IT Audit

Deputy Manager IT Audit & IT Controls

Mandatory Experience: 6-8 Years
Role: Deputy Manager IT Audit / IT Controls

Job Overview

We are looking for a Deputy Manager IT Audit & IT Controls with strong experience in IT control testing, ITGC/ITAC assessments, IT audit, risk assessments, and cybersecurity controls. The role will involve independently designing and executing control testing, identifying control deficiencies, providing remediation recommendations, and working closely with IT and business stakeholders.

Key Responsibilities

• Develop and maintain a strong understanding of IT control frameworks, regulatory requirements, and relevant regulations such as SOX.

• Participate in IT risk assessments to identify control deficiencies and prioritize testing activities.

• Independently design and execute ITGC and ITAC test plans using various testing methodologies.

• Perform control testing across areas including:

• Access Control / Identity & Access Management

• Change Management

• IT Operations

• Security Incident Response

• Disaster Recovery

• Business Continuity Management

• Risk Management

• Governance, Risk & Compliance

• Identity Access Reviews

• Perform complex control testing using automated tools and manual testing techniques.

• Document testing procedures, evidence, observations, findings, and conclusions comprehensively.

• Analyze control findings, identify weaknesses, assess risks, and recommend appropriate remediation actions.

• Collaborate with IT teams, control owners, and business stakeholders to address control deficiencies and implement corrective actions.

• Perform vendor security reviews covering various cybersecurity domains.

• Assess opportunities for automation of manual control testing processes and provide recommendations on feasibility and implementation.

• Work with GRC platforms and control testing tools such as ServiceNow, Archer, Jira, or equivalent tools.

• Lead and mentor junior team members on IT control testing methodologies and best practices.

• Stay updated on emerging IT threats, regulatory requirements, and evolving IT control practices.

Required Skills & Experience

• 6-8 years of experience in IT Audit, IT Security, IT Risk, Technology Risk, or a similar role with a strong focus on IT control testing.

• Strong working knowledge of IT control frameworks and IT control testing methodologies.

• Hands-on experience in ITGC and ITAC testing.

• Experience with SOX / SOX IT controls is preferred.

• Strong understanding of IT controls across Access Management, Change Management, IT Operations, Security, Disaster Recovery, and Business Continuity.

• Experience performing vendor security / third-party security reviews.

• Knowledge of security technologies and techniques including:

• Cryptography

• Algorithms

• Secure IT Authentication

• Secure Development

• Data Protection

• Certificate Management Lifecycle

• Experience with automated and manual IT control testing tools.

• Experience evaluating opportunities to automate manual control testing.

• Familiarity with GRC platforms such as ServiceNow, RSA Archer, Jira, or equivalent tools.

• Strong analytical, problem-solving, documentation, and stakeholder management skills.

• Ability to independently manage multiple control testing activities and changing client requirements.

• Team leadership and mentoring experience is an added advantage.

Preferred Skills

• ITGC / ITAC
• SOX IT Audit
• IT Risk & Controls
• Technology Risk
• Cybersecurity Controls
• IT Control Testing
• Access Control / IAM
• Change Management
• Disaster Recovery / BCP
• Vendor Security Assessment
• GRC Tools
• Control Automation

Education

Bachelors or Masters degree in Computer Science, Information Technology, Engineering, Cybersecurity, or a related discipline.