It Auditor

IT Auditor

Key Responsibilities

• Evaluate the design, implementation, and operating effectiveness of

  IT General Controls (ITGCs)

  like Access Controls, Change Management, Security Management, Operations Management, Backup and Recovery.
• Evaluate the design, implementation, and operating effectiveness of

  IT Application Controls (ITACs)

  like Input, Processing and Output Controls along with Integrity Controls, Authorization and Validation across various environments.
• Perform

  access controls testing

  , including user provisioning, segregation of duties (SoD), password policies, and privileged access within Oracle ERP and other corporate IT applications.
• Knowledge of various business process flows such as procure to pay, order to cash and report to report.
• Experience in configuration reviews and perform

  control testing

  within Oracle modules such as Financials (AP, AR, GL), Procurement, and Supply Chain.
• Collaborate with business and IT stakeholders to understand system changes, control risks, and document control matrices and process narratives.
• Lead and/or support

  SOX 404 compliance

  audits including walkthroughs, control testing, and remediation tracking.
• Develop and execute

  SQL queries

  or database scripts to extract and validate data as part of control testing and data analytics.
• Provide recommendations to improve system controls, efficiency, and data security based on audit findings.
• Monitor control gaps and follow up with relevant teams on timely remediation actions.
• Participate in

  pre-implementation reviews

  for new system rollouts or Oracle patches/upgrades to ensure controls are embedded in design.
• Engage with external auditors, providing necessary documentation and walkthroughs related to IT controls.
• Contribute to

  risk assessments

  , audit planning, and development of the IT audit universe.
• Stay informed about industry trends, cybersecurity developments, and compliance requirements to continuously enhance audit practices.