Position Overview

We are looking for experienced ITGC / IT Audit professionals with solid hands-on experience in IT General Controls, SOX 404, SOC audits, risk and controls testing, and IT audit frameworks. The candidate should be capable of independently managing ITGC assignments, conducting walkthroughs, testing controls, identifying gaps, preparing documentation, and coordinating with IT teams and internal/external auditors.

Candidates from Big 4, consulting firms, IT risk advisory, internal audit, or SOX compliance backgrounds will be preferred.

Key Responsibilities
- Perform end-to-end IT General Controls (ITGC) testing covering:
- User Access Management (UAM)
- Change Management
- IT Operations Controls
- Backup and Recovery
- Job Monitoring
- Incident Management
- Conduct ITGC walkthroughs, control design assessments, and operating effectiveness testing.
- Perform SOX 404 IT control testing and support SOX compliance programs.
- Review and test Risk & Control Matrices (RCMs).
- Identify control gaps, document observations, assess risks,



and recommend remediation actions.
- Coordinate with internal and external auditors for SOX and IT audit activities.
- Support or conduct SOC 1 and SOC 2 audits.
- Assess controls against AICPA Trust Service Criteria, including Security, Availability, Confidentiality, Processing Integrity, and Privacy.
- Prepare and maintain audit workpapers, testing documentation, evidence, walkthrough notes, and control assessment reports.
- Conduct walkthrough meetings independently with IT and business stakeholders.
- Clearly communicate control deficiencies, risks, and remediation recommendations.
- Track remediation activities and follow up with control owners until closure.
- Support audits across enterprise applications and technology environments such as SAP, Oracle, Salesforce, ERP/CRM platforms, IAM systems, Active Directory, AWS, Azure, and GCP.

Required Skills
- 8+ years of experience in ITGC / IT Audit / IT Risk / SOX / Inte

📌 IT Audit (Pune)
🏢 Abacus Service
📍 Pune