Information Tech Audit Manager

Job no: 5112584
Position type: Full-Time (Salaried)
Location: Richmond (City), Virginia
Division/Equivalent: Dept of Med Assistance Svcs
School/Unit: Dept of Med Assistance Svcs
Department/Office: Internal Audit
Categories: Health and Human Services

Apply now

Title: Information Tech Audit Manager

State Role Title: Audit Services Manager II

Hiring Range: $142,508 - $153,828

Pay Band: 6

Agency: Dept of Med Assistance Svcs

Location: Dept of Medical Asst Services

Agency Website: www.dmas.virginia.gov

Recruitment Type: General Public - G

Job Duties

The Department of Medical Assistance Services (DMAS) is excited to offer a competitive opportunity to serve as the Information Tech Audit Manager in the Internal Audit Division.

Job responsibilities will include, but are not limited to:

The IT Audit Manager is responsible for providing management direction in planning all risk-based information technology (including IT security compliance audits) and in the third-party risk assurance in audit and risk management.

The position supervises IA staff on audits, confidential investigations, and special projects.

This position manages and supervises the work and performance of IT Senior Auditor and the Senior Vendor Compliance Analyst.

The position will be a proactive partner in interfacing with all levels of management throughout the Agency, including the Executive Leadership Team and will have full responsibility to plan, conduct, and direct multiple, complex audit engagements concurrently.

Assists the IA Director in developing and implementing a quality assurance review of the audit work being performed by IA staff to ensure compliance with departmental and professional standards.

Reviews and approves audit staff work plans and documentation to ensure the quality of IA staff or contractor work; that the internal control structure is adequate and effective; that operations function
efficiently; and that business processes operate in accordance with applicable laws, regulations and established procedures.

Develops audit reports of findings and test results, makes recommendations to management, and appraises the adequacy of corrective action plans in response to IA findings and recommendations.

The business needs for this position have in office requirements to include but are not limited to attending in-person training and/or internal and external stakeholder's meetings as needed as well as travel within the State of Virginia as needed.

Located in beautiful Central Virginia, the Richmond area puts you just 2 hours from the Blue Ridge Mountains, Virginia Beach and Washington DC. To learn more about the Richmond, VA area visit: https://www.virginia.org/

The Department of Medical Assistance Services (DMAS) is working to improve the health and well-being of Virginians through access to high-quality health care coverage.

DMAS wants talented individuals who can align their experience with the mission of the agency and its core values – service, collaboration, trust, problem solving and adaptability.

At the Department of Medical Assistance Services (DMAS) we encourage and promote that you Come as you are | Become who you want to be | That is our promise.

Minimum Qualifications

Competitive candidates will meet these minimum qualifications:

Considerable experience auditing information technology and security controls against the Commonwealth of Virginia’s IT Information Security Standard (SEC530) in accordance with the IT Security Audit Standard (SEC502-03).

Experience reviewing third-party vendor audit reports and SOC reports and reporting risks to management.

Experience reviewing and editing the work of audit staff and performing quality reviews of audit work.

Considerable experience managing and conducting internal audits of IT controls identifying high-risk systems, functions, and controls, and scoping audits based on risk.

Considerable experience with Microsoft Office, SharePoint, and Teams.

Considerable work-related experience interpreting and applying federal, state laws, policies, and regulations.

Experience meeting deadlines.

Considerable experience making presentations to internal and external stakeholders.

Considerable knowledge of the Institute of Internal Auditors (IIA) and/or Government Accountability Office (GAO) auditing standards.

Experience supervising, mentoring, or leading IT audit staff.

Additional Considerations

Competitive candidates should meet these additional considerations:

Certification as a CISA, CIA, CISSP, CISM, or CPA.

Pursuant to the Office of State Inspector General Directive - Oversight of State and Specific Nonstate Agencies' Internal Audit Programs, all executive branch state agencies and institutions with internal audit functions shall adopt and prescribe to the Definition of Internal Auditing, Code of Ethics, and International Standards for the Professional Practice of Internal Auditing (standards), as promulgated by the Institute of Internal Auditors (IIA).

The IIA's Attribute Standard 1210 - Proficiency states that Internal Auditors must possess the knowledge, skills and other competencies needed to perform their indivisible responsibilities. The IIA's interpretation states that Internal Auditor are encouraged to demonstrate their proficiency in by obtaining appropriate professional certifications and qualifications, such as the Certified Internal Auditor designation and other designations offered by the IIA and other appropriate professional organizations.

Special Instructions

You will be provided a confirmation of receipt when your application and/or résumé is submitted successfully. Please refer to “Your Application” in your account to check the status of your application for this position.

The Virginia Department of Medical Assistance Services (DMAS) does not offer employment-based Sponsorship. Selected candidates will have their work authorization completed using the E‐Verify Program.

The Department of Medical Assistance Services (DMAS) is an Executive Branch agency that will adhere to all policies and procedures, to include the Commonwealth’s Department of Human Resource Management Policy 1.61 Teleworking. This position could be expected to work in the office as driven by business needs.

Telework arrangements are a privilege and may be rescinded at any time based on performance and/or business need. The agency reserves the right to modify or terminate a telework arrangement, provided that reasonable notice is given to the employee.

This position requires a fingerprint based Criminal History Background Check, Education Checks if applicable, Work History Verification with references.

This position requires the submission of a Statement of Economic Interest (financial disclosure).

If you wish to apply for a job with the Department of Medical Assistance Services, an application and/or resume for employment must be submitted electronically through this website. Mailed, faxed, emailed, or hand-delivered applications/resumes will not be accepted. Consideration for an interview is based solely on the relevant information presented in the state application and/or resume submitted before the closing date.

Applications and/or resumes should include relevant work history which indicates your qualifications for this position.

The Department of Medical Assistance Services practices fair and equal employment opportunity to all employees and applicants in accordance with applicable laws and regulations. It is our policy to prohibit discrimination on the basis of race, sex, color, national origin, religion, sexual orientation, gender identity, age, veteran status, political affiliation, genetics, or disability in the recruitment, selection, and hiring of its workforce.

In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth's Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly called a Certificate of Disability) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans may also apply via the AHP if they also provide an AHP Letter. To request an AHP Letter, use this link: https://www.dars.virginia.gov/drs/cpid/PWContact.aspx or call DARS at 800-552-5019, or DBVI at 800-622-2155

From July 1, 2026, through January 21, 2029, applicants who were involuntarily separated from employment with the Federal Government on or after January 1, 2025, due to a reduction in force, budget reduction, or workforce restructuring initiative may be eligible for HB494 Federal Employee Priority Consideration. Applicants seeking HB494 Federal Employee Priority Consideration must identify themselves within the state application process and provide supporting documentation, including a Standard Form 50 (SF-50), verifying their eligibility.

The Department of Medical Assistance Services is a V3 certified state agency that provides hiring preference to veterans and members of the reserves and/or National Guard in support of executive order 29, (2010). If you are a Veteran or Spouse of a Veteran or Active Military Member, DMAS encourages you to apply and respond accordingly on your state application.

Contact Information

Name: DMAS Talent Acquisition

Phone: 804 - 225 - 4407

Email: askhcdtalentacq@dmas.virginia.gov

 

In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly COD) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS/DBVI to get their AHP Letter. Requesting an AHP Letter can be found at AHP Letter or by calling DARS at 800-552-5019.

Note: Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.

Advertised: Eastern Daylight Time
Application close: Eastern Daylight Time

Apply now

Back to list Refer a friend