Summary:

This role contributes to the annual IT audit plan by assessing risk, planning and scoping audits, and delivering assurance and advisory services across areas including financial reporting, cloud computing (mainly Azure and AWS), data protection, third-party risk, and IT operations. The candidate will collaborate with stakeholders across Accounting, Technology, Information Security, Risk, and Compliance to drive risk mitigation and control improvement efforts.

Responsibilities:

- Execute SOX IT and information systems testing program, including conducting walkthroughs, understanding processes and procedures, analyzing audit evidence, executing controls testing, and managing documentation at each step of audit phases.
- Support the creation of status reports and planning materials and collaborate closely with internal and external stakeholders for the IT Program.
- Perform end-to-end planning, execution, and reporting with the IT Internal Audit Manager of risk-based IT audit engagements across domains such as Information Security Program, Network & System Security, Business Continuity and Disaster Recovery (BC/DR), Change Management and Software Development Lifecycle (SDLC), Third-Party Risk Management (TPRM), Identity & Access Management (I&AM;), IT Operations and Asset Management, Privacy and Data Protection, Cloud Security Controls (specifically Azure and AWS).
- Evaluate IT risks, control maturity, and alignment with regulatory expectations.
- Provide risk advisory and control consultation on strategic technology initiatives, regulatory obligations, and emerging threats.
- Develop and deliver clear, concise, risk-focused audit reports dealing with complex and sensitive issues, including findings, root cause analysis, and actionable recommendations.
- Partner with internal and external audit teams to ensure a timely and efficient testing approach and issue resolution.




- Monitor and validate the implementation of management action plans and ensure sustainable remediation of control issues.
- Conduct risk assessments, including the identification of controls and testing attributes.
- Contribute to the development and evolution of the IT audit program, including risk assessment methodology, audit universe updates, and use of data analytics.
- Act as a key liaison to internal and external auditors, examiners, and other assurance functions to ensure coordinated risk coverage and alignment.
- Suggest alternatives for process improvements.

Requirements:

- Bachelor&rsquos; degree in Information Technology, Accounting, Finance, or a related field (preferably Information Technology or Computer Science).
- Five or more years of experience in IT audit, internal audit, cybersecurity, financial services, or a related business function.
- Thorough understanding of internal controls, IT risk, and regulatory requirements including SOX, FFIEC, and compliance frameworks such as COSO, NIST.
- Strong knowledge of internal audit methodologies, including experience leading audit projects in accordance with the Institute of Internal Auditors (IIA) Global Standards.
- Demonstrated ability to independently plan, execute, and manage complex audit engagements with minimal supervision.
- Experience operating as a subject matter expert in key areas such as IT General Controls (ITGCs), IT Application Controls, agile software development practices, NIST frameworks, and/or GAAP.

Required Skills:





- Strong understanding and hands-on experience in conducting audits involving IT Technical areas such as IT Infrastructure controls, AWS/Azure Cloud infrastructure, and security controls.
- Strong project management skills with the ability to manage multiple priorities simultaneously while maintaining attention to detail and accuracy.
- Advanced proficiency in Microsoft Excel, Word, Outlook, and data analysis tools used for issue identification and trend monitoring.
- Highly self-motivated, results-driven, and committed to delivering high-quality work in a dynamic environment.
- Superior interpersonal, written, and verbal communication skills, with the ability to create thorough documentation and interface effectively with individuals at various levels.
- Ability to remain organized, pay strict attention to detail, and meet critical deadlines within a high volume, fast-paced setting.
- Analytical with strong problem-solving abilities and creative resolution skills.
- Holds an active CIA, CISA, or CPA designation or evidenced plans to pursue.

Preferred Skills:

- 3 years of direct experience in IT Audit for a SaaS company or equivalent IT audit experience at a top-tier firm (Big 4, RSM, Protiviti, etc.).
- Certifications combined with hands-on experience in AWS/Azure cloud infrastructure and security.
- Certifications combined with hands-on experience in Cybersecurity Auditing against popular frameworks such as NIST CSF.
- Knowledge of data analytics tools such as ACL, Power BI, or Tableau.
- Experience with AuditBoard or other audit engagement support tools.
- Maintains other designations including Certified Management Accountant (CMA), Certified Fraud Examiner (CFE), Certified Information Security Systems Professional (CISSP), Certified Financial Services Auditor (CFSA), or other relevant business designation.

#AditiConsulting

# 26-05433

📌 Internal Auditor (Bengaluru)
🏢 Aditi Tech Consulting Private
📍 Bengaluru