IT Audit Intern

Function:

About the Role

IT Audit Intern

The internship will provide an opportunity to understand how technology risks and controls are assessed in a large enterprise environment and to participate in audit activities including process understanding, data analysis, control testing, evidence review, identification of control gaps, and preparation of audit documentation.

Our internal audit methodology emphasizes understanding processes and controls, gathering and evaluating evidence, risk analysis, and assessing control efficiency and effectiveness. The team's current technology audit coverage also includes areas such as access management, authentication and security settings, change management, logging and monitoring, interfaces and integrations, backup/DR, third-party risk, and infrastructure security.

Key Responsibilities

The intern will support the IT Audit team in:

• Understanding business processes, IT applications, infrastructure, and associated technology risks.
• Assisting in

  IT General Controls (ITGC)

  testing, including:
• User access management and privileged access
• Authentication and security configurations
• Change and release management
• IT operations
• Backup, recovery and disaster recovery
• Logging and monitoring
• Supporting reviews of

  cybersecurity controls

  , including network security, endpoint security, vulnerability management, remote access/VPN, identity and access management, and security monitoring.
• Assisting with audits of

  ERP and business applications

  , including access controls, roles and privileges, segregation of duties, configurations, interfaces, and audit trails.
• Reviewing policies, procedures, system configurations, reports, logs and other audit evidence.
• Performing

  data analysis and population-based testing

  using Microsoft Excel and other analytical tools.
• Identifying exceptions, unusual trends and potential control weaknesses from large datasets.
• Supporting walkthrough discussions with IT and business stakeholders.
• Documenting audit procedures performed, evidence reviewed, test results and conclusions in audit workpapers.
• Performing research on emerging technology risks and good practices.
• Assisting the team in preparing audit observations, presentations and management reports.
• Following up on implementation of agreed audit recommendations.

This aligns with the organization's documented audit approach of gathering information on processes, policies, procedures and controls; obtaining sufficient audit evidence; verifying samples; and conducting risk analysis to assess control efficiency and effectiveness.

Preferred Academic Background

Students pursuing or recently completing:

• B.E./B.Tech

  in Computer Science, Information Technology, Cybersecurity or related disciplines

• BCA / MCA

• B.Sc./M.Sc. Computer Science / IT / Cybersecurity

• Other technology-focused programs with a demonstrated interest in IT audit, cybersecurity, risk or data analytics

CISA, ISO 27001, CEH, Security+, AWS/Azure fundamentals, or similar certifications