Job
Description
Key Responsibilities: Execute and lead ITGC audits, application controls testing, SOC1/SOC2 reviews, and cybersecurity assessments. Perform risk-based IT audits and assessments across diverse infrastructure, cloud, and ERP landscapes (SAP, Oracle, etc.). Evaluate and validate control design and operational effectiveness across IT environments. Provide advisory services on IT risk, cybersecurity, compliance (e.g., SOX, GDPR), and IT governance best practices. Collaborate with cross-functional teams including InfoSec, Internal Audit, and External Audit teams on integrated audits. Assist clients in designing and implementing controls in line with leading frameworks such as NIST, COBIT, ISO 27001. Draft clear and concise audit reports, risk findings, and remediation plans for executive stakeholders. Maintain working knowledge of regulatory and compliance requirements impacting clients' technology landscape. Required Skills & Experience: 5+ years of relevant IT Audit experience, exclusively within Big 4 firms (e.g., Deloitte, PwC, EY, KPMG). Strong hands-on experience in conducting ITGCs, automated controls testing, and IT risk assessments. Professional certification: CISA (required) or CISSP (preferred/optional). Deep understanding of risk and control frameworks including COBIT, NIST, ISO 27001. Exposure to ERP audits (SAP, Oracle), cloud platforms (AWS, Azure, GCP), and identity/access reviews. Strong documentation, communication, and stakeholder engagement skills. Ability to manage multiple engagements and deliver high-quality results under tight deadlines. Preferred Qualifications: Experience working on SOC 1 / SOC 2 reports, IT Risk Advisory, or Cybersecurity consulting projects. Working knowledge of SOX IT compliance and regulatory environments. Bachelors degree in Information Systems, Computer Science, or related discipline.
