Consultant - ITGC

Zoho; Gurgaon; On-site; INR 900,000 - 1,300,000; Full time

Job summary

BDO EDGE India Private Limited is seeking a Consultant to support IT General Control assessments and audits across diverse industries. You will design and implement IT control frameworks, lead internal and external audits, and ensure compliance with SOX, SOC, and ISO 27001.

You will collaborate with senior team members to identify risks, recommend improvements, and communicate findings to clients, while working with ERP environments such as SAP, Workday, and Oracle.

Qualifications

• Assist in testing ITGC and ITAC frameworks to align with security and compliance strategies.
• Assess IT processes, identify risks, and propose improvements.
• Develop strong client relationships and provide IT practice insights.
• Prepare and review IT audit workpapers and reports for clarity.
• Understand ERP environments (SAP, Workday, Oracle) and review automated controls.
• Collaborate with clients and engagement teams to ensure timely task completion.

Responsibilities

• ITGC/ITAC testing aligned with security and compliance frameworks.
• Risk identification and mitigation for client IT processes.
• Client interaction to provide insights and recommendations.
• Documentation and reporting of IT audit findings.
• ERP understanding and control review for SAP/Workday/Oracle.
• Team collaboration to complete assignments on schedule.

Skills

ITGC

SOX

Risk assessment

Client interaction

Documentation

ERP systems

Education

Bachelor’s degree in Information Security/Technology/CS or related field

Master’s degree preferred

Tools

COBIT

ISO 27001

NIST

Audit management tools

Job description

BDO EDGE India Private Limited is an entity, based in India createdthrough a strategic partnership among BDO member firms: in India, the UnitedStates, the United Kingdom, and Germany. It operates independently within theBDO network of accounting and advisory firms, enhancing their combinedcapabilities and resources.

BDO EDGE (Exceptional Delivery for Global Enterprises) delivers tax,assurance, accounting, outsourcing, advisory, and technology-driven servicesthrough highly skilled professionals in India to BDO network firms, theiralliance programmes and any other certified public accounting firms (CPAfirms).

Position Overview

We are looking for a Consultant tosupport the IT General Control (ITGC) assessments and audits for clients across various industries.This role will involve designing and implementing IT control frameworks, leading internal and externalaudits, and ensuring compliance with standards such as SOX, SOC, and ISO 27001. You willcollaborate with senior team members to identify risks and recommend control improvements to clients.

Job Description

• IT AuditExecution : Assist in testing the design and implementation of ITGC and ITAC frameworks to ensure that they are aligned with company security and compliance strategies.
• Risk identification & mitigation : Assess IT processes and controls, identify risks, and recommend necessary improvements to clients.
• Client interaction : Develop strong client relationships, provide insights into IT practices, and recommend solutions based on clientneeds.
• Documentation & reporting : Prepare and review IT audit workpapers,audit reports, ensuring clarity and transparency in findings and recommendations.
• Data and SystemUnderstanding – Understand ERP environments such as SAP, Workday, Oracle,Review automated controls and system configurations.
• Client collaboration : Work with clients and engagement teams to follow up on assignments and ensure the timely completion oftasks.

Requirements

• Educational Qualification: Bachelor’s degree in Information Security/Technology, Computer Science/Application, or a related field (Master’s degree preferred).
• Certifications: CISA/CPA/CA or ACCA certifications is preferred
• Experience: 3-4 years of experience in IT audits, risk management, or ITGC assessments in large organizations.

Software Proficiency

• Strong understanding of ITGC frameworks such as COBIT, ISO 27001, NIST, and other industry-specific standards.
• Proficiency with audit management tools and risk management software.