Job Description

Deputy Manager / Manager IT Audit Compliance

Position Overview

We are looking for an experienced IT Audit Compliance qualified to lead and execute IT audits, IT General Controls (ITGC), SOX compliance, IT risk assessments, cybersecurity control assessments, and third-party risk reviews. The role will work closely with IT, Information Security, business stakeholders, internal/external auditors, and senior management to strengthen the organization's technology risk and control environment.

Key Responsibilities

1. IT Audit ITGC

- Lead and execute ITGC audits covering Access Management, Change Management, Program Development, and IT Operations .
- Conduct business process walkthroughs, identify key risks and controls, and evaluate control design and operating effectiveness.
- Develop and review Risk Control Matrices (RCMs) and audit workpapers.
- Conduct testing of controls and identify control gaps, observations, and remediation requirements.
- Prepare and present audit reports to senior management with actionable recommendations.
- Coordinate and manage concurrent internal and external IT audits, ensuring timely submission of audit evidence.

2. SOX IT Compliance

- Lead SOX 404 ITGC compliance activities, including Test of Design (ToD) and Test of Effectiveness (ToE).
- Support statutory and regulatory audits by preparing and reviewing critical audit evidence.
- Monitor compliance with internal policies, standards, and regulatory requirements.
- Evaluate User Access Reviews (UAR), termination controls, change management controls, and management review controls.

3. IT Risk Cybersecurity

- Conduct IT risk assessments covering applications, infrastructure, databases, networks, and information security controls.
- Assess cybersecurity controls across areas such as:
- Access Management
- Secure Configuration
- Network Security
- Encryption
- Vulnerability Management
- Business Continuity Disaster Recovery
- Secure Development
- Data Security





- Conduct application criticality and risk-tier assessments based on business impact, data classification, and data flows.
- Support ISO 27001 assessments and information security compliance initiatives.
- Review controls for Data at Rest (DAR) and Data in Motion (DIM).

4. Third-Party Risk Management

- Lead IT and cybersecurity risk assessments for critical vendors and service providers.
- Develop and review third-party risk assessment questionnaires and control checklists.
- Evaluate vendor controls, identify gaps, and track remediation actions.
- Review SOC reports and assess controls implemented by service organizations.

5. SAP Technology Controls

- Conduct ITGC and application control assessments for SAP ERP / SAP S/4HANA environments.
- Assess access, change management, and IT operations controls across enterprise applications.
- Partner with IT and application owners to strengthen control effectiveness and audit readiness.

6. Stakeholder Audit Management

- Act as a key point of contact for internal, external, statutory, and regulatory auditors.
- Collaborate with CISO, CIO, IT Heads, Application Owners, Business Owners, and Risk Compliance teams .
- Lead audit discussions, walkthroughs, observation meetings, and remediation tracking.
- Present audit findings and risk observations to senior stakeholders.
- Guide junior team members and manage multiple audit engagements simultaneously.

Key Deliverables

- Timely completion of ITGC and IT audit engagements.
- Effective SOX 404 compliance and control testing.
- Strengthened IT risk and cybersecurity control environment.
- Timely closure of audit observations and remediation actions.




- Improved audit readiness and evidence management.
- Effective third-party/vendor risk management.
- High-quality audit reports and management presentations.

Qualifications

- Bachelor's degree in Technology, Computer Science, Information Systems, Engineering, Cybersecurity, or a related discipline .
- Relevant professional certifications such as ISO 27001, CISA, CISM, CISSP, CRISC or equivalent will be an advantage.
- Strong understanding of IT audit, ITGC, SOX 404, IT risk, cybersecurity, and information security frameworks .

Experience

- 58 years of relevant experience in IT Audit, IT Risk, IT Compliance, IT Assurance, Cybersecurity Controls, or Technology Risk.
- Experience in Big 4 / consulting / financial services / manufacturing / automotive / technology environments will be preferred.
- Experience in leading audits and managing multiple stakeholders is desirable.

Technical Skills

- ITGC SOX 404
- IT Audit IT Assurance
- IT Risk Assessment
- Cybersecurity Controls
- ISO 27001
- NIST Framework
- Third-Party / Vendor Risk Management
- SOC 1 / SOC 2 Reviews
- Access Management UAR
- Change Management
- Business Continuity Disaster Recovery
- SAP / SAP S/4HANA
- Risk Control Matrix (RCM)
- Control Testing ToD ToE
- Archer GRC / ServiceNow
- Microsoft Excel

Key Competencies

- Strong analytical and problem-solving skills
- Audit planning and execution
- Risk-based thinking
- Stakeholder management
- Strong written and verbal communication
- Report writing and presentation skills
- Ability to manage multiple audits and priorities
- Team leadership and mentoring
- Strong attention to detail
- Ability to work with senior management and cross-functional teams

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Senior Deputy Manager - IT (Manesar)
🏢 UNO MINDA
📍 Manesar