IT Audit / IT Risk Consultant

Role - IT Audit / IT Risk Consultant

Experience: 3-10 Years
Location: Chennai and Coimbatore
Travelling: Business travel is more
Joining: Immediate Joiner

Role Summary

We are seeking a skilled IT Audit professional with 3 to 10 years of experience in IT risk and controls testing. The ideal candidate should possess strong expertise in IT General Controls (ITGC), SOX Compliance, Software Development Life Cycle (SDLC) Reviews, IT Application Controls (ITAC), Information Produced by Entity (IPE) Testing, and Interface Controls Testing.

Key Responsibilities

• Execute ITGC testing across key areas such as User Access Management, Change Management, IT Operations, and Backup & Recovery.
• Perform SOX controls testing and assess the design and operating effectiveness of controls.
• Conduct SDLC reviews to evaluate adherence to development and change management processes.
• Execute IT Application Controls (ITAC) testing across critical business applications.
• Perform IPE testing to validate the completeness and accuracy of reports utilized in key controls.
• Conduct Interface Controls Testing to assess the integrity and accuracy of data transferred between systems.
• Identify control gaps, document audit observations, and recommend practical remediation measures.
• Prepare audit workpapers, testing documentation, and stakeholder reports.
• Collaborate with business and technology teams to support audit and compliance requirements.

Required Skills

• IT General Controls (ITGC)
• SOX Compliance Testing
• SDLC Reviews
• IT Application Controls (ITAC)
• IPE Testing
• Interface Controls Testing
• IT Audit & Risk Management
• Internal Controls Assessment
• Audit Documentation and Reporting

Preferred Qualifications

• Bachelor's degree in Engineering, Computer Science, Information Technology, or a related discipline.
• Professional certifications are preferred but not mandatory:
• CISA (Certified Information Systems Auditor)
• CRISC (Certified in Risk and Information Systems Control)
• CISSP (Certified Information Systems Security Professional)