Audit & Compliance Executive

Vouchagram India; New Delhi; On-site; INR 700,000 - 1,100,000; Full time

Job summary

We are seeking an IT Audit & Compliance Executive with 2+ years of experience to support IT audits, information security compliance, risk assessments, internal controls, and regulatory requirements. You will evaluate IT processes and controls, identify gaps, support remediation, and maintain audit documentation.

The role involves coordinating with IT, security, HR, finance, and legal teams to gather evidence, prepare working papers, and track remediation actions in a collaborative, fast-paced

Qualifications

• Bachelor's degree in IT, CS, IS, cybersecurity, or related field.
• 2+ years in IT Audit, IT Compliance, Information Security, IT Risk, or IT Controls.
• Understanding of IT General Controls (ITGC) and basic information security principles.
• Knowledge of audit processes, risk assessment, control testing, and evidence collection.
• Strong MS Excel, Word, and PowerPoint skills.
• Excellent analytical, documentation, and communication skills.

Responsibilities

• Conduct and support IT audits across infrastructure, apps, access, and security.
• Review IT General Controls (ITGC) and related controls.
• Identify gaps, assess risks, and recommend remediation plans.
• Prepare audit working papers, evidence trackers, checklists, and reports.
• Coordinate with IT, Security, HR, Finance, Legal for audits.
• Maintain audit documentation and evidence securely.

Skills

IT audits

ITGC

Risk assessments

Documentation

MS Excel

MS Word

PowerPoint

Stakeholder mgmt

Education

Bachelor's in IT/CS/IS

Job description

Job Summary

We are looking for an IT Audit & Compliance Executive with 2+ years of experience to support IT audits, information security compliance, risk assessments, internal controls, and regulatory requirements. The role will involve evaluating IT processes and controls, identifying gaps, supporting remediation, and maintaining audit and compliance documentation.

Key Responsibilities

• Conduct and support IT audits covering infrastructure, applications, access controls, IT operations, and information security.


• Review IT General Controls (ITGC), including:




• User access management


• Password and authentication controls


• Change management


• Backup and recovery


• Incident management


• IT operations and monitoring


• Asset management




• Perform risk and control assessments and identify control gaps and compliance risks.


• Prepare audit working papers, evidence trackers, checklists, and audit reports.


• Collect, validate, and maintain audit evidence from IT and business teams.


• Track audit observations, prepare remediation plans, and follow up on corrective actions.


• Support internal, external, customer, and regulatory IT audits.


• Assist in maintaining compliance with relevant information security and IT governance standards/frameworks.


• Review IT policies, procedures, SOPs, and control documentation and recommend improvements.


• Monitor compliance with organizational IT policies and security requirements.


• Coordinate with IT, Information Security, HR, Finance, Legal, and other departments for audit requirements.


• Maintain compliance registers, risk registers, audit schedules, and management reports.


• Assist in periodic reviews of privileged and user access.


• Support Business Continuity, Disaster Recovery, and IT risk management activities.


• Identify recurring control deficiencies and suggest process improvements.


• Ensure audit and compliance records are maintained accurately and confidentially.

Required Qualifications

• Bachelor's degree in IT, Computer Science, Information Systems, Cybersecurity, or a related field.


• 2+ years of experience in IT Audit, IT Compliance, Information Security, IT Risk, or IT Controls.


• Understanding of IT General Controls (ITGC) and basic information security principles.


• Good knowledge of audit processes, risk assessment, control testing, and evidence collection.


• Strong knowledge of MS Excel, Word, and PowerPoint.


• Good analytical, documentation, communication, and problem-solving skills.


• Ability to interact with technical and non-technical stakeholders.

Preferred Knowledge

• ISO 27001 / ISMS


• SOC 1 / SOC 2


• ITGC


• COBIT


• NIST Cybersecurity Framework


• Risk & Control Self-Assessment (RCSA)


• Access Management / IAM


• Vulnerability and Patch Management


• Business Continuity & Disaster Recovery


• Data Privacy and Protection requirements


• Vendor / Third-Party Risk Management