Senior IT Audit Professional (5-8 yrs)

Job Description

Job summary

We are looking for a Senior IT Audit professional to execute SOX testing for SAP and other systems (non-SAP applications) for ITGC/ITAC testing and other IT audits as per assignment. Responsibilities include planning, conducting fieldwork, validating samples, organizing work papers, interacting with stakeholders, preparing reports with observations and root cause analysis, and ensuring timely closure of audit observations through effective follow-up. The role involves active participation in process understanding discussions, preparation of supporting annexures, and knowledge-sharing activities within the team.

Roles & Responsibilities

- Responsible for execution of IT testing and other IT audits allocated as per SOX/Audit plan with the guidance of Team/Group Leader, ensuring end-to-end coverage of the assignment.

- Gather preliminary information and previous reports, if any, understand business processes and associated risks, and analyze financial and non-financial data to define scope.

- Obtain business policies, procedures and applicable SOPs (Standard Operating Procedures), understand applicable rules and regulations, and obtain required reports from SAP and other systems.

- Responsible for documenting process flowcharts accurately, performing detailed validations of selected samples, highlighting any inconsistencies with current policies and procedures, and discussing deviations with the team leader to obtain business reasons from relevant process owners. Ensure proper arrangement and sequential storage of work papers in designated folders.

- Ensure closure of audit observations in respective areas, and prepare and consolidate draft reports. This includes outlining observations, risk implications, and root causes, and engaging in preliminary discussions with process owners.

- Prepare supporting documents and annexures referenced in the audit report to achieve comprehensive coverage and quality of recommendations.

- This role extends to executing, performing, and reviewing follow-ups on open audit observations. This involves understanding the issues, associated risks, and agreed-upon actions, as well as coordinating with relevant process owners to ensure the completeness and sustainable implementation of agreed-upon actions.

- Escalate key unresolved recommendations to the team/group leader on a timely basis ensuring resolutions.

- Actively participate in knowledge-sharing activities within the team by suggesting areas, making presentations on relevant topics, and pursuing relevant certifications.

Qualifications

Educational qualification: CISA, Master's degree in Information Technology

Minimum work experience: 5 to 7 years of experience

Technical Skills

- Good understanding of IT environment

- Expert knowledge in ITGC/ITAC testing for SAP and other business applications including configuration testing ensuring end to end coverage

- Understanding of SOX requirements/best practices for IT controls

- Proficiency in defining the scope of audits based on an understanding of business processes, control environment and associated risks.

Behavioral skills

- Effective interpersonal skills, fostering positive relationships with others.

- Proficiency in networking and influencing stakeholders, building strong connections and partnerships.

- Displays assertiveness, effectively expressing ideas and opinions while respecting others.

- Strong communication skills, facilitating clear and impactful interactions.

- Proficiency in report writing, conveying information in a clear and structured manner.

- Strong analytical skills, enabling effective problem-solving and decision-making.