Role & responsibilities

- Create and maintain process narratives and flow charts.
- Participate in controls walkthroughs and evidence gathering (from walkthroughs, live meetings, etc.,)
- Perform SOX testing for Information Technology (ITGC) controls and Automated (ITAC) controls,
- User provisioning and access, change management, job monitoring, and backup and recovery controls,
- Key reports testing
- Data analytics on populations for exceptions and anomalies
- Understanding controls, risks, and testing objectives and how to design and test effectively and efficiently.
- Knowing how to leverage risk assessment to capture test attributes effectively, and population sampling
- Lead efforts related to quarterly management certifications (user access, change management, monitoring activities and reporting)
- Perform data analytics to support testing, leveraging tools such as SQL, Power BI, Excel, Python, or ACL to identify anomalies, trends, and control weaknesses.
- Keeping up to date with dataflows and narratives for all ITGCs and ITACs continuously.
- Prepare third-party SSAE 18 (SOC) reports for management review and complete testing.
- Support team with SDLC activities on information gathering and user acceptance testing.




- Responsible for the upkeep of SOX GRC application with real-time updates (valuable data hygiene), real time dashboard reporting

Preferred candidate profile

- Bachelors degree in information systems or a relevant field.
- A minimum of 2-4 years experience testing controls in information technology, audit, SOX Compliance,

applications, information security, networks, and infrastructure.
- Knowledge of internal controls over financial reporting (ICOFR), IT Governance, COSO, Cobit, NIST & InfoSEC.
- Audit experience with technologies such as ERPs (Oracle/SAP), data visualization tools (Tableau, cloud technologies (JIRA, Confluence, SFDC, etc.,), and Auditboard or other GRC platform.
- Excellent MS Office skills: Excel (pivots, formulas, tables), Visio/Flowcharts tools (flow charting, diagrams)
- Professional Certification is preferred (CISA, CISSP, SSCP, CIA, or equivalent).
- Good communication and interpersonal skills, and a willingness to learn.
- Above all else, you are bright, personable, and motivated to be creative
- Life Science /Healthcare industry experience preferred.
- Good communication and interpersonal skills, and a willingness to learn.

📌 Senior IT Auditor (New Delhi)
🏢 Mount Talent Consulting
📍 New Delhi