GITC Manager

Manager, Technology Controls Advisory, Audit and Assurance

About

At Deloitte, we do not offer you just a job, but a career in the highly sought-after risk Management field. We are one of the business leaders in the risk market. We work with a vision to make the world more prosperous, trustworthy, and safe. Deloittes clients, primarily based outside of India, are large, complex organizations that constantly evolve and innovate to build better products and services. In the process, they encounter various risks and the work we do to help them address these risks is increasingly important to their success—and to the strength of the economy and public security.

By joining us, you will get to work with diverse teams of professionals who design, manage, and implement risk-centric solutions across a variety of domains. In the process, you will gain exposure to the risk-centric challenges faced in today’s world by organizations across a range of industry sectors and become subject matter experts in those areas.

Required Qualifications and Experience
* BE/B.Tech/MCA/MBA in Computer Science, Information Technology, or a related discipline.
* Minimum 3+ years of experience in ITGC/ITAC audits, preferably in Banking and financial industries (5+ yrs experience for Manager)
* Understanding of software development, system architecture, DevOps, production release processes
* Understanding of application architecture, databases, operating systems, messaging, APIs, cloud, or infrastructure concepts.
* Understanding of application code logic in object-oriented languages such as Java, C#, and C++
* Ability to analyze risks and controls across complex engineering environments.
* Strong analytical, problem-solving and teamwork skills.

Preferred Competencies/ Qualifications
* Ability to review application code logic in object-oriented languages such as Java, C#, and C++
* Relevant certification or industry accreditation such as CISA, CISSP

Work Location Requirement
* Bangalore only - Candidates must be willing to work from the office and/or client location 5 days a week, based on project and business requirements.

Key Responsibilities

IT General Controls (ITGC) Audit
* Perform ITGC audits across including but not limited to:

* Change Management
* User Access Management
* Privileged Access Reviews
* Backup and Recovery Controls
* Job Scheduling and Monitoring Controls

* Assess control design and operating effectiveness across applications, databases, operating systems, and infrastructure.
* Evaluate compliance with internal policies, regulatory requirements, and control frameworks.
* Identify control gaps, risks, and remediation opportunities.

IT Application Controls (ITAC) Audit
* Perform testing of key IT Application Controls supporting financial and operational business processes.
* Evaluate automated controls, system-configured controls, interface controls, workflows, and application reports.
* Assess key ITAC domains, including but not limited to:

* Automated Business Process Controls
* System Configuration Controls
* Interface and Data Transfer Controls
* Workflow and Approval Controls
* Report Testing and IPE (Information Produced by the Entity) Validation
* Master Data Management Controls

Audit Execution
* Execute audits across planning, fieldwork, reporting, and follow-up stages.
* Perform risk assessments, walkthroughs, control testing, and documentation reviews.
* Review audit evidence for completeness, accuracy, and alignment with control objectives.

Issue Management
* Identify and document audit findings, root causes, and recommendations.
* Communicate observations and risk implications to stakeholders.

Stakeholder Coordination
* Coordinate with business and technology teams to obtain evidence and resolve audit queries.
* Track audit findings, remediation plans, and closure activities.
* Collaborate with global stakeholders and escalate risks or delays as required.