Remote Internal Audit Risk Management Jobs in Virginia

Title: Vulnerability and Audit Remediation Specialist (Henrico)

State Role Title: Info Technology Specialist III

Hiring Range: $90,000 - $110,000

Pay Band: 6

Agency: Virginia Employment Commission

Location: VEC CENTRAL OFFICE

Agency Website: https://www.vec.virginia.gov/

Recruitment Type: General Public - G

Job Duties

The Virginia Employment Commission (VEC) is seeking a Vulnerability and Audit Remediation Specialist who will lead the agency's efforts to identify, prioritize, and resolve security vulnerabilities while coordinating the closure of technical audit findings that reduce operational and security risk. In this role, you will analyze vulnerability scan results, collaborate with system owners and technical teams to implement patches and mitigation strategies, track and validate remediation activities, and ensure timely closure of findings in alignment with compliance requirements. You will also serve as the central point of coordination for audit findings, translate technical and regulatory requirements into actionable tasks, maintain a comprehensive remediation register, support evidence collection for audits, and partner across IT, security, compliance, and development teams to drive effective risk reduction. This position plays a critical role in strengthening the agency's security posture and supporting governance efforts that protect systems, data, and mission operations.
Join the VEC and be part of a mission-driven agency dedicated to supporting workers, strengthening communities, and promoting economic stability across the Commonwealth. We administer Virginia's Unemployment Insurance (UI) benefits program with a commitment to providing customer-centered, accessible, inclusive, and impactful services to support our shared mission: lifting up Virginia, one unemployed worker at a time. The VEC is also an integral part of a historic milestone as Virginia becomes the first state in the South to offer Paid Family and Medical Leave (PFML). Our agency will be responsible for standing up and administering this new program, which will expand the vital support we provide for employees when they need it most.
We offer paid leave; a minimum of 13 paid state holidays per year; medical, dental, vision, and life insurance options; retirement plans (including 401a Cash Match and 457 Deferred Compensation Plan for classified positions); and are a federally recognized Public Service Loan Forgiveness (PSLF) employer.
If you're motivated by public service, continuous improvement, and meaningful work that supports opportunity for all, the VEC is a place where your contributions matter!

Minimum Qualifications

Strong understanding of operating systems (Windows, Linux), networks, and application architectures.
Experience with vulnerability scanning tools (e.g., Tenable, Qualys, Rapid7, Nucleus).
Knowledge of patch management processes and secure configuration standards (CIS, NIST).
Familiarity with cloud environments (Azure, AWS) and containerized workloads (preferred).
Ability to analyze and resolve vulnerabilities under tight deadlines.
Strong attention to detail and ability to identify subtle or complex vulnerabilities.
Excellent organizational skills with the ability to manage multiple remediation streams simultaneously.
Ability to interpret audit findings and translate them into actionable tasks.
Strong problemsolving skills and the ability to work independently.
Ability to work effectively across IT, security, compliance, and development teams.
Clear written and verbal communication skills.
Ability to present technical information to nontechnical audiences.
Strong relationship building skills and the ability to influence without authority.

Additional Considerations

Demonstrated experience with vulnerability management, security operations, audit coordination, or system administration.
Experience supporting internal or external audits (SOC 2, PCIDSS, IRS, HIPAA, NIST).
Experience with ITSM tools for tracking remediation tasks.
Understanding of risk management and governance frameworks.

Special Instructions

You will be provided a confirmation of receipt when your application and/or resume is submitted successfully. Please refer to "Your Application" in your account to check the status of your application for this position.

Submission of an online application is required for this position. The VEC does not accept applications, resumes, cover letters, etc., in any other format. When applying for jobs, please ensure your online application and/or resume are complete with duties and skills associated with your work experience.
The Virginia Employment Commission is committed to upholding our values in our employment opportunities across the Commonwealth to people from all backgrounds, including all races, ethnicities, genders, and abilities. We are an Equal Opportunity Employer/Program, and a Virginia Values Veterans (V3) certified employer. AmeriCorps, Peace Corps, and other national service alumni are encouraged to apply.
The selected candidate must successfully pass a comprehensive background check including an FBI fingerprint background investigation and an Unemployment Insurance (UI) fraud background check.
Please carefully review the details of this recruitment including the location of the position and the posted salary before applying. The VEC does not provide relocation assistance, and no salary will be offered outside of the posted salary range / flat rate.
The VEC does not provide sponsorship; therefore, applicants must be a citizen or national of the U.S., a Lawful Permanent Resident, or an alien authorized to work in the US.
Auxiliary Aids and Services are available upon request to individuals with disabilities. Applicants needing accommodations should contact the Human Resource office for additional information.
A valid Virginia Driver's License is required to operate a state vehicle or if operating a personal vehicle while conducting business on behalf of the agency.
For the status of your application and this position, please refer to your PageUp / Jobs.Virginia.Gov account. We do not provide application status updates via email or telephone.
NOTICE: VEC will record information from each new employee's Form I-9 (Employment Eligibility Verification) into the Federal E-Verify system to confirm identity and work authorization.

Contact Information

Name: VEC Human Resources / Recruitment

Phone: For the most up-to-date status of your application, please refer to your Jobs.Virginia.Gov account. We do not provide application status updates via phone.

Email: Careers@vec.virginia.gov for recruitment related questions. Emailed applications, resumes, or cover letters will not be accepted. For the most up-to-date status of your application, please refer to your Jobs.Virginia.Gov account.

In support of the Commonwealth's commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly COD) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS/DBVI to get their AHP Letter. Requesting an AHP Letter can be found at AHP Letter or by calling DARS at 800-552-5019.

Note: Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.