Internal Audit Manager-IT & Infosec

Job Title:

Location:

Reports to:

Position Summary:

We are respected by executive leadership, our Board, and the external auditors as indispensable business partners, with a brand focused on insight, impact and excellence. We believe that everything we do is to enhance value, provide insights, and instill confidence. To do this, we must be relevant, connected, flexible, and courageous.

In Mumbai, we have a team of 11 auditors focused on a combination of business operations, tech & infosec, SOX, investigation support, etc. Each of our auditors are aligned with either business operations or tech & infosec, depending upon their experience, knowledge and interests, though the teams work closely together as many of our audits are integrated.

The IA Manager we are hiring for this role will lead our Mumbai tech & infosec audit team. They will be responsible for managing related audits and SOX testing.

Key Areas of Responsibility:

This internal audit manager in Mumbai has several key areas of responsibility. Here are the main areas:

1. Team Building and Management

• Lead, engage and motivate off-shore team in Mumbai, with support from US Executive Director
• Set clear performance expectations and provide feedback to foster a high-performing team
• Effectively delegate tasks and responsibilities while fostering continuous development
• Know when to ‘roll up sleeves’ to support team and lead by example
• Make informed decisions and resolve conflicts
• Address challenges such as communication gaps, quality control, and resource limitations

2. Audit Planning and Execution

• Assist with performing and evaluating risk assessments for audit planning
• Develop comprehensive and efficient audit programs
• Manage entire audit projects from scheduling audits to preparing audit strategies, assembling the audit team, executing the audit, summarizing results, and drafting the reports
• Manage the team and review their work to ensure audits are performed on quality, on time, and on budget, with properly supported conclusions

3. SOX Compliance – same as for Audit Planning and Execution above, with following additional points:

• Work collaboratively with IT SOX Compliance Team and external auditors to align IAD’s SOX scope, schedule, level of reliance, etc. (ITGCs, IT App Controls, SOC reports, etc.)
• Ensure team maintains thorough documentation of audit processes, audit results/evidence, and findings/conclusions in AuditBoard to support IAD’s conclusions and external auditor reliance
• Appreciate importance of IA’s role in monitoring SOX compliance, e.g. for the CFO & CEO’s assertions, the external auditor’s use of IAD’s work, and the Audit Committee’s confidence in ICFR

4. Communication and Collaboration

• Convey objectives, findings, recommendations, and insights clearly to various stakeholders
• Communicate timely any significant changes to the IA leadership and affected team(s)
• Develop strong relationships within and outside of the IAD to facilitate collaboration and trust

5. Quality Assurance and Innovation

• Lead by example, demonstrating integrity and ethical behavior
• Support the IAD’s quality assurance and improvement program
• Ensure that all audit activities comply with the IAD’s methodology and relevant Company and professional standards and regulatory requirements
• Contribute to innovation and improvements in the business and in audit processes and methods

6. Reporting and Follow-Up

• Draft audit reports that highlight all key findings, recommendations, and action plans
• Ensure reports and findings are clear, concise, objective/factual, and actionable
• Monitor status of agreed upon actions for timely resolution of identified issues

Qualifications:

- Typically, 6+ years total relevant work experience, with 3+ years as internal/external auditor

- Experience managing global audit teams (experience building a team preferred)

- Prior experience should include significant involvement in the assessment of risks, controls and business processes, preferably with Fortune 1000 or larger public companies

- Strong US SOX testing experience

- Bachelor’s or higher degree in IT, MIS, Computer Science, Accounting, or related field

- Professional certification (e.g. CISA, CISSP, CIA, CA, and/or equivalent)

- Excellent analytical, problem-solving, and communication skills; fluency in English

- Proven ability to constructively present results/advice in potentially sensitive or contentious areas

- Strong understanding and working knowledge of IT governance, risk, and control frameworks, regulatory requirements, and standards such as COBIT, ITIL, NIST, SOX, ISO, and PCI

- Proficiency in audit software (e.g. AuditBoard), MS Office Suite, and analytics (AI a plus)

- Strong organization and management skills in a multi-tasking environment

- Detail-oriented with a focus on accuracy and completeness

- Strong interpersonal skills and the ability to build relationships with stakeholders

- Commitment to ethical conduct, integrity, and the promotion of a culture of accountability and continuous improvement

- Ability to travel and a team player with a commitment to personal and professional growth

- Positive individual who enjoys working in a fun and dynamic team environment