Deputy Manager - Internal Audit

Aster DM Healthcare; Bengaluru; On-site; INR 2,200,000 - 2,800,000; Full time

Job summary

Aster DM Healthcare is seeking a Deputy Manager for IT Audit to lead and deliver IT audit engagements across technology risk areas. Based in Bengaluru, you will guide planning, fieldwork, reporting and closure with a focus on ITGC, cybersecurity and control improvements.

You will assess risk, design testing approaches and review work products, ensuring evidence-based conclusions. The role requires collaboration with IT and business stakeholders and mentoring junior team members.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Information Systems or related field.
• CISA certification is required.
• Additional certifications such as CRISC, CISM, CISSP or CIA would be an advantage.
• 5-8 years of IT Audit/Technology Risk experience, with project leadership.
• Strong ITGC, application controls, cybersecurity and risk management knowledge.

Responsibilities

• Lead end-to-end IT audit engagements from planning to closure.
• Lead reviews of ITGC, application controls, infrastructure and cybersecurity.
• Assess technology risks and evaluate design and operating effectiveness of IT controls.
• Develop risk-based audit scopes, programmes and testing approaches.
• Guide junior team members and contribute to IT Audit methodology improvement.

Skills

Analytical skills

Stakeholder management

Report writing

Communication skills

Education

Bachelor's degree in IT / CS / IS

CISA certification

Tools

COBIT

ISO/IEC 27001

NIST

Job description

Roles and Responsibilities: Deputy Manager, IT Audit

Location: Bangalore | Function: Internal Audit | Reports to: Manager, IT Internal Audit

Role Purpose

Lead assigned IT audit engagements and support the Manager in assessing technology risks, strengthening the IT control environment, and delivering quality audit, governance and assurance activities.

Roles & Responsibilities

• Lead end-to-end IT audit engagements, including planning, risk assessment, fieldwork, reporting, management discussions and closure.


• Lead reviews covering IT General Controls (ITGC), application controls, infrastructure, cybersecurity, systems and other technology-related areas.


• Assess key technology risks and evaluate the design and operating effectiveness of IT controls, identifying control gaps and improvement opportunities.


• Develop risk-based audit scopes, audit programmes and testing approaches for assigned engagements.


• Lead or participate in reviews of technology projects, system implementations, data migrations, application interfaces and automated controls, as applicable.


• Act as audit in-charge for assigned engagements, managing day-to-day audit activities, stakeholder coordination, deliverables and timelines.


• Review audit testing, workpapers and supporting documentation prepared by team members and ensure conclusions are adequately supported by audit evidence.


• Ensure audit deliverables are complete, accurate and review-ready before submission to the Manager.


• Review and refine audit observations to ensure the control gap, risk/impact and recommendations are clearly articulated and supported.


• Lead discussions with IT and business stakeholders on audit findings and agree appropriate management action plans and timelines.


• Monitor remediation of audit observations, review evidence submitted by management and support timely closure of agreed action plans.


• Identify significant, recurring and emerging technology risks and highlight material matters to the Manager.


• Support the preparation of IT audit reports, management presentations and governance reporting.


• Support preparation of the Audit & Risk Committee (ARC) deck, including consolidation of key IT audit observations, audit status, open action items and other relevant IT audit updates.


• Support the annual statutory audit process for IT-related requirements, including coordination with statutory auditors and internal stakeholders, tracking information and evidence requirements, and facilitating closure of audit queries.


• Support periodic IT risk assessments and development of the risk-based IT audit plan.


• Guide and support junior team members during audit execution and contribute to their technical development.


• Contribute to continuous improvement of IT Audit methodologies, audit programmes, templates, reporting and use of data analytics.


• Stay abreast of emerging technology, cybersecurity and regulatory risks and relevant industry standards and frameworks, including COBIT, ISO/IEC 27001 and NIST.

Qualifications & Experience

• Bachelor's degree in Information Technology, Computer Science, Information Systems or a related field.


• CISA certification required


• Additional certifications such as CRISC, CISM, CISSP or CIA would be an advantage.


• 5-8 years of relevant experience in IT Audit, Technology Risk or related areas, with experience managing or independently handling IT audit engagements.


• Strong understanding of ITGC, application controls, technology infrastructure, cybersecurity and technology risk management.


• Experience in reviewing audit work and guiding junior team members.


• Strong analytical, stakeholder-management, report-writing and communication skills.


• Ability to manage multiple audit activities and engage effectively with senior IT and business stakeholders.