Associate Manager Internal Audit - IT

Shashwath Solution; Dadri; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Shashwath Solution in India is seeking an experienced IT Audit Specialist focused on IT audits, ITGC, risk management, cybersecurity, and compliance. The role emphasizes advisory work rather than statutory audits and requires Big 4 experience.

Candidates must hold CISA and/or CISSP, with 6+ years in IT audit and ERP/cloud testing. Strong communication and client-facing skills are essential for success.

Qualifications

• 6+ years of IT audit experience with exclusive Big 4 background.
• CISA is required; CISSP or other security certs are a plus.
• Strong ITGC, application controls and security framework knowledge.
• ERP and cloud environment audits experience (SAP/Oracle, AWS/Azure/GCP).

Responsibilities

• Lead and perform IT audits including ITGC testing and application audits.
• Evaluate cybersecurity controls and IT governance processes.
• Assess SOX IT compliance, SOC 1/2, GDPR, and other frameworks.
• Identify control weaknesses and propose remediation strategies.
• Document findings and present to senior leadership or clients.
• Stay updated on IT risks and industry regulations.

Skills

IT Audit

CISA

CISSP

ITGC

IT general controls

risk management

cybersecurity

compliance

advisory

automated controls

application audits

cybersecurity controls

IT governance

SOX IT compliance

SOC 1

SOC 2

GDPR

Internal Auditing

Tools

Archer

ServiceNow GRC

audit analytics platforms

Job description

Job Summary

We are looking for an experienced IT Audit Specialist with a proven track record in Big 4 consulting firms (Deloitte, PwC, EY, or KPMG). The ideal candidate must hold a valid CISA or CISSP certification and demonstrate deep expertise in IT general controls (ITGC), risk management, cybersecurity, and compliance. This role is focused solely on IT audits and advisory, not statutory or financial audits.

Key Responsibilities

• Lead and perform IT audits, including ITGC testing, automated controls reviews, and application audits across various environments.
• Evaluate cybersecurity controls, risk mitigation practices, and IT governance processes.
• Conduct assessments for SOX IT compliance, SOC 1/SOC 2, GDPR, and other regulatory frameworks.
• Work closely with internal stakeholders and client teams to identify control weaknesses and recommend remediation strategies.
• Participate in risk assessments, control design evaluations, and implementation of industry best practices.
• Document findings, prepare reports, and present results to senior leadership or client executives.
• Stay updated on emerging IT risks, technologies, and industry regulations to enhance audit effectiveness.

Required Qualifications

• 6+ years of IT audit experience with exclusive background in Big 4 firms (Deloitte, PwC, EY, KPMG).
• Professional certification: CISA (required); CISSP or other security certifications are a plus.
• Strong knowledge of ITGCs, application controls, and security frameworks (COBIT, NIST, ISO 27001).
• Experience in ERP systems audits (e.g., SAP, Oracle) and cloud environment assessments (AWS, Azure, GCP).
• Strong analytical, documentation, and communication skills.
• Ability to manage multiple projects and meet tight deadlines in a client-facing environment.

Preferred Skills

• Experience with SOC 1/SOC 2 reporting, vulnerability assessments, or data privacy audits.
• Familiarity with tools like Archer, ServiceNow GRC, or audit analytics platforms.
• Exposure to IT risk advisory or cybersecurity transformation projects.

Mandatory Key Skills

• IT Audit
• CISA
• CISSP
• ITGC
• IT general controls
• risk management
• cybersecurity
• compliance
• advisory
• automated controls
• application audits
• cybersecurity controls
• IT governance
• SOX IT compliance
• SOC 1
• SOC 2
• GDPRregulatory frameworks
• Internal Auditing