-
Audit Support & Execution
- Coordinate with IT domain teams to gather and validate audit evidence.
- Support walkthroughs, gap analysis, and response preparation for internal and external audits.
- Track status of remediation actions and support validation exercises.
-
Documentation & Controls Management
- Maintain audit documentation including SOPs, control checklists, risk registers, and evidence logs.
- Support creation of compliance dashboards and internal audit scorecards.
-
Compliance Monitoring & Reporting
- Conduct periodic self-assessments and spot checks.
- Monitor effectiveness of implemented controls and alert gaps to the lead specialist.
-
Stakeholder Coordination
- Interface with Infra, Cloud, Service Delivery, Cybersecurity, and Business IT teams for audit preparedness.
- Support training logistics and documentation for compliance awareness programs.
-
Improvement Initiatives
- Identify automation opportunities in compliance processes.
- Support tool-based audit management platforms (e. g. , Archer, ServiceNow GRC).
Specialized Knowledge Requirements
- Understanding of IT general controls, SOX, GxP, ISO 27001
- Familiarity with ITIL processes (Change, Incident, Problem)
- Exposure to audit lifecycle, compliance reporting, and evidence collection
- Knowledge of tools like Excel, SharePoint, ServiceNow GRC preferred
Internal Stakeholders and Nature of Interaction
-
Lead Audit & Compliance:
Daily coordination, status reviews, remediation validation -
Infra, Cloud, App & Service Teams:
Evidence submission, control reviews, audit walkthroughs -
PMO & Compliance Team:
Coordination on process documentation, control changes, and reporting
External Stakeholders and Nature of Interaction
-
Internal/External Auditors:
Support during data requests, audit walkthroughs, and clarification rounds -
Consulting Partners:
Coordination during control testing or audit co-sourcing
External Interaction %
- ~20 25% with external auditors, partners, and advisors
Nature of Communication
- Formal audit evidence, tracker updates, control summaries, dashboards
- Clear, structured communication during walkthroughs and audit Q&A
Role Played in Negotiations
- Supports Lead in framing responses or remediation timelines for audit queries
Key Decision-Making Expected
- Recommend evidence sufficiency, escalate control gaps, prioritize documentation readiness
Extent and Nature of Innovation Required
- Moderate: Suggest improvements in evidence workflows, adopt templates for reusability
- Use dashboards to simplify control visibility and audit traceability
Job Requirements
Educational Qualification:
- Masters, Bachelor s degree in IT, Computer Science, or related field
Certifications:
- CISA or CRISC (preferred but not mandatory for entry level)
- ITIL Foundation / GRC platform exposure is a plus
Experience:
- 5-7 years of experience in IT audit, controls, or compliance roles
- Exposure to pharma or highly regulated industries is desirable