Assistant Manager, IT Internal Audit
- Bangalore, Karnataka
- Permanent
- Full-time
- Conduct technology focused audits independently end to end
- Review critical systems and processes to identify risks
- Benchmark existing systems controls and processes with industry best practices
- Conduct key control testing as per Sarbanes-Oxley (SOX) requirements
- Maintain audit documentation as per established processes
- Support external audit testing requirements as needed
- Education: Bachelor's degree in Information Technology, Computer Science, Accounting, or a related field.
- Certifications: Certifications like CISA (Certified Information Systems Auditor) is a must. Additional certifications like CISM, CISSP, CRISC or CIA may be preferred.
- Experience: 4 to 6 experience in IT audit, internal audit, or a related role.
- Risk Assessment: Identify and evaluate IT-related risks across different areas of the business and recommend improvements to mitigate these risks.
- Audit Reporting: Prepare audit findings, and present audit reports and recommendations to IT management regarding control weaknesses and areas of improvement.
- Compliance: Ensure that IT control environment complies with relevant standards and regulations (such as SOX, GDPR, etc.), as well as internal policies.
- Process Improvement: Provide recommendations for enhancing the efficiency and effectiveness of IT processes and systems.
- Collaboration: Work closely with other departments to evaluate risks, systems, and controls, and implement changes as necessary.
- Technical Knowledge: Familiarity with IT systems, cloud infrastructure, cybersecurity and related technology.
- Audit Skills: Knowledge of audit methodologies and standards and internal control frameworks like COBIT or COSO.
- Analytical Thinking: Ability to analyze risks, identify issues, gaps and identify areas for improvement.
- Communication Skills: Strong written and verbal communication skills for managing key stakeholder relationships, reporting findings and presenting to stakeholders.
- Risk Management: Understanding of risk management principles, particularly in an IT context.
- Attention to Detail: Thoroughness in reviewing systems and identifying potential weaknesses.