IT Security Audit Manager / Lead Auditor

Job Summary: Seeking an IT Security Audit Manager / Lead Auditor to lead and manage SEC530 security audits for Fairfax Quick Modules, PrintSafe, and Prisma Print. This role serves as the primary client contact and holds full accountability for audit planning, delivery, findings, reports, work papers, and overall quality. Key Responsibilities: Develop the project plan, audit schedule, and SEC530 audit programs Manage entrance conferences, evidence requests, interviews, weekly reporting, findings reviews, and exit conferences Determine control applicability and approve sampling/testing procedures Review audit evidence and work papers for completeness and sufficiency Ensure inquiry is not the primary evidence source; validate timeliness of access termination testing Develop findings covering condition, criteria, cause, effect, and recommendation Prepare and finalize separate audit reports for each system Coordinate management corrective action plans and final deliverable acceptance Ensure compliance with GAGAS or IIA Global Internal Audit Standards Required Skills & Certifications: 10+ years of IT audit, cybersecurity assurance, technology risk, or compliance experience 5+ years leading IT security or system compliance audits Experience with one or more Commonwealth of Virginia standards: SEC530 (Information Security), SEC502 (IT Security Audit), SEC520 (IT Risk Management) Experience auditing financial, tax, payment-processing, or revenue systems handling sensitive financial data Experience with NIST SP 800-53 control assessments Experience preparing audit programs, work papers, findings, corrective action plans, and final reports Government or regulated-industry audit experience Strong skills in evidence sufficiency, work-paper review, findings/report development, and third-party/SaaS risk assessment Project, schedule, risk, and stakeholder management skills CISA certification required or strongly preferred Preferred Skills & Certifications: Commonwealth of Virginia IT audit experience PMP strongly preferred CIA, CISSP, or CRISC desirable Scheduling: Duration: 3 Months Working: 40 hrs/week