IT Audit

Position Overview

We are looking for experienced ITGC / IT Audit professionals with strong hands-on experience in IT General Controls, SOX 404, SOC audits, risk and controls testing, and IT audit frameworks. The candidate should be capable of independently managing ITGC assignments, conducting walkthroughs, testing controls, identifying gaps, preparing documentation, and coordinating with IT teams and internal/external auditors.

Candidates from Big 4, consulting firms, IT risk advisory, internal audit, or SOX compliance backgrounds will be preferred.

Key Responsibilities

• Perform end-to-end IT General Controls (ITGC) testing covering:

• User Access Management (UAM)

• Change Management

• IT Operations Controls

• Backup and Recovery

• Job Monitoring

• Incident Management

• Conduct ITGC walkthroughs, control design assessments, and operating effectiveness testing.

• Perform SOX 404 IT control testing and support SOX compliance programs.

• Review and test Risk & Control Matrices (RCMs).

• Identify control gaps, document observations, assess risks, and recommend remediation actions.

• Coordinate with internal and external auditors for SOX and IT audit activities.

• Support or conduct SOC 1 and SOC 2 audits.

• Assess controls against AICPA Trust Service Criteria, including Security, Availability, Confidentiality, Processing Integrity, and Privacy.

• Prepare and maintain audit workpapers, testing documentation, evidence, walkthrough notes, and control assessment reports.

• Conduct walkthrough meetings independently with IT and business stakeholders.

• Clearly communicate control deficiencies, risks, and remediation recommendations.

• Track remediation activities and follow up with control owners until closure.

• Support audits across enterprise applications and technology environments such as SAP, Oracle, Salesforce, ERP/CRM platforms, IAM systems, Active Directory, AWS, Azure, and GCP.

Required Skills

• 8+ years of experience in ITGC / IT Audit / IT Risk / SOX / Internal Audit.
• Strong hands-on experience in ITGC control testing.
• Strong understanding of SOX 404 IT controls and compliance.
• Experience with UAM, Change Management, IT Operations, Backup, Job Monitoring, and Incident Management controls.
• Experience in control design and operating effectiveness testing.
• Strong understanding of RCMs, risk assessment, control testing, and remediation.
• Exposure to SOC 1 / SOC 2 audits.
• Good knowledge of COBIT, COSO, NIST, ISO 27001, and AICPA Trust Services Criteria.
• Strong documentation, analytical, communication, and stakeholder-management skills.
• Ability to independently manage assignments end-to-end.

Preferred Qualifications

• Experience in Big 4 / Consulting / IT Risk Advisory / Internal Audit.
• Experience auditing enterprise applications such as SAP, Oracle, Salesforce, or other ERP/CRM platforms.
• Exposure to IAM, Active Directory, AWS, Azure, or GCP.
• Certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Auditor will be an added advantage.

Candidate Expectations

• Strong verbal and written communication.
• Ability to conduct client/stakeholder walkthroughs independently.
• Ability to handle the complete ITGC assignment with minimal supervision.
• Strong understanding of audit evidence and control documentation.
• Ability to manage multiple stakeholders and deliver assignments within timelines.
• Strong problem-solving and risk assessment capabilities.