Sr. Auditor, IT Internal Audit

CarMax is hiring a Senior Auditor, IT Internal Audit to join its Corporate Office team in Richmond, Virginia — a full-time opportunity at one of the nation's most recognized automotive retailers.

About the Role

As a Senior Auditor on the IT Internal Audit team at CarMax's West Creek headquarters, you will serve as a key voice in evaluating the effectiveness of technology controls across the enterprise. This position sits at the intersection of IT risk, business strategy, and governance — giving you broad visibility into how a data-driven, large-scale retail operation manages its information systems and digital assets. You'll bring intellectual curiosity and business acumen to every engagement, translating technical findings into actionable insights that matter to leadership.

What You'll Do

• Plan, lead, and execute end-to-end IT audit engagements covering general computing controls, application controls, cybersecurity, and emerging technology risks
• Assess the design and operating effectiveness of IT controls, including those supporting Sarbanes-Oxley (SOX) compliance
• Identify control gaps, root causes, and business risks; develop practical, well-supported recommendations for remediation
• Produce clear, concise audit reports and working papers that meet professional standards and withstand senior management scrutiny
• Build collaborative relationships with IT, finance, and business stakeholders to drive process improvements and foster a strong control environment
• Stay current on evolving technology risks, regulatory developments, and industry frameworks such as COBIT, NIST, and ISO 27001
• Contribute to continuous improvement of audit methodology, tools, and team practices

What We're Looking For

• Bachelor's degree in Information Systems, Computer Science, Accounting, or a related discipline
• Hands-on experience in IT audit, IT risk, or a closely related assurance function — public accounting or internal audit at a public company is a plus
• Familiarity with IT general controls (ITGCs), SOX compliance processes, and risk-based audit methodologies
• Professional certification such as CISA, CIA, CISSP, or equivalent preferred
• Strong analytical skills with the ability to synthesize complex technical information for non-technical audiences
• Collaborative, self-motivated work style with a track record of delivering high-quality results independently
• Excellent written and verbal communication skills, including experience presenting findings to management

About CarMax

CarMax revolutionized the used-car industry by making the buying and selling process transparent, fair, and customer-focused. Headquartered in Richmond, Virginia, CarMax operates hundreds of stores nationwide and is consistently recognized as one of the best places to work in America. The company invests in its associates' growth and values the kind of innovative, improvement-minded thinking that moves the business forward.

How to Apply

If you're ready to bring your IT audit expertise to a company that values integrity, collaboration, and continuous improvement, submit your application through this listing to be considered for this Senior Auditor, IT Internal Audit role in Richmond, VA.