systems handling sensitive financial data.
 * Knowledge of NIST SP 800-53 control assessments.
 * Experience preparing audit programs, work papers, findings, corrective action plans, and final reports.
 * Government or regulated-industry audit experience.
 * Strong skills in evidence sufficiency, work-paper review, findings/report development, and third-party/SaaS risk assessment.
 * Project, schedule, risk, and stakeholder management skills.
 * CISA certification required or strongly preferred.

Preferred Skills & Certifications:

 * Commonwealth of Virginia IT audit experience.
 * PMP certification strongly preferred.
 * CIA, CISSP, or CRISC certifications desirable.

Special Considerations:

 * Must ensure audit compliance with GAGAS or IIA Global Internal Audit Standards.

## Description

The IT Security Audit Manager / Lead Auditor is responsible for leading and managing SEC530 security audits across multiple systems including Fairfax Quick Modules, PrintSafe, and Prisma Print. This role acts as the primary client contact and oversees all aspects of audit planning, execution, findings, reporting, and quality assurance to ensure compliance with relevant standards. Responsibilities:

 * Develop project plans, audit schedules, and SEC530 audit programs.
 * Manage entrance conferences, evidence requests, interviews, weekly reporting, findings reviews, and exit conferences.
 * Determine control applicability and approve sampling and testing procedures.
 * Review audit evidence and work papers for completeness and sufficiency.
 * Ensure inquiry is not the primary evidence source and validate timeliness of access termination testing.
 * Develop findings covering condition, criteria, cause, effect, and recommendations.
 * Prepare and finalize separate audit reports for each system.
 * Coordinate management corrective action plans and final deliverable acceptance.
 * Ensure compliance with GAGAS or IIA Global Internal Audit Standards., Job Summary: The IT Security Audit Manager / Lead Auditor is responsible for leading and managing SEC530 security compliance audits across multiple systems, acting as the primary…
 + 14 hours ago
 + Apply easily, Senior Staff Auditor, Bank and Support Functions Audit (Hybrid) The Internal Audit function within Capital One is a dedicated group of audit professionals focused on delivering t…
 + 1 month ago
+


## Related Videos

- [Outsmarting the System: What Game Cheaters Can Teach Us About Cyber Security](https://www.wearedevelopers.com/videos/1396-outsmarting-the-system-what-game-cheaters-can-teach-us-about-cyber-security)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Fireside Chat: AI and Sustainability - Thorsten Jonas](https://www.wearedevelopers.com/videos/1769-fireside-chat-ai-and-sustainability-thorsten-jonas)
- [Automated Security for the Entire SDLC](https://www.wearedevelopers.com/videos/100323-automated-security-for-the-entire-sdlc)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [How to Find Tech Jobs in Vienna](https://www.wearedevelopers.com/magazine/292-how-to-find-tech-jobs-in-vienna)
- [How should you format your IT resume?](https://www.wearedevelopers.com/magazine/68-how-should-you-format-your-it-resume)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Trustworthy AI Starts at Deployment: 5 Checks Before You Ship](https://www.wearedevelopers.com/magazine/753-trustworthy-ai-starts-at-deployment-5-checks-before-you-ship)