Job Purpose:

To lead Internal Audits SOX/IFC testing program by overseeing the testing of Design (TOD) and Operating Effectiveness (TOE) of financial reporting controls on behalf of management. The role acts as the primary IA coordinator with Finance (RCM owners), external/US GAAP auditors, and process owners, ensuring high-quality documentation, timely execution, and independent assurance over Internal Controls over Financial Reporting (ICFR).

Job Responsibilities

Actionables

SOX / IFC Testing Leadership (TOD & TOE)

- Lead Internal Audit’s execution of Design (TOD) and Operating Effectiveness (TOE) testing for SOX/IFC controls.
- Ensure testing covers financial, operational, entity-level, and IT-enabled controls impacting financial reporting.
- Review sampling, evidence, and documentation for completeness and IA methodology adherence.
- Evaluate control gaps, test exceptions, and potential deficiencies with appropriate severity classification.

Coordination With Finance & Process Owners (RCM Framework)

- Collaborate with Finance teams responsible for RCM preparation and process scoping.
- Conduct walkthroughs with process owners to understand process flows, control points, and design adequacy.
- Ensure clarity in RCM ownership, evidence expectations, and documentation requirements.
- Provide inputs to strengthen clarity and accuracy of control documentation.

Coordination With External / US GAAP Auditors

- Serve as the primary IA liaison for US GAAP/IFC auditors during interim and year-end review cycles.
- Provide timely access to IA testing documentation, clarifications, and walkthrough materials.
- Support resolution of auditor queries on exceptions, sampling rationale, and control interpretation.




- Ensure seamless coordination to meet Group reporting timelines and audit schedules.

Control Deficiency Evaluation & Issue Management

- Review exceptions identified during testing and assess impact on financial reporting.
- Track remediation progress, validate closures, and report status to IA leadership.
- Highlight recurring deficiencies and control weaknesses for governance escalation.

Methodology, Governance & Quality Assurance

- Ensure adherence to Internal Audit methodology, SOX/IFC standards, and documentation templates.
- Drive enhancements in consistency, accuracy, and depth of IA testing across all testers.
- Prepare dashboards, test status reports, exception summaries, and governance MIS for senior management.
- Contribute to improvements in testing frameworks, workpaper standards, and control evaluation guidelines.

Stakeholder & Governance Management

- Engage senior leaders in Finance, Risk, Compliance and Operations for SOX/IFC discussions.
- Support IA leadership in presenting SOX/IFC insights to the Audit Committee or senior forums.
- Maintain objectivity and independence while providing constructive challenge to control owners.
- Ensure timely communication of key risks and emerging issues

People Leadership & Capability Development

- Lead, guide, and mentor IFC/SOX testers and Internal Audit analysts.
- Strengthen team capability in testing methodology,



documentation rigour, and sampling standards.
- Drive high levels of accuracy, skilled scepticism, and audit discipline.
- Promote continuous learning and a culture of quality in control testing.

Educational Qualifications

Key Skills

Essential:

CA / MBA (Finance) / CPA with strong understanding of SOX/IFC frameworks

Preferred:

CIA, CISA, CRMA, IFRS/US GAAP certifications or SOX/IFC specialization

- Strong knowledge of SOX 404, IFC frameworks, COSO principles, and financial reporting controls.
- Expertise in TOD/TOE, walkthroughs, control evaluation, and documentation standards.
- Knowledge of financial processes, GL controls, reconciliations, ITGCs, product accounting, and closing activities.
- Strong analytical skills with ability to interpret exceptions in the context of financial materiality.
- Excellent communication and stakeholder coordination skills.
- Ability to manage tight timelines and multi-stakeholder cycles.

Experience Required:

- 10 – 12 years of SOX/IFC testing experience in Internal Audit, Risk, Finance, or Big 4 consulting, including direct coordination with external auditors
- Minimum 5 years of experience in leading or supervising SOX/IFC audits

Key Performance Indicators:

- Accuracy, completeness, and quality of SOX/IFC testing workpapers.
- Timeliness of IA testing cycles relative to Group/US GAAP timelines.
- Quality of interaction and dependency management with Finance and external auditors.
- Reduction in repeat issues and improved IFC maturity.
- Strength of documentation, sampling discipline, and audit methodology adherence.
- Team capability development and stakeholder satisfaction.

📌 Zonal Head - SOX/IFC Audit (Mumbai)
🏢 HDFC Bank
📍 Mumbai