Manager, IT Audit

Location: Mumbai

Designation: Manager IT Audit

Total Experience: 5–8 Years

Relevant Manager-Level Experience: 2.5–5 Years

CTC: Up to 25 LPA

Notice Period: Up to 60 Days

Role Overview

We are looking for an experienced Manager – IT Audit to join our IT Audit & Risk Consulting practice in Mumbai. The role is suited for professionals with strong experience in IT Audit, IT General Controls (ITGC), IT Risk & Controls Assurance, Internal Audit and Technology Risk Consulting.

Candidates must have relevant experience from IT Services, Management/Technology Consulting, Big 4/Advisory firms, or Financial Services/Banking/Insurance organizations.

Strict requirement: Candidates should have 2.5–5 years of experience at Manager / equivalent project-management level, with robust hands-on exposure to IT Audit and Controls Assurance.

Key Responsibilities

IT Audit & Controls Assurance

- Lead and execute multiple IT Audit / IT Risk & Controls Assurance engagements simultaneously.
- Perform and review IT General Controls (ITGC) audits covering:

- Applications

- Databases

- Operating Systems

- Middleware

- Networks

- Access Management

- Change Management

- IT Operations
- Backup & Recovery

- Incident Management
- Execute/review IT Application Controls and technology control assessments.
- Conduct risk assessments, control walkthroughs, control testing, evidence review and issue identification.
- Perform assessments relating to IT Regulatory Compliance, Third-Party Risk Assurance and Technology Risk.
- Support SOC 1 / SOC 2 assurance and attestation engagements where applicable.
- Develop audit work programs, testing methodologies, working papers and audit reports.




- Prepare management reports and audit committee presentations.
- Identify control gaps and provide practical remediation recommendations.

Project Management
- Independently manage 3–5 IT Audit / Controls Assurance projects at a time.
- Own engagements from initiation through closure, including planning, execution, reporting and closure.
- Ensure project delivery within agreed timelines, quality standards and budgets.
- Monitor project risks, issues, dependencies and resource requirements.
- Coordinate with Directors/Partners and provide regular engagement updates.
- Ensure appropriate engagement documentation and quality standards.

Client & Stakeholder Management
- Act as a key client-facing contact for assigned engagements.
- Conduct client discussions, walkthroughs, status meetings and issue-resolution discussions.
- Understand client business processes, technology environment and associated risks.
- Build strong relationships with technology, risk, audit and business stakeholders.

People Leadership
- Manage and mentor consultants/analysts working on engagements.
- Allocate work, review deliverables and provide performance feedback.
- Coach team members on IT Audit methodology, controls testing and professional development.
- Support staffing and resource planning for projects.

Business Development




- Support business development through client relationship management.
- Contribute to RFP/RFI responses, proposals, presentations and pre-sales activities.
- Identify opportunities for additional IT Risk, IT Audit and Cyber Risk services.
- Support Partners/Directors in account development and revenue-generation initiatives.

Emerging Technology Exposure to technology risks and controls in one or more areas such as:
- Cloud / AWS / Azure
- DevSecOps
- Intelligent Automation
- Cybersecurity
- Data Privacy
- Digital Transformation
- Emerging Technology Risk

Required Skills & Experience
- 5–8 years of total professional experience.
- 2.5–5 years of relevant Manager / equivalent project-management experience.
- Strong hands-on experience in IT Audit / IT Risk / Controls Assurance / Technology Risk Consulting.
- Candidates must have relevant experience in IT Services, Consulting/Advisory, or Financial Services.
- Strong understanding of ITGC and IT Application Controls.
- Experience with IT audit frameworks and standards such as:

- COBIT

- COSO

- ITIL

- ISO 27001

- NIST
- Experience in risk assessment, control testing, audit documentation and reporting.
- Client-facing and team-management experience.
- Exposure to business development, proposals, RFP/RFI and pre-sales is preferred.
- Strong analytical, problem-solving and communication skills.
- Willingness to travel to client locations in India and, where required, overseas.

Preferred Certifications
- CISA
- CISSP
- CIA
- CISM
- ISO 27001 Lead Auditor
- SAP/Oracle Security certifications
- Relevant Cloud / Cybersecurity certifications

📌 Manager (Mumbai)
🏢 Virtuoso Staffing Solutions
📍 Mumbai