Audit & Compliance Executive

Job Summary

We are looking for an IT Audit & Compliance Executive with 2+ years of experience to support IT audits, information security compliance, risk assessments, internal controls, and regulatory requirements. The role will involve evaluating IT processes and controls, identifying gaps, supporting remediation, and maintaining audit and compliance documentation.

Key Responsibilities

• Conduct and support IT audits covering infrastructure, applications, access controls, IT operations, and information security.
• Review IT General Controls (ITGC), including:
• User access management
• Password and authentication controls
• Change management
• Backup and recovery
• Incident management
• IT operations and monitoring
• Asset management
• Perform risk and control assessments and identify control gaps and compliance risks.
• Prepare audit working papers, evidence trackers, checklists, and audit reports.
• Collect, validate, and maintain audit evidence from IT and business teams.
• Track audit observations, prepare remediation plans, and follow up on corrective actions.
• Support internal, external, customer, and regulatory IT audits.
• Assist in maintaining compliance with relevant information security and IT governance standards/frameworks.
• Review IT policies, procedures, SOPs, and control documentation and recommend improvements.
• Monitor compliance with organizational IT policies and security requirements.
• Coordinate with IT, Information Security, HR, Finance, Legal, and other departments for audit requirements.
• Maintain compliance registers, risk registers, audit schedules, and management reports.
• Assist in periodic reviews of privileged and user access.
• Support Business Continuity, Disaster Recovery, and IT risk management activities.
• Identify recurring control deficiencies and suggest process improvements.
• Ensure audit and compliance records are maintained accurately and confidentially.

Required Qualifications

• Bachelor's degree in IT, Computer Science, Information Systems, Cybersecurity, or a related field.
• 2+ years of experience in IT Audit, IT Compliance, Information Security, IT Risk, or IT Controls.
• Understanding of IT General Controls (ITGC) and basic information security principles.
• Good knowledge of audit processes, risk assessment, control testing, and evidence collection.
• Strong knowledge of MS Excel, Word, and PowerPoint.
• Good analytical, documentation, communication, and problem-solving skills.
• Ability to interact with technical and non-technical stakeholders.

Preferred Knowledge

• ISO 27001 / ISMS
• SOC 1 / SOC 2
• ITGC
• COBIT
• NIST Cybersecurity Framework
• Risk & Control Self-Assessment (RCSA)
• Access Management / IAM
• Vulnerability and Patch Management
• Business Continuity & Disaster Recovery
• Data Privacy and Protection requirements
• Vendor / Third-Party Risk Management