Job
Description
Key Responsibilities: Conduct comprehensive audits of IT systems, networks, and applications to assess their security, integrity, and compliance with regulatory requirements. Candidate should have experience in IT audits of ERP applications, interfaces, Access controls, Segregation of Duties analysis, ITGC, ITAC and audit trail review of various applications as part of IT audit support for statutory audits / external clients. Candidate should have good understanding of audit methodology and legal / regulatory requirements from statutory perspective. Evaluate IT policies, procedures, and controls to identify weaknesses, gaps, and areas for improvement. Perform risk assessments and vulnerability scans to identify potential security threats and vulnerabilities. Analyze audit findings and data to develop recommendations for mitigating risks and improving IT processes and controls. Prepare detailed audit reports documenting findings, recommendations, and corrective actions. Communicate audit results and recommendations to management and stakeholders, including technical and non-technical audiences. Collaborate with IT and business stakeholders to implement corrective actions and remediation plans. Stay current with industry best practices, emerging technologies, and regulatory requirements related to IT security and compliance Preferred CISA/ DISA certified Experience with using data techniques such as IDEA or ACL, Tableau, Qlik, Power BI, SAS or similar SAP certification, reviews of OS (Linux,etc) and database (Oracle,SQL, etc) Good communication skills (Verbal & Written) Skills and Competencies Need to have extensive experience in Statutory IT Audit / External IT Audit, as an IT auditor support for Financial Statement Audit Have deep knowledge and experience of testing ITGC’s, ITACs (IT Automated) include control testing of domains such as change management, program development, logical access and computer operations Should have relevant experience of working with ERP accounting systems such as SAP, Oracle and other home grown systems Experience in SOC 1 & 2 testing and reporting as well as worked on SoX 404 engagements Should have experience in handling large engagements (private/listed) in India or other geographies with overseeing work of 2 or more people Monitor time and manage timelines as you would be expected to work on multiple projects at a point of time) Good communication skills (Verbal & Written) Flexibility to adapt to a variety of engagement types, working hours and work environments Show more Show less
