GITC Manager

Deloitte US-India Offices; Bengaluru; Hybrid; INR 1,800,000 - 3,200,000; Full time

Job summary

Deloitte US-India Offices in Bangalore is seeking a Manager to lead Technology Controls Advisory within Audit and Assurance. The role focuses on ITGC/ITAC audits in banking and financial contexts, driving risk assessment, control design, and remediation across complex tech environments.

You will collaborate with global teams, review application and infrastructure controls, and guide stakeholders through audit findings and closure activities, ensuring compliance with regulatory and internal

Qualifications

• BE/B.Tech/MCA/MBA in Computer Science, Information Technology, or a related discipline.
• Minimum 3+ years of experience in ITGC/ITAC audits (5+ yrs for Manager).
• Understanding of software development, system architecture, DevOps, production release processes
• Understanding of application architecture, databases, operating systems, messaging, APIs, cloud, or infrastructure concepts.
• Understanding of application code logic in object-oriented languages such as Java, C#, and C++
• Ability to analyze risks and controls across complex engineering environments.
• Strong analytical, problem-solving and teamwork skills.

Responsibilities

• Perform ITGC audits across including but not limited to: Change Management, User Access Management, Privileged Access Reviews, Backup and Recovery, Job Scheduling.
• Assess control design and operating effectiveness across applications, databases, operating systems, and infrastructure.
• Evaluate compliance with internal policies, regulatory requirements, and control frameworks.
• Identify control gaps, risks, and remediation opportunities.
• Perform testing of key IT Application Controls supporting financial and operational processes.
• Evaluate automated controls, system-configured controls, interface controls, workflows, and application reports.
• Assess key ITAC domains, including automated business process controls, system configuration controls, interface/data transfer controls, workflow/approval controls, report testing and IPE validation, and master data management controls.
• Coordinate with business and technology teams to gather evidence and resolve audit queries.
• Track audit findings, remediation plans, and closure activities.

Skills

ITGC/ITAC audits

Software development understanding

OO languages (Java, C#, C++)

Analytical skills

Teamwork

Education

BE/B.Tech/MCA/MBA in CS/IT or related

Job description

Manager, Technology Controls Advisory, Audit and Assurance

About

At Deloitte, we do not offer you just a job, but a career in the highly sought-after risk Management field. We are one of the business leaders in the risk market. We work with a vision to make the world more prosperous, trustworthy, and safe. Deloittes clients, primarily based outside of India, are large, complex organizations that constantly evolve and innovate to build better products and services. In the process, they encounter various risks and the work we do to help them address these risks is increasingly important to their success—and to the strength of the economy and public security.

Required Qualifications and Experience

• BE/B.Tech/MCA/MBA in Computer Science, Information Technology, or a related discipline.
• Minimum 3+ years of experience in ITGC/ITAC audits, preferably in Banking and financial industries (5+ yrs experience for Manager)
• Understanding of software development, system architecture, DevOps, production release processes
• Understanding of application architecture, databases, operating systems, messaging, APIs, cloud, or infrastructure concepts.
• Understanding of application code logic in object-oriented languages such as Java, C#, and C++
• Ability to analyze risks and controls across complex engineering environments.
• Strong analytical, problem-solving and teamwork skills.

Preferred Competencies/ Qualifications

• Ability to review application code logic in object-oriented languages such as Java, C#, and C++
• Relevant certification or industry accreditation such as CISA, CISSP

Work Location Requirement

• Bangalore only - Candidates must be willing to work from the office and/or client location 5 days a week, based on project and business requirements.

Key Responsibilities

IT General Controls (ITGC) Audit

• Perform ITGC audits across including but not limited to:
  • Change Management
  • User Access Management
  • Privileged Access Reviews
  • Backup and Recovery Controls
  • Job Scheduling and Monitoring Controls
• Assess control design and operating effectiveness across applications, databases, operating systems, and infrastructure.
• Evaluate compliance with internal policies, regulatory requirements, and control frameworks.
• Identify control gaps, risks, and remediation opportunities.

IT Application Controls (ITAC) Audit

• Perform testing of key IT Application Controls supporting financial and operational business processes.
• Evaluate automated controls, system-configured controls, interface controls, workflows, and application reports.
• Assess key ITAC domains, including but not limited to:
  • Automated Business Process Controls
  • System Configuration Controls
  • Interface and Data Transfer Controls
  • Workflow and Approval Controls
  • Report Testing and IPE (Information Produced by the Entity) Validation
  • Master Data Management Controls

Audit Execution

• Execute audits across planning, fieldwork, reporting and follow-up stages.
• Perform risk assessments, walkthroughs, control testing, and documentation reviews.Review audit evidence for completeness, accuracy, and alignment with control objectives.

Issue Management

• Identify and document audit findings, root causes, and recommendations.
• Communicate observations and risk