Advisory Senior - Cyber Risk Services

EisnerAmper India; Hyderabad; On-site; INR 1,500,000 - 2,100,000; Full time

Benefits offered by this job

Top Places to Work awards

Work‑life balance

Diversity, Equity & Inclusion ERGs

Job summary

EisnerAmper India is seeking a Senior to join its Cyber Risk Services team in the Hyderabad office. The role focuses on IT SOX Audit, IT Internal Audit, ITGCs, ITACs, key reports, and remediation, with emphasis on risk assessment and robust testing.

The ideal candidate brings 3+ years post‑qualification IT audit experience, with a strong grasp of SOX, SOC 1/2, RACMs, and control documentation. This role supports growth in a dynamic, client‑facing environment.

Qualifications

• 3+ years post‑qualification IT audit experience.
• Experience in ITGC, SOX, SOC-1 and SOC-2 engagements.
• Experience with risk assessment, RACMs, and control testing.

Responsibilities

• Perform IT audit reviews across SOX, SOC 1, and SOC 2 engagements.
• Document RACMs and perform SOX walkthroughs for ITGCs, ITACs, and ITDs.
• Test ITGCs (Change Management, Access, Operations, SDLC, BCM/DR).
• Test ITACs, Interface Controls and Key Reports.
• Develop client‑specific control catalogues and improve test procedures.
• Identify control weaknesses and document findings clearly.
• Coordinate with managers and external auditors, manage timelines.

Skills

IT Audit

SOX

SOC 1

SOC 2

Risk assessment

Control testing

ITGCs

CISA/CISM (preferred)

Microsoft Office

Education

Chartered Accountancy

Tools

Microsoft Office Suite

Job description

Job Description

At EisnerAmper, we look for individuals who welcome new ideas, encourage innovation, and are eager to make an impact. Whether you’re starting out in your career or taking your next step as a seasoned professional, the EisnerAmper experience is one‑of‑a‑kind. You can design a career you’ll love from top to bottom, we give you the tools you need to succeed and the autonomy to reach your goals.

We are seeking a Senior to join the Cyber Risk Services practice in our Hyderabad office. The role will focus on IT SOX Audit, IT Internal Audit, IT General Controls, Automated Controls, Key Reports, Root Causes Analysis, Impact Analysis, and Remediation. Cyber Risk Services team drives value by delivering a range of IT‑oriented risk advisory solutions rooted in risk management standards and technical expertise. We are seeking someone who thrives in a growing environment and providing clients with exceptional services.

What it Means to Work for EisnerAmper

• You will get to be part of one of the largest and fastest growing accounting and advisory firms in the industry.
• You will have the flexibility to manage your days in support of our commitment to work/life balance.
• You will join a culture that has received multiple top “Places to Work” awards.

• We believe that great work is accomplished when cultures, ideas and experiences come together to create new solutions.
• We understand that embracing our differences is what unites us as a team and strengthens our foundation.
• Showing up authentically is how we, both as professionals and a Firm, find inspiration to do our best work.
• Numerous Employee Resource Groups (ERGs) to support our Diversity, Equity, & Inclusion (DE&I) efforts

What Work You Will be Responsible For

• Perform IT Audit reviews across SOX, SOC 1, and SOC 2 engagements.
• Perform risk assessment, identification, and evaluation of controls, documenting the same in Risk & Control Matrices (RACMs).
• Perform and document SOX walkthroughs to assess the design effectiveness of IT General Controls (ITGCs), automated controls (ITACs) and IT dependencies (ITDs).
• Perform testing of ITGCs, including Change Management, Access Controls, Computer Operations, Systems Development, Business Continuity, and Disaster Recovery.
• Perform testing of ITACs, Interface Controls and Key Reports.
• Review and develop client‑specific control catalogues and control language to ensure alignment with testing procedures and enhance efficiencies in execution of test procedures.
• Identify IT control weaknesses through risk assessment, testing and document findings in a clear, concise, and structured manner.
• Evaluate control deficiencies and determine severity (control deficiency, significant deficiency, or material weakness) in coordination with Managers.
• Assist clients in identifying mitigating controls and performing impact assessments for identified control deficiencies.
• Maintain strong understanding of internal controls, SOX and compliance frameworks.
• Deliver high‑quality, audit‑ready workpapers and testing documentation that meet firm quality standards and support external auditor reliance.
• Delegate work effectively to team members, providing guidance, coaching, and stretch opportunities to support professional development and delivery of results.
• Conduct quality reviews of control testing performed by team members to ensure accuracy, completeness, and adherence to firm standards.
• Plan and manage assigned workstreams, including defining testing timelines, tracking progress, and meeting engagement milestones.
• Coordinate testing timelines, evidence requests, and responses with external auditors.
• Proactively manage client expectations and elevate risks or issues as needed.
• Exhibit strong critical thinking skills and the ability to bring structure and clarity to unstructured problems.
• Demonstrate project management capabilities across planning, prioritization, and delivery.
• Constantly develop strong working relationships with engagement managers, onshore team members, and client stakeholders.
• Use feedback and self‑reflection to build self‑awareness, leverage personal strengths, and address development areas.
• Seek and embrace opportunities that provide exposure to diverse situations and perspectives.
• Always uphold the firm’s code of ethics and professional business conduct.

