Job Description – IT General Controls, Application Controls & Vendor Risk Assessment

Position: IT Audit / IT Risk & Controls Consultant

Department: Information Technology Audit / Risk & Compliance

Industry: Financial Services/Banking

Employment Type: Project / Contract Assignment

Assignment Duration: 3–4 Months

Location: Andheri, Mumbai, Maharashtra

Reporting To: IT Audit Manager / Risk & Compliance Head

Job Summary

We are looking for an experienced IT Audit / IT Risk & Controls skilled for a 3–4 month project assignment. The role will be responsible for evaluating IT General Controls (ITGC), application controls, information security controls, business continuity processes, and third-party/vendor risks.

The candidate will identify control gaps, assess associated risks, document audit findings, and provide practical remediation recommendations.

Key Responsibilities
IT General Controls (ITGC)
Conduct ITGC audits across IT processes, systems, and infrastructure.
Review and assess key IT controls related to:

User Access Management





o Change Management

o Incident Management
Evaluate control design and operating effectiveness.
Identify control gaps, exceptions, and potential risks.
Business Continuity & Disaster Recovery
Assess Business Continuity Management (BCM) processes.
Review Disaster Recovery (DR) plans, procedures, and controls.
Evaluate backup processes, backup frequency, retention, and recovery procedures.
Review evidence of DR/backup testing and identify gaps where applicable.
Application Controls
Evaluate application-level controls to ensure data accuracy, completeness, and integrity.
Review Input and Output controls.
Assess Interface controls between applications and systems.
Review Batch Job controls, scheduling, monitoring, and exception handling.
Evaluate Encryption controls for data protection.
Review application access controls and segregation of duties where applicable.
Vendor Risk Assessmen

📌 It General Controls, Application Controls Andheri
🏢 Long Shot Assignment
📍 Andheri