Audit Executive

Position Overview
We are seeking an IT Auditor with a minimum of three years of mandatory experience in IT auditing to support the internal audit function. The role covers a broad range of IT-related reviews, system assessments, and technology-enabled process audits across the organization. The candidate will be involved in reviewing controls, understanding system processes, evaluating risks, validating system configurations, assessing IT operations, reviewing input processing output controls, examining change management and SDLC practices, verifying data accuracy and system-generated reports, and preparing well-structured audit observations and reports

Key Responsibilities

The responsibilities of the IT Auditor include, but are not limited to, the following:

• Reviewing IT general controls such as access management, change management, backup processes, and security settings.

• Assessing role permissions, access rights, and segregation of duties across systems.


• Reviewing system configurations and workflow approval setups.

2. Application & System Reviews

• Evaluating in-house and third-party applications for control effectiveness and opportunities for improvement.

• Reviewing input, processing, and output controls, ensuring that system process flows align with management-approved processes or documented business requirements.


• Verifying change management practices, including request initiation, approvals, testing, migration controls, and related documentation.


• Assessing the System Development Life Cycle (SDLC) followed for new developments, enhancements, and fixes.


• Reviewing system-generated data, integrations, and validating the completeness, accuracy, and validity of information processed.


• Assessing compliance with IT policies, standard operating procedures, and general operational requirements.

3. IT Operations & Security Practices

• Reviewing uptime/downtime logs, incident handling practices, and backup/restoration activities.


• Understanding general cybersecurity measures, log management practices, and data protection requirements.

4. Coordination & Process Understanding

• Conducting walkthroughs with the IT team and system users to understand processes and identify risks.


• Coordinating with departments to obtain information required for audits.

5. Reporting & Documentation

• Drafting clear, concise, and professional audit observations.


• Preparing audit reports with risk-based comments and practical recommendations.


• Following up on pending action items and ensuring timely closure.

Key Skills & Competencies

• Mandatory experience in IT audit (minimum 3 years).


• Understanding of IT general controls, system processes, and technology risks.


• Strong analytical abilities and attention to detail.


• Excellent report drafting and documentation skills.


• Good communication skills for interacting with IT and non-IT teams.


• Ability to work independently and manage multiple tasks.

Qualifications

• Bachelor s degree in Information Technology, Computer Science, or related field.


• Minimum 3 years of hands-on experience in IT auditing (Mandatory).


• Certifications such as CISA (completed or ongoing) will be an added advantage.