At PwC, our people in audit and assurance focus on providing independent and objective assessments of financial statements, internal controls, and other assurable information enhancing the credibility and reliability of this information with a variety of stakeholders. They evaluate compliance with regulations including assessing governance and risk management processes and related controls. In IT audit at PwC, you will focus on helping to assess and evaluate the design and effectiveness of an organisation's IT systems and controls to provide compliance with regulations and mitigate risks.Focused on relationships, you are building meaningful client connections, and learning how to manage and inspire others. Navigating increasingly complex situations, you are growing your personal brand, deepening technical expertise and awareness of your strengths. You are expected to anticipate the needs of your teams and clients, and to deliver quality. Embracing increased ambiguity, you are comfortable when the path forward isn’t clear, you ask questions, and you use these moments as opportunities to grow.
Skills
Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to:
- Respond effectively to the diverse perspectives, needs, and feelings of others.
- Use a broad range of tools, methodologies and techniques to generate new ideas and solve problems.
- Use critical thinking to break down complex concepts.
- Understand the broader objectives of your project or role and how your work fits into the overall strategy.
- Develop a deeper understanding of the business context and how it is changing.
- Use reflection to develop self awareness, enhance strengths and address development areas.
- Interpret data to inform insights and recommendations.
- Uphold and reinforce professional and technical standards (e.g. refer to specific PwC tax and audit guidance), the Firm's code of conduct, and independence requirements.
Essential Duties And Responsibilities
- Manage the work streams related to IT SOX compliance covering ITGC and IT Dependencies (ITAC, Interfaces, IPE’s).
- Thorough understanding around ITGC domains such as Logical Access, Change Management, SDLC and Computer Operations.
- Exposure of testing IT Application Controls (Configurable, Non-configurable), Interfaces, IPE’s, Data Migration and Platform Reviews.
- Provide technical support in the assessment, design, and implementation of ITGC requirements.
- Review control evidence for adherence to accuracy, completeness, and precision of control execution for all ITGC.
- Develop, implement, and test controls for new acquisitions and in-scope entities
- Work with control owners and operators to ensure quality, consistency, and operability of new and existing controls.
- Collaborate and build long-term relationships with key stakeholders in a fast-paced and matrixed work environment.
- Review test findings, facilitate the remediation of ITGC control gaps, and escalate possible critical issues to senior management within IT.
- Mentors and develops peer and Associates, monitors their work, and takes corrective action when necessary
- Builds and maintains strong peer relationships within the team and across the organization
- Coordinates work with External Auditors.
Interpersonal Skills
- Ability to work independently under general supervision with latitude for initiative and independent judgment
- Effective verbal and written communications, including active listening skills
- Ability to establish and maintain effective working relationships with co-workers and external contactors/auditors
- Detail-oriented
- Comfortable working on multiple projects simultaneously
- Individuals would be expected to cultivate a strong team environment and promote a positive working relationship amongst their team.
- Excellent Communication, written and verbal would be expected.
- In addition to being an exceptional individual contributor, manage engagements and relevant Teams allocated for the same.
- Managing predominantly offshore engagements and relevant PwC Territory teams.
- Ensure client service delivery in accordance with the quality guidelines & methodologies.
- Build and maintain client relationships by understanding and being responsive to client needs and ensuring high quality of deliverables.
- Demonstrate strong analytical thinking and communication skills including the ability to research and understand complex processes and effectively communicate them to interested parties
Client Management
- Develop strong working relationships with the client and onshore client teams.
- Maintain excellent rapport and proactive communication with the stakeholders and client.
Operational Excellence
- Suggest ideas on improving engagement productivity and identify opportunities for improving client service.
- Ensure compliance with engagement plans and internal quality & risk management procedures.
People Related
- Display teamwork, integrity, and leadership. Work with team members to set goals and responsibilities for specific engagements.
- Foster teamwork and innovation.
- Utilize technology & tools to continually learn and innovate, share knowledge with team members and enhance service delivery.
- Conduct workshops and technical training sessions for team members.
- Contribute to the learning & development agenda and knowledge harnessing initiatives
Minimum Qualifications
- Bachelor’s degree in Information Systems, Computer Science Engineering, or Finance Preferred
- B.E., B. TECH, M. TECH, MCA, BCA, CA, MBA
- Experience in technology audit, risk management, compliance, consulting, or information security
- Excellent knowledge of IT General Controls, automated and security controls.
- Knowledge of security measures and auditing practices within various operating systems, databases, and applications
- Experience in auditing financial applications, cyber security practices, privacy, and various infrastructure platforms such as Unix, Linus, Windows, SQL Server, Oracle Databases
- Knowledge and concepts of auditing of cloud platforms (AWS, Azure and Google Cloud)
- Experience designing continuous auditing and monitoring tools and techniques is a plus.
- Good understanding of CoBIT 5 Domains of Access Management, SLDC & Change and Computer Operations and Control Design and Testing of SOX IT General Controls (ITGC) and/or IT Application Controls (ITAC)
- Experience in identifying control gaps and communicating audit findings and control redesign recommendations to Management/Clients
- Knowledge of regulations impacting privacy, integrity, and availability of clients PII.
- Functional knowledge of major ERP suites (like SAP, Dynamics, Oracle EBS)
- Understanding of audit concepts and regulations
- Required overall experience in testing/reviewing and implementation of ITGC controls, CoBit 5 and developing COSO framework
- Candidates with 3-5 years of relevant experience in similar role, preferably with a “Big 4” or equivalent
- Chartered Accountant (would be added advantage)
Certification(s) Preferred
- CISA / CISM / CRISC / CISSP / ISO 27001 LA certifications
