Associate Manager Internal Audit - IT

Shashwath Solution; Pune District; On-site; INR 2,000,000 - 3,500,000; Full time

Job summary

Shashwath Solution in Pune is seeking an experienced IT Audit Specialist with a proven Big 4 background to lead IT audits and advisory work. You will focus on ITGC testing, cybersecurity controls, and regulatory compliance across diverse client environments.

The role requires CISA (mandatory) and strong knowledge of IT governance, risk management, and GDPR/SOC frameworks, with ERP/cloud audits a plus. This position is client-facing and demands precise reporting and remediation guidance.

Qualifications

• 6+ years of IT audit experience with exclusive background in Big 4 firms (Deloitte, PwC, EY, KPMG).
• Professional certification: CISA (required); CISSP or other security certifications are a plus.
• Strong knowledge of ITGCs, application controls, and security frameworks (COBIT, NIST, ISO 27001).
• Experience in ERP systems audits (e.g., SAP, Oracle) and cloud environment assessments (AWS, Azure, GCP).
• Strong analytical, documentation, and communication skills.
• Ability to manage multiple projects and meet tight deadlines in a client-facing environment.

Responsibilities

• Lead and perform IT audits, including ITGC testing, automated controls reviews, and application audits across various environments.

Skills

IT Audit

CISA

CISSP

ITGC

Risk management

Cybersecurity

Compliance

Advisory

Automated controls

Application audits

IT governance

SOX IT compliance

SOC 1

SOC 2

GDPR

Regulatory frameworks

Internal auditing

Tools

Archer

ServiceNow GRC

Audit analytics platforms

Job description

Job Summary

We are looking for an experienced IT Audit Specialist with a proven track record in Big 4 consulting firms (Deloitte, PwC, EY, or KPMG). The ideal candidate must hold a valid CISA or CISSP certification and demonstrate deep expertise in IT general controls (ITGC), risk management, cybersecurity, and compliance. This role is focused solely on IT audits and advisory, not statutory or financial audits.

Key Responsibilities

• Lead and perform IT audits, including ITGC testing, automated controls reviews, and application audits across various environments.
• Evaluate cybersecurity controls, risk mitigation practices, and IT governance processes.
• Conduct assessments for SOX IT compliance, SOC 1/SOC 2, GDPR, and other regulatory frameworks.
• Work closely with internal stakeholders and client teams to identify control weaknesses and recommend remediation strategies.
• Participate in risk assessments, control design evaluations, and implementation of industry best practices.
• Document findings, prepare reports, and present results to senior leadership or client executives.
• Stay updated on emerging IT risks, technologies, and industry regulations to enhance audit effectiveness.

Required Qualifications

• 6+ years of IT audit experience with exclusive background in Big 4 firms (Deloitte, PwC, EY, KPMG).
• Professional certification: CISA (required); CISSP or other security certifications are a plus.
• Strong knowledge of ITGCs, application controls, and security frameworks (COBIT, NIST, ISO 27001).
• Experience in ERP systems audits (e.g., SAP, Oracle) and cloud environment assessments (AWS, Azure, GCP).
• Strong analytical, documentation, and communication skills.
• Ability to manage multiple projects and meet tight deadlines in a client-facing environment.

Preferred Skills

• Experience with SOC 1/SOC 2 reporting, vulnerability assessments, or data privacy audits.
• Familiarity with tools like Archer, ServiceNow GRC, or audit analytics platforms.
• Exposure to IT risk advisory or cybersecurity transformation projects.

Mandatory Key Skills

• IT Audit,CISA,CISSP,ITGC,IT general controls,risk management,cybersecurity,compliance,advisory,automated controls,application audits,cybersecurity controls,IT governance,SOX IT compliance,SOC 1,SOC 2,GDPR,regulatory frameworks,Internal Auditing.