Description

•Design and execute the day-to-day activities of Information Technology (IT) audit engagements, with a focus on strategic, operational and regulatory/compliance related risks •Plan activities related to development of audit program, and execution of internal audits and IT control assessments in the following areas: IT strategy and governance, IT operations, business continuity, cybersecurity and disaster recovery, network and infrastructure security, cloud and third-party risk, programs and projects, automation, General Information Technology Controls (GITCs) and application controls, and regulatory/compliance requirements •Review clients' processes and controls against leading practice and industry frameworks, identify gaps in design and execution, and communicate issues and recommendations to engagement leads and client management •Contribute to IT Audit knowledge base and internal practice development initiatives •Supervise and provide performance management for IT audit staff working on assigned engagements

Responsibilities

Mandatory technical & functional skills

•Perform system evaluation and/or audit IT and business process as a part of SOX 404, SSAE 18 or ICFR assessment.•Knowledge of security measures and auditing practices within various operating systems,



databases and applications.•Experience in assessing risks across a variety of business processes.•Experience of working on Financial Services sector clients.•Experience in identifying control gaps and communicating audit findings and control redesign recommendations to Sr. Management and Clients.•Hands on experience of working on IT General Controls (ITGC), IT Application controls (ITAC), IT Internal Audits, IT Risk Assessments, Third Party Risk Management.•Knowledge of security measures and auditing practices within various operating systems, Applications, and databases•Knowledge of regulations impacting the privacy, integrity and availability of customer PII.•Exposure of having led IT Audit engagements•Exposure of working on Identity Access Management aspects like user management, authentication and authorization.•Has team leading experience and has been a performance manager in current or last role #KGS

Qualifications

Educational qualifications

•BE/B-Tech/MCA/BSC-IT/MBA Certifications – CISA, CRISC, CISSP, CCSK etc. cleared/certified preferred

Work experience

•The candidate must have 6-8 years of relevant experience in a similar role, preferably with a Big 4 firm

📌 Assistant Manager | MS - ICFR | IT Audit (Bengaluru)
🏢 BSR u0026
📍 Bengaluru