Looking for an IT Auditor who can look past the checklist and tell us whether our technology controls actually work.
What you'll do
Plan and execute internal audits in line with department and professional standards.
Evaluate risks in auditable areas and create or restructure audit testing programs to address these risks.
Evaluate the design and operating effectiveness of internal controls over processes that include but are not limited to:
Workstation Security
Server / OS Operations
Network Operations
Security Operations
IT Asset (Hardware & Software) Management
Database Management
Mobile Device Management
Access Management
Software Development
Cloud Computing
Managed IT Services
Payment Solutions
Core Process Solutions
Cybersecurity
IT Governance / Information Security Program
Incident Response
Peer review workpapers.
May assist with Operational or Compliance audit procedures.
May assist with Third Party (e.g. SOC)



or co-sourced/outsourced internal audits.
Perform other duties as assigned.

Frameworks
Global Internal Audit Standards | FFIEC | PCI DSS | NIST CSF

What we're looking for
Competencies:
Proficient knowledge of Microsoft Office Applications (e.g., Word, Excel, Power-Point, etc.)
Robust Written and Verbal Communication Skills
Strong Project Management Skills
Detail Oriented
Ability to apply professional judgment and critical thinking to:
Assess risk, materiality, and control effectiveness
Determine if evidence is sufficient and complete
Analyze root causes of issues
Effectively interpret and document processes.
Experience with data analysis is a plus.
Familiarity with AuditBoard is a plus.

~ CISA, CISSP or CCSP certification (preferred)

📌 CyberSecurity and IT Auditor (Bengaluru)
🏢 ThoughtFocus
📍 Bengaluru