BDO - IT Audit Role (4-6 yrs)

Job Overview: We are looking for an experienced IT Audit professional to join our team to assess and strengthen the IT General Controls (ITGC) framework. The ideal candidate will have a deep understanding of IT auditing, compliance, risk management, and internal control frameworks. The role involves reviewing the organization's IT systems, ensuring compliance with relevant regulations, and recommending improvements to enhance the control environment.

Key Responsibilities:

- Conduct IT audits focusing on ITGC, ensuring alignment with industry standards and regulatory requirements.

- Review and assess the effectiveness of IT policies, processes, and controls related to data security, system integrity, and change management.

- Perform risk assessments and identify control weaknesses or gaps in IT processes.

- Review the effectiveness of controls around systems, applications, and network infrastructure.

- Collaborate with cross-functional teams to evaluate and mitigate IT-related risks, ensuring compliance with SOX, ISO, GDPR, or other relevant frameworks.

- Document audit findings and prepare detailed reports, providing clear and actionable recommendations for process improvement.

- Follow up on the implementation of recommendations to ensure corrective actions have been taken.

- Assist in the preparation for external audits and regulatory reviews.

- Stay updated on emerging IT risks and compliance regulations.

Qualifications:

- Bachelor's degree in Information Technology, Computer Science, or related field.

- Certified Information Systems Auditor (CISA) certification preferred (or other relevant certifications such as CISSP, CISM).

- 4-6 years of experience in IT auditing, with a focus on ITGC and internal controls.

- Strong knowledge of IT risk management, cybersecurity, and regulatory compliance standards.

- Experience with audit tools and methodologies.

- Excellent problem-solving, communication, and interpersonal skills.

Preferred Skills:

- Experience with enterprise resource planning (ERP) systems (SAP, Oracle, etc.).

- Knowledge of industry-specific regulations and standards (e.g., SOX, HIPAA, PCI DSS).

- Strong understanding of cybersecurity best practices and frameworks (NIST, COBIT, etc.).