Associate Manager Internal Audit - IT

Shashwath Solution; Dadri; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Shashwath Solution seeks an experienced IT Audit Specialist with a Big 4 background to lead IT audits and advisory services. The role focuses on ITGC, risk management, cybersecurity, and regulatory compliance across ERP and cloud environments.

The ideal candidate will hold a CISA certification (CISSP or other security credentials are a plus) and demonstrate strong analytical, documentation, and client-facing skills for remediation and governance improvements.

Qualifications

• 6+ years IT audit experience with Big 4 firms (Deloitte, PwC, EY, KPMG).
• CISA is required; CISSP or other security certifications are a plus.
• Strong knowledge of ITGCs, application controls, and security frameworks (COBIT, NIST, ISO 27001).
• Experience in ERP systems audits (e.g., SAP, Oracle) and cloud environment assessments (AWS, Azure, GCP).

Responsibilities

• Lead and perform IT audits, including ITGC testing, automated controls reviews, and application audits across environments.
• Evaluate cybersecurity controls, risk mitigation practices, and IT governance processes.
• Conduct assessments for SOX IT compliance, SOC 1/SOC 2, GDPR, and other regulatory frameworks.
• Work with internal stakeholders and client teams to identify control weaknesses and remediation strategies.
• Participate in risk assessments and implementation of industry best practices.
• Document findings, prepare reports, and present results to senior leadership or client executives.
• Stay updated on emerging IT risks, technologies, and industry regulations to enhance audit effectiveness.

Skills

IT Audit

Big 4

CISA

CISSP

ITGC

ERP Audits

Cloud Audits

Risk Management

Regulatory Compliance

Tools

Archer

ServiceNow GRC

Audit Analytics

Job description

Job Summary

We are looking for an experienced IT Audit Specialist with a proven track record in Big 4 consulting firms (Deloitte, PwC, EY, or KPMG). The ideal candidate must hold a valid CISA or CISSP certification and demonstrate deep expertise in IT general controls (ITGC), risk management, cybersecurity, and compliance. This role is focused solely on IT audits and advisory, not statutory or financial audits.

Key Responsibilities

• Lead and perform IT audits, including ITGC testing, automated controls reviews, and application audits across various environments.
• Evaluate cybersecurity controls, risk mitigation practices, and IT governance processes.
• Conduct assessments for SOX IT compliance, SOC 1/SOC 2, GDPR, and other regulatory frameworks.
• Work closely with internal stakeholders and client teams to identify control weaknesses and recommend remediation strategies.
• Participate in risk assessments, control design evaluations, and implementation of industry best practices.
• Document findings, prepare reports, and present results to senior leadership or client executives.
• Stay updated on emerging IT risks, technologies, and industry regulations to enhance audit effectiveness.

Required Qualifications

• 6+ years of IT audit experience with exclusive background in Big 4 firms (Deloitte, PwC, EY, KPMG).
• Professional certification: CISA (required); CISSP or other security certifications are a plus.
• Strong knowledge of ITGCs, application controls, and security frameworks (COBIT, NIST, ISO 27001).
• Experience in ERP systems audits (e.g., SAP, Oracle) and cloud environment assessments (AWS, Azure, GCP).
• Strong analytical, documentation, and communication skills.
• Ability to manage multiple projects and meet tight deadlines in a client-facing environment.

Preferred Skills

• Experience with SOC 1/SOC 2 reporting, vulnerability assessments, or data privacy audits.
• Familiarity with tools like Archer, ServiceNow GRC, or audit analytics platforms.
• Exposure to IT risk advisory or cybersecurity transformation projects.

Mandatory Key Skills

• IT Audit,CISA,CISSP,ITGC,IT general controls,risk management,cybersecurity,compliance,advisory,automated controls,application audits,cybersecurity controls,IT governance,SOX IT compliance,SOC 1,SOC 2,GDPR,regulatory frameworks,Internal Auditing.