Manager

Job Description Manager, IT Audit

Location: Mumbai
Designation: Manager IT Audit
Total Experience: 5–8 Years
Relevant Manager-Level Experience: 2.5–5 Years
CTC: Up to 25 LPA
Notice Period: Up to 60 Days

Role Overview

We are looking for an experienced Manager – IT Audit to join our IT Audit & Risk Consulting practice in Mumbai. The role is suited for professionals with strong experience in IT Audit, IT General Controls (ITGC), IT Risk & Controls Assurance, Internal Audit and Technology Risk Consulting.

Candidates must have relevant experience from IT Services, Management/Technology Consulting, Big 4/Advisory firms, or Financial Services/Banking/Insurance organizations.

Strict requirement: Candidates should have 2.5–5 years of experience at Manager / equivalent project-management level, with strong hands-on exposure to IT Audit and Controls Assurance.

Key Responsibilities

IT Audit & Controls Assurance

• Lead and execute multiple IT Audit / IT Risk & Controls Assurance engagements simultaneously.

• Perform and review IT General Controls (ITGC) audits covering:

• Applications

• Databases

• Operating Systems

• Middleware

• Networks

• Access Management

• Change Management

• IT Operations

• Backup & Recovery

• Incident Management

• Execute/review IT Application Controls and technology control assessments.

• Conduct risk assessments, control walkthroughs, control testing, evidence review and issue identification.

• Perform assessments relating to IT Regulatory Compliance, Third-Party Risk Assurance and Technology Risk.

• Support SOC 1 / SOC 2 assurance and attestation engagements where applicable.

• Develop audit work programs, testing methodologies, working papers and audit reports.

• Prepare management reports and audit committee presentations.

• Identify control gaps and provide practical remediation recommendations.

Project Management

• Independently manage 3–5 IT Audit / Controls Assurance projects at a time.
• Own engagements from initiation through closure, including planning, execution, reporting and closure.
• Ensure project delivery within agreed timelines, quality standards and budgets.
• Monitor project risks, issues, dependencies and resource requirements.
• Coordinate with Directors/Partners and provide regular engagement updates.
• Ensure appropriate engagement documentation and quality standards.

Client & Stakeholder Management

• Act as a key client-facing contact for assigned engagements.
• Conduct client discussions, walkthroughs, status meetings and issue-resolution discussions.
• Understand client business processes, technology environment and associated risks.
• Build strong relationships with technology, risk, audit and business stakeholders.

People Leadership

• Manage and mentor consultants/analysts working on engagements.
• Allocate work, review deliverables and provide performance feedback.
• Coach team members on IT Audit methodology, controls testing and professional development.
• Support staffing and resource planning for projects.

Business Development

• Support business development through client relationship management.
• Contribute to RFP/RFI responses, proposals, presentations and pre-sales activities.
• Identify opportunities for additional IT Risk, IT Audit and Cyber Risk services.
• Support Partners/Directors in account development and revenue-generation initiatives.

Emerging Technology

Exposure to technology risks and controls in one or more areas such as:

• Cloud / AWS / Azure
• DevSecOps
• Intelligent Automation
• Cybersecurity
• Data Privacy
• Digital Transformation
• Emerging Technology Risk

Required Skills & Experience

• 5–8 years of total professional experience.

• 2.5–5 years of relevant Manager / equivalent project-management experience.

• Strong hands-on experience in IT Audit / IT Risk / Controls Assurance / Technology Risk Consulting.

• Candidates must have relevant experience in IT Services, Consulting/Advisory, or Financial Services.

• Strong understanding of ITGC and IT Application Controls.

• Experience with IT audit frameworks and standards such as:

• COBIT

• COSO

• ITIL

• ISO 27001

• NIST

• Experience in risk assessment, control testing, audit documentation and reporting.

• Client-facing and team-management experience.

• Exposure to business development, proposals, RFP/RFI and pre-sales is preferred.

• Strong analytical, problem-solving and communication skills.

• Willingness to travel to client locations in India and, where required, overseas.

Preferred Certifications

• CISA
• CISSP
• CIA
• CISM
• ISO 27001 Lead Auditor
• SAP/Oracle Security certifications
• Relevant Cloud / Cybersecurity certifications