
IT Auditor III
- Chennai, Tamil Nadu
- Permanent
- Full-time
- Assist in planning and scoping IT compliance and internal control assessments.
- Identify risk areas and develop internal control testing programs.
- Perform end-to-end IT compliance assessments, including evaluating effectiveness of risk and control frameworks.
- Test IT General Controls (ITGCs) across domains like change management, logical access, SDLC and IT operations.
- Assess IT Automated Controls across business functions such as payroll, inventory, and revenue.
- Document control walkthroughs using narratives and flowcharts.
- Develop, maintain, and present compliance workpapers and reports highlighting control deficiencies and recommendations.
- Collaborate with management to communicate findings and ensure timely remediation of audit issues.
- Support external audit activities by coordinating information requests and walkthroughs.
- Stay up to date with regulatory and industry developments in IT compliance and risk management.
- Bachelor's degree in Information Technology, Computer Science etc.
- Professional certification (or working towards) such as CISA, CRISC, CISSP, or CISM preferred.
- 7–10 years of experience in IT audit, compliance, or risk management; minimum 3-5 years in a Big 4 or similar professional services firm preferred.
- Strong understanding of IT infrastructure, applications, and enterprise systems.
- Knowledge of Sarbanes-Oxley (SOX), ITGCs, automated controls, and internal control principles.
- Experience with audit and compliance tools (e.g., eAudit, Auditboard, or equivalent).
- Ability to understand cross-functional business processes and their integration with IT systems.
- Strong interpersonal, communication, and report-writing skills.
- Able to work independently and collaboratively under tight deadlines.
- Demonstrated sound judgment, critical thinking, and attention to detail.
- Hands-on experience in documenting business processes and identifying control gaps.
- Ability to present findings to senior stakeholders and recommend practical remediation steps.
- Familiarity with GRC platforms and data analytics tools.
- Understanding of global business practices and regulatory environments.