Associate Manager Internal Audit - IT

Shashwath Solution; Pune District; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Shashwath Solution is seeking an experienced IT Audit Specialist in Pune with a proven Big 4 background. The role focuses on IT audits and advisory, requiring CISA and deep expertise in ITGC, risk management, cybersecurity, and compliance across ERP and cloud environments.

The successful candidate will lead audits, assess regulatory compliance (SOX, SOC 1/2, GDPR), and collaborate with client teams to remediate control weaknesses. Strong communication and project management skills are essential.

Qualifications

• 6+ years of IT audit experience with exclusive background in Big 4 firms (Deloitte, PwC, EY, KPMG).
• CISA is required; CISSP or other security certifications are a plus.
• Strong knowledge of ITGCs, application controls, and security frameworks (COBIT, NIST, ISO 27001).
• Experience in ERP systems audits (SAP, Oracle) and cloud environment assessments (AWS, Azure, GCP).
• Strong analytical, documentation, and communication skills.

Responsibilities

• Lead and perform IT audits, including ITGC testing, automated controls reviews, and application audits across various environments.
• Evaluate cybersecurity controls, risk mitigation practices, and IT governance processes.
• Conduct assessments for SOX IT compliance, SOC 1/SOC 2, GDPR, and other regulatory frameworks.
• Work closely with internal stakeholders and client teams to identify control weaknesses and recommend remediation strategies.
• Participate in risk assessments, control design evaluations, and implementation of industry best practices.
• Document findings, prepare reports, and present results to senior leadership or client executives.
• Stay updated on emerging IT risks, technologies, and industry regulations to enhance audit effectiveness.

Skills

IT Audit

ITGC

Risk Management

Cybersecurity

Compliance

Advisory

Education

CISA Certification

CISSP Certification

Tools

Archer

ServiceNow GRC

Audit Analytics Platforms

Job description

Job Summary

We are looking for an experienced IT Audit Specialist with a proven track record in Big 4 consulting firms (Deloitte, PwC, EY, or KPMG). The ideal candidate must hold a valid CISA or CISSP certification and demonstrate deep expertise in IT general controls (ITGC), risk management, cybersecurity, and compliance. This role is focused solely on IT audits and advisory, not statutory or financial audits.

Key Responsibilities

• Lead and perform IT audits, including ITGC testing, automated controls reviews, and application audits across various environments.
• Evaluate cybersecurity controls, risk mitigation practices, and IT governance processes.
• Conduct assessments for SOX IT compliance, SOC 1/SOC 2, GDPR, and other regulatory frameworks.
• Work closely with internal stakeholders and client teams to identify control weaknesses and recommend remediation strategies.
• Participate in risk assessments, control design evaluations, and implementation of industry best practices.
• Document findings, prepare reports, and present results to senior leadership or client executives.
• Stay updated on emerging IT risks, technologies, and industry regulations to enhance audit effectiveness.

Required Qualifications

• 6+ years of IT audit experience with exclusive background in Big 4 firms (Deloitte, PwC, EY, KPMG).
• Professional certification: CISA (required); CISSP or other security certifications are a plus.
• Strong knowledge of ITGCs, application controls, and security frameworks (COBIT, NIST, ISO 27001).
• Experience in ERP systems audits (e.g., SAP, Oracle) and cloud environment assessments (AWS, Azure, GCP).
• Strong analytical, documentation, and communication skills.
• Ability to manage multiple projects and meet tight deadlines in a client-facing environment.

Preferred Skills

• Experience with SOC 1/SOC 2 reporting, vulnerability assessments, or data privacy audits.
• Familiarity with tools like Archer, ServiceNow GRC, or audit analytics platforms.
• Exposure to IT risk advisory or cybersecurity transformation projects.

Mandatory Key Skills

• IT Audit
• CISA
• CISSP
• ITGC
• IT general controls
• risk management
• cybersecurity
• compliance
• advisory
• automated controls
• application audits
• cybersecurity controls
• IT governance
• SOX IT compliance
• SOC 1
• SOC 2
• GDPRregulatory frameworks
• Internal Auditing