IT/IS Auditor

Role: IT Auditor / IS Auditor

Location: Mumbai (Andheri)

Objective: Responsible for evaluating the design, implementation, and operating effectiveness of the organizations IT controls, ensuring the security, integrity, and availability of information systems.

Key Responsibilities

• Audit Planning & Execution: Develop and execute risk-based audit programs for IT infrastructure, applications, and processes (e.g., ITGCs, Application Controls, Cybersecurity). Conduct testing on logical access, change management, data backup/recovery, BCP, and network security.
• Risk & Compliance Assessment: Assess IT General Controls (ITGCs) across various platforms (operating systems, databases, network devices).
• Reporting & Follow-up: Prepare clear and concise audit reports detailing findings and risks. Effectively communicate technical issues to stakeholders and track the timely remediation of identified gaps.
• Advisory & Improvement: Provide guidance to IT and business teams on designing internal controls for new systems, and stay updated on emerging technologies.

Qualifications & Skills

• Education: BE (Bachelor of Engineering/Technology) degree OR CISA (Certified Information Systems Auditor) certification.

Technical Skills Required

• IT Audit Methodology: Understanding of audit standards, principles, and a risk-based approach to Information Systems (IS) auditing.
• Cybersecurity: Familiarity with information security principles, vulnerability management, penetration testing concepts, and standard security tools.
• Data Analysis: Proficiency with audit tools or advanced data analysis techniques.
• Control Frameworks: Working knowledge of IT governance and control frameworks