Assistant Manager | Internal Audit | Bengaluru | Internal audit

Deloitte & Touche GmbH Wirtschaftsprüfungsgesellschaft; Bengaluru; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Deloitte & Touche GmbH Wirtschaftsprüfungsgesellschaft in Bengaluru invites a Technology Audit professional to join our Assurance team. You will lead IT risk engagements, design risk-based audit plans, and perform walkthroughs and testing across applications, infrastructure, cloud, and database environments.

You will identify control gaps, recommend remediation, and prepare reports for senior management. Strong communication and project management skills are essential for coordinating

Qualifications

• Bachelor's or Master's degree in Information Technology, Computer Science, Information Systems, Accounting, Finance, or related disciplines.
• Professional certifications such as CISA, CIA, CISSP, CRISC, CPA, CA, or equivalent preferred.
• 3-5 years of experience in Technology Audit, IT Risk, SOX, Internal Audit, Controls Assurance, or related consulting services.
• Strong understanding of ITGCs, ITACs, technology risk management, and governance frameworks.
• Experience performing walkthroughs, controls testing, reporting, and stakeholder management.
• Excellent analytical, communication, presentation, and project management skills.

Responsibilities

• Lead and execute Technology Audit, IT Risk, SOX, Controls Assurance, and Internal Audit engagements.
• Perform risk assessments and develop risk-based audit plans, testing strategies, and work programs.
• Conduct walkthroughs, control testing, issue validation, and root cause analysis.
• Evaluate the design and operating effectiveness of technology controls across applications, infrastructure, databases, and cloud environments.
• Identify control deficiencies, technology risks, and process improvement opportunities and recommend practical remediation actions.
• Prepare audit reports, executive summaries, and management presentations.
• Track audit observations and remediation plans through closure.
• Assess controls related to: User Access Management, Privileged Access Management, Segregation of Duties (SoD), Change Management, Computer Operations, Backup and Recovery, Job Monitoring and Batch Processing.
• Review joiner, mover, leaver (JML) controls and user access governance processes.
• Evaluate emergency/firefighter access and privileged user monitoring controls.
• IT Application Controls (ITAC) Perform testing of: Automated Controls, Interface Controls, Configuration Controls, Workflow Controls, System-Enforced Controls, Information Produced by the Entity (IPE)
• Evaluate Software Development Lifecycle (SDLC) controls, including: Change Governance, Requirements Management, Development Standards, Code Reviews, Testing Approvals, Release Management, Deployment Controls
• Assess technology controls across cloud environments including: Microsoft Azure, AWS, Google Cloud Platform (GCP)
• Manage day-to-day interactions with technology stakeholders, application owners, infrastructure teams, and business process owners.
• Manage multiple engagements and ensure timely delivery of high-quality work.
• Support proposal development, client presentations, and business pursuit activities.

Skills

Risk assessment

Control testing

Stakeholder mgmt

ITGCs & ITACs

SDLC controls

Analytical skills

Communication

Project mgmt

Education

Bachelor's or Master's in IT/CS/IS/Accounting/Finance

Tools

Azure

AWS

GCP

Job description

Select how often (in days) to receive an alert:

The Team

Assurance had to do much more than keep the wheels turning; it is the engine that drives functional excellence and the enabler of innovation and long-term growth. Learn more about Assurance

• Lead and execute Technology Audit, IT Risk, SOX, Controls Assurance, and Internal Audit engagements.
• Perform risk assessments and develop risk-based audit plans, testing strategies, and work programs.
• Conduct walkthroughs, control testing, issue validation, and root cause analysis.
• Evaluate the design and operating effectiveness of technology controls across applications, infrastructure, databases, and cloud environments.
• Identify control deficiencies, technology risks, and process improvement opportunities and recommend practical remediation actions.
• Prepare audit reports, executive summaries, and management presentations.
• Track audit observations and remediation plans through closure.
• Assess controls related to: User Access Management, Privileged Access Management, Segregation of Duties (SoD), Change Management, Computer Operations, Backup and Recovery, Job Monitoring and Batch Processing.
• Review joiner, mover, leaver (JML) controls and user access governance processes.
• Evaluate emergency/firefighter access and privileged user monitoring controls.
• IT Application Controls (ITAC) Perform testing of: Automated Controls, Interface Controls, Configuration Controls, Workflow Controls, System-Enforced Controls, Information Produced by the Entity (IPE)
• Evaluate Software Development Lifecycle (SDLC) controls, including: Change Governance, Requirements Management, Development Standards, Code Reviews, Testing Approvals, Release Management, Deployment Controls
• Assess technology controls across cloud environments including: Microsoft Azure, AWS, Google Cloud Platform (GCP)
• Manage day-to-day interactions with technology stakeholders, application owners, infrastructure teams, and business process owners.
• Manage multiple engagements and ensure timely delivery of high-quality work.
• Support proposal development, client presentations, and business pursuit activities.
• Bachelor's or Master's degree in Information Technology, Computer Science, Information Systems, Accounting, Finance, or related disciplines.
• Professional certifications such as CISA, CIA, CISSP, CRISC, CPA, CA, or equivalent preferred.
• 3-5 years of experience in Technology Audit, IT Risk, SOX, Internal Audit, Controls Assurance, or related consulting services.
• Strong understanding of ITGCs, ITACs, technology risk management, and governance frameworks.
• Experience performing walkthroughs, controls testing, reporting, and stakeholder management.
• Excellent analytical, communication, presentation, and project management skills.