Senior/Assistant Manager - IT Audit/ITGC/ITAC

Job Description:

We are looking for an experienced Senior / Assistant Manager - External IT Audit with expertise in IT General Controls (ITGC), IT Application Controls (ITAC), and external audit engagements. The ideal candidate should have experience in technology risk assessments, regulatory compliance, SOX/SOC audits, and evaluating IT controls across enterprise systems and cloud environments.

Key Responsibilities:

• Lead and execute external IT audit engagements in accordance with PCAOB and applicable auditing standards.

• Conduct IT risk assessments and process walkthroughs to identify technology-related risks and control gaps.

• Evaluate the design and operating effectiveness of IT General Controls (ITGCs) and IT Application Controls (ITACs) supporting Internal Controls over Financial Reporting (ICFR).

• Perform SOC 1, SOC 2, SOC 2+ (HITRUST), and SSAE 18 assessments in accordance with AICPA standards.

• Assess IT systems, infrastructure, applications, and business processes to identify control weaknesses and recommend remediation.

• Develop audit plans, define audit scope, execute testing, and prepare audit reports.

• Review IT governance, access management, change management, backup, disaster recovery, and operational controls.

• Collaborate with business stakeholders, finance teams, and technology teams to strengthen internal control environments.

• Mentor junior team members and review audit documentation to ensure quality and compliance.

• Stay updated with evolving regulatory requirements, industry standards, and emerging technology risks.

Required Skills:

• 5-10 years of experience in External IT Audit, IT Risk Advisory, or Technology Risk Consulting.

• Strong expertise in ITGC, ITAC, SOX/ICFR testing, and external audit engagements.

• Experience conducting SOC 1, SOC 2, SOC 2+ (HITRUST), and SSAE 18 assessments.

• Hands-on experience evaluating controls across ERP platforms and enterprise technologies such as SAP, Oracle, Windows, UNIX/Linux, Mainframe, AS400 (iSeries), SQL Server, Oracle Database, Sybase, DB2, and cloud platforms.

• Good understanding of IT governance and security frameworks such as COBIT, COSO, ISO 27001, NIST, and HIPAA.

• Strong knowledge of IT risk management, cybersecurity controls, identity and access management, and change management processes.

• Excellent analytical, documentation, stakeholder management, and communication skills.

• Experience leading teams and managing multiple audit engagements is preferred.

Education (Mandatory):

• Full-time B.E./B.Tech, MCA, M.Tech, MBA, CA, CISA, CISSP, or equivalent qualification in Information Technology, Computer Science, or a related discipline.