Basic Qualifications

• Chartered Accountancy
• Prior Experience: 3+ years of post‑qualification experience in IT Audit, ITGC, SOX, SOC‑1, SOC‑2, Application Control Review, Key Report testing.
• Experience in service delivery, team handling, work with all levels of staff and supervision of team members.
• Excellent interpersonal, written, and verbal communication skills in business and technical environments and within a diverse group of individuals
• Good understanding of technical platforms and risk management practices.
• Preferred experience of working in international client facing roles on SOX and Internal Audit engagements.
• Technically proficient with the capability of performing at an intermediate or advanced level with the software tools including but not limited to the Microsoft Office Suite of products (Excel, Word, PowerPoint, Adobe)
• Ability to work in Global Operating Model including virtual teams.

Preferred/Desired Qualifications

• Should have at least one of the following certifications: CISA/CISM/CISSP/ISO27001 LA/ISO 22301 LA/CBCP, or any other relevant certification
• Having experience with post‑implementation review, Information Security, COBIT, ITL and Strategy transformation would be an add‑on.

We strongly believe in the value of diversity and creating supportive, inclusive environments where our colleagues can succeed. As such, EisnerAmper is proud to be an Equal Opportunity Employer. We do not discriminate on the basis of race, color, ancestry, national origin, religion, or religious creed, mental or physical disability, medical condition, genetic information, sex, including pregnancy, childbirth, and related medical conditions, sexual orientation, gender identity, gender expression, age, marital status, military or protected veteran status, citizenship, or other protected characteristics under federal, state, or local law.

About Our Risk And Compliance Services Team

Specializing in services such as risk advisory, internal audit and IT risk, RCS employees aren’t just passionate about technology, but we see it as our driving force for innovation and forward thinking. We’re committed to serving as advocates to our clients, enabling them to navigate, transform, secure, and maintain processes, controls, and digital solutions they need to reach their unique goals. Whether it’s complying with a new regulatory requirement or automating controls within a process, providing peace of mind for those “what’s next” moments is our mantra and unique promise to clients.

Risk & Compliance Services employees are encouraged to think like an owner when supporting clients. Through this entrepreneurial and business‑first mindset, we’re pushed to take a step outside of our comfort zones and deliver solutions that both create a lasting business impact for our clients and allow us to grow as professionals.

Our core values of trust, integrity and accountability allow us to act as strategic innovators. Because when we build trust with each other, we can bring new ideas to the table and execute them without fear of failure.

About EisnerAmper

EisnerAmper is one of the largest accounting, tax, and business advisory firms, with nearly 5,000 employees including 450 partners across the world. We combine responsiveness with a long‑range perspective; to help clients meet the pressing issues they face today and position them for success tomorrow.

Our clients are enterprises as diverse as sophisticated financial institutions and start‑ups, global public firms, and middle‑market companies, as well as high net worth individuals, family offices, not‑for‑profit organizations, and entrepreneurial ventures across a variety of industries. We are also engaged by the attorneys, financial professionals, bankers, and investors who serve these clients.

About EisnerAmper India

EisnerAmper (India) Consultants Pvt. Ltd. ("EA India") is a subsidiary of Eisner Advisory Group LLC ("EA Group"), which practices in an alternative practice structure with EisnerAmper LLP. EA India employees provide advisory services to clients of EA Group and audit services to clients of EisnerAmper LLP and comply with the professional standards applicable to each of EA India, EA Group and EisnerAmper LLP. EA India employees also provide operational services to EA Group and EisnerAmper LLP. The policies and procedures of EA India, including obligations of confidentiality and non‑disclosure, apply to all services provided by EA India employees. All applicants are applying to positions for employment with EA India, and not EA Group or EisnerAmper LLP.

EA India opened its first office in Mumbai in 2007. Over the years, our India footprint has expanded to include offices in Bangalore, Hyderabad and Ahmedabad. We are a culturally diverse pool of over 900 professionals supporting our global clientele from a range of startups to Fortune 500 entities.

Should you need any accommodations to complete this application please email: [e-mail]

Preferred Location

Hyderabad