Manager - IT Audit (5-8 yrs)

Key Responsibilities:

- Conduct comprehensive audits of IT systems, networks, and applications to assess their security, integrity, and compliance with regulatory requirements.

- Evaluate IT policies, procedures, and controls to identify weaknesses, gaps, and areas for improvement.

- Perform risk assessments and vulnerability scans to identify potential security threats and vulnerabilities.

- Analyze audit findings and data to develop recommendations for mitigating risks and improving IT processes and controls.

- Prepare detailed audit reports documenting findings, recommendations, and corrective actions.

- Communicate audit results and recommendations to management and stakeholders, including technical and non-technical audiences.

- Collaborate with IT and business stakeholders to implement corrective actions and remediation plans.

- Stay current with industry best practices, emerging technologies, and regulatory requirements related to IT security and compliance

Preferred: CA

- SAP certification, Oracle certification, reviews of OS (Linux,etc) or database (Oracle,SQL, etc)

- Experience in IFC, SOX or SOC (ISAE3402/SSAE18) reviews/testing.

Skills and Competencies:

- Financial Services IT Audit experience - preferably in a "hands-on" role where they lead the delivery of IT audits from the planning phase to the reporting stage.

- Must have good understanding of related ISAs, financial statement assertions, control Objectives. risk and its application as IT External Audit Practice.

- Must have experience in evaluating Financial Business Processes and identification of process risks and controls.

- Must have expertise in ITGC and ITAC control testing and in standard and non-standard systems.(SAP, Oracle, etc)

- Must have experience and technical knowledge in auditing in at least one standard ERP (SAP ERP or Oracle ERP).

- Experience of managing IT audits in addition to dealing with complex technical matters and ISAs requirement on controls.

- should have hands-on experience of ITGC, Application controls, Audit trail, SOD analysis etc