We are looking for an experienced IT Audit & Compliance Analyst / Senior Analyst with strong experience in IT General Controls (ITGC), IT Application Controls (ITAC), SOX Compliance, SAP/Oracle Controls, User Access Reviews and Change Management.

The role will support IT audits, compliance activities, control testing, risk assessments and control effectiveness evaluations across enterprise IT environments.

Key Responsibilities

- Perform and support IT General Controls (ITGC) testing across key domains including:

- Access Management

- Change Management

- IT Operations
- Execute IT Application Controls (ITAC) testing within SAP, Oracle and other enterprise applications.
- Test automated controls, configuration controls, interface controls and key reports.
- Coordinate with Internal Auditors, External Auditors, Control Owners and Business Stakeholders throughout the audit lifecycle.
- Support audit planning, walkthroughs, testing discussions, evidence collection and issue resolution.
- Review, validate and maintain audit evidence to ensure completeness and accuracy before submission to auditors.
- Lead and monitor User Access Review (UAR) activities.
- Identify and support remediation of Segregation of Duties (SoD) conflicts, inappropriate access and other access-related issues.
- Conduct periodic reviews of normal, standard and emergency changes to assess compliance with Change Management policies.




- Analyze and evaluate SOC 1 and SOC 2 reports.
- Assess Complementary User Entity Controls (CUECs) and determine their impact on the organization's control environment.
- Review IT policies, standards and procedures to identify control gaps, compliance risks and process inefficiencies.
- Document audit observations, risk assessments, control deficiencies and recommendations.
- Track remediation plans and ensure timely closure of audit findings and compliance issues.
- Support enterprise-wide IT Risk Assessments, compliance monitoring and control effectiveness evaluations.
- Facilitate walkthroughs and stakeholder discussions to strengthen the overall IT governance and control framework.

Required / Preferred Skills
- Strong experience in ITGC Testing.
- Strong experience in ITAC Testing.
- Experience in SOX Compliance.
- Experience with SAP Security Controls.
- Experience with Oracle Controls Testing.
- Experience in User Access Reviews (UAR).
- Solid understanding of Segregation of Duties (SoD).
- Experience in Change Management Reviews.
- Knowledge of SOC 1 and SOC 2 reports.
- Understanding of Complementary User Entity Controls (CUECs).
- Familiarity with COBIT, NIST and ISO 27001.
- Knowledge of IT audit methodologies.
- Strong stakeholder management, audit coordination, documentation and communication skills.

📌 IT Audit & Compliance_ITGC & ITAC (Bengaluru)
🏢 INNOVATIVE
📍 Bengaluru