Deputy Manager IT Audit

Information Systems Audit Cloud & Technology Risk

Location: Jaipur
Reporting To: Team Lead Information Systems Audit

Role Objective
The role is responsible for providing independent assurance over informationsystems, cloud infrastructure, and cybersecurity controls, ensuring technologyrisks are effectively identified, assessed, and managed in line withorganizational policies, regulatory expectations, and industry best practices.

Key Responsibilities
Plan and execute risk-based IS audits covering cloud environments (AWS,Azure, GCP, OCI), network and security infrastructure, and identity and accessmanagement controls.
Review design and operating effectiveness of IT General Controls (ITGC) andkey automated controls.
Assess cloud governance, configuration management, logging, monitoring, andencryption controls.
Evaluate cybersecurity controls covering vulnerability management, patching,monitoring, incident response, and resilience testing.
Perform thematic reviews on emerging technology risks including cloudmisconfigurations, privileged access, and third-party risks.
Validate audit evidence, track remediation actions, and independently verifyclosure.
Prepare concise audit reports highlighting risk, impact, and root cause.
Engage with IT, Information Security, Cloud, and vendor teams to discussobservations and recommendations.

Experience Expectations (Exp 510 Years)
Possesses strong conceptual understanding of cloud and cloud services.

Having knowledge of cloud andcloud costing.

Leads complex audits andmultiple audit themes.
Maintain workpapers, mentors team members and manages stakeholders.

Technical Knowledge

Cloud Platforms: AWS and GoogleCloud Platform (OCI and Microsoft Azure exposure preferred).

Cloud Security &Governance: CSPM concepts, secure cloud architecture, shared responsibilitymodel, logging, and encryption controls.

Cloud IAM: Cloud IAM policies,RBAC, privileged access, service accounts, and access recertification.

Cloud Network Security:VPC/VNet design, security groups/NSGs, firewall rules, and environmentsegregation.

Cloud Resilience: Backup,availability, disaster recovery, and regional resilience concepts.

DevSecOps (Audit View): CI/CDpipeline risks and container/Kubernetes security awareness.

Cloud Compliance: Mapping cloud controls to ISO27001, NIST, SOC reports, and regulatory requirements.

Educational Qualification
B.E. / B.Tech (IT) or MCA / M.Sc. (IT / CS) or equivalent

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.