Associate Director - IT Audit (7-10 yrs)

Job Summary:

The IT Auditor plays a critical role in evaluating and assessing the effectiveness of an organization information technology controls and processes as part of Assurance engagement. They are responsible for identifying risks, vulnerabilities, and compliance issues within IT systems and infrastructure. This role involves conducting IT reviews and data analysis, as a part of Assurance engagements in accordance

with the prescribed auditing standards.

Key Responsibilities:

- Conduct comprehensive audits of IT systems, networks, and applications to assess their security, integrity, and compliance with regulatory requirements.

- Candidate should have experience in IT audits of ERP applications, interfaces, Access controls, Segregation of Duties analysis, ITGC, ITAC and audit trail review of various applications as part of IT audit support for statutory audits / external clients.

- Candidate should have good understanding of audit methodology and legal / regulatory requirements from statutory perspective.

- Evaluate IT policies, procedures, and controls to identify weaknesses, gaps, and areas for improvement.

- Perform risk assessments and vulnerability scans to identify potential security threats and vulnerabilities.

- Analyze audit findings and data to develop recommendations for mitigating risks and improving IT processes and controls.

- Prepare detailed audit reports documenting findings, recommendations, and corrective actions.

- Communicate audit results and recommendations to management and stakeholders, including technical and non-technical audiences.

- Collaborate with IT and business stakeholders to implement corrective actions and remediation plans.

- Stay current with industry best practices, emerging technologies, and regulatory requirements related to IT security and compliance.

Qualifications:

- Required: CA

Preferred:

- CISA/ DISA certified

- SAP certification, Oracle certification, reviews of OS (Linux,etc) or database (Oracle,SQL, etc)

- Experience with using data techniques such as IDEA or ACL, Tableau, Qlik, Power BI, SAS or similar

- Good communication skills (Verbal & Written)

Skills and Competencies:

- Financial Services or Non Financial services IT Audit experience - preferably in a "hands-on" role where they lead the delivery of IT

audits from the planning phase to the reporting stage.

- Must have good understanding of related ISAs, financial statement assertions, control Objectives. risk and its application as IT

External Audit Practice:

- Must have experience in evaluating Financial Business Processes and identification of process risks and controls.

- Must have expertise in ITGC and ITAC control testing and in standard and non-standard systems.(SAP, Oracle, etc)

- Must have experience and technical knowledge in auditing in at least one standard ERP (SAP ERP or Oracle ERP).

- Experience of managing IT audits in addition to dealing with complex technical matters and ISAs requirement on controls.

- Team handling experience is a must.

- Should be familiar with ERP accounting systems such as SAP, Oracle, etc