It Auditor

IT Auditor I, GCC Assurant

The Sr. IT Auditor I is responsible for evaluating and strengthening Assurants IT control and risk environment through the execution of risk-based IT audits and advisory activities. Working as part of the Internal Audit & Advisory Services (IAAS) team, this role partners with business and technology stakeholders to assess risks, evaluate control effectiveness, identify improvement opportunities, and provide objective assurance across the organization.

This role contributes by performing independent audits across technology domains, supporting enterprise risk assessments, and communicating meaningful insights that help management make informed decisions. Through strong analytical skills, stakeholder engagement, and adherence to audit methodology and professional standards, the Sr. IT Auditor I helps protect and enhance Assurant's operational effectiveness and risk management framework.

This role will focus on:

• Risk-Based IT Audits
• IT General Controls (ITGC) Assessment
• Technology Risk Management
• Internal Control Evaluation
• Audit Planning and Execution
• Enterprise Risk Assessment Support
• Audit Reporting and Stakeholder Communication
• Professional Practice and Continuous Improvement Initiatives

This position will be based in Bengaluru or Hyderabad, India.

Work Hours 3:30 PM 12:30 AM IST

What will be my duties and responsibilities in this job?

IT Audit Planning & Execution

• Participate in risk-based IT audits across business processes, applications, infrastructure, cloud environments, cybersecurity, and technology operations.
• Design and execute audit procedures through all phases of the audit lifecycle, including planning, fieldwork, testing, reporting, and follow-up activities.
• Evaluate the adequacy and effectiveness of internal controls and identify opportunities to strengthen the control environment.
• Develop audit programs and testing strategies aligned with audit objectives, organizational risks, and professional auditing standards.
• Assist in annual risk assessments and audit planning activities across the enterprise.
• Follow up on audit findings and recommendations to evaluate remediation effectiveness.

Risk Assessment & Control Evaluation

• Assess IT risks associated with change management, logical access, information security, system development, data privacy, databases, networks, and IT operations.
• Analyze business processes, technologies, and emerging trends to identify control gaps and operational risks.
• Evaluate compliance with internal policies, industry standards, and regulatory requirements.
• Provide recommendations that balance risk mitigation with business objectives.

Stakeholder Engagement & Communication

• Communicate audit findings, observations, and recommendations through concise written reports and presentations.
• Collaborate with business leaders, technology teams, and audit stakeholders throughout audit engagements.
• Build strong working relationships and establish credibility as an independent and trusted advisor.
• Translate technical audit results into business-focused insights and actionable recommendations.

Professional Practice & Continuous Improvement

• Participate in Internal Audit initiatives, centers of excellence, and methodology enhancement activities.
• Support quality assurance and continuous improvement programs aligned with IIA standards.
• Contribute to departmental knowledge sharing, training, and capability development.
• Assist in developing and maintaining audit methodologies, policies, procedures, and documentation.
• Participate in regulatory and legal information requests, when required.
• Support internal communication and knowledge management activities within SharePoint and other collaboration platforms.

Business Partnership & Development

• Develop a strong understanding of Assurants businesses, operating environment, and strategic priorities.
• Stay informed of technology, cybersecurity, regulatory, and industry developments that may impact risk management practices.
• Pursue ongoing professional development and share knowledge and lessons learned with colleagues.

What are the requirements needed for this position?

Education

• Bachelor's degree in Information Technology, Computer Science, Business, Accounting, Finance, Information Systems, Risk Management, or a related discipline.
• Equivalent combination of education and relevant experience may be considered.

Experience

• 2-3 years of experience in Internal Audit, External Audit, IT Audit, Technology Risk, Information Security, Compliance, or related technology-focused roles.
• Experience performing audit testing, risk assessments, control evaluations, and audit documentation.
• Experience collecting and analyzing complex information and drawing logical conclusions.
• Experience preparing professional written reports and presenting findings to stakeholders.
• Experience collaborating with cross-functional business and technology teams.

Core Skills & Competencies

• Strong knowledge of risk-based audit methodologies and internal control frameworks (COSO, IIA IPPF, etc.).
• Understanding of IT General Controls (ITGCs), risk assessment techniques, governance frameworks, and audit standards.
• Knowledge of cloud technologies, infrastructure, databases, systems development, networking, cybersecurity, logical access controls, and information security practices.
• Strong analytical and critical-thinking skills with the ability to identify root causes and recommend practical solutions.
• Ability to work independently, navigate ambiguity, and manage multiple priorities.
• Excellent verbal and written communication skills.
• Strong stakeholder management and collaboration capabilities.
• Ability to document work thoroughly and maintain audit evidence in accordance with professional standards.
• Proficiency with Microsoft Office tools, particularly Excel and PowerPoint.
• Experience using data analytics techniques and tools to support audit activities.

Preferred Qualifications

• Professional certifications such as CISA, CISSP, CRISC, CISM, CIA, CPA, or equivalent.
• Experience within the insurance, financial services, banking, or highly regulated industries.
• Experience auditing cloud platforms, cybersecurity controls, privacy controls, and technology governance frameworks.
• Familiarity with enterprise risk management, compliance, and regulatory environments.
• Experience using Power BI, Tableau, or other data visualization and analytics tools.
• Experience creating and maintaining content within SharePoint environments.
• Knowledge of business process improvement methodologies such as Lean or Six Sigma.
• Experience managing project plans, issue logs, risk registers, and remediation activities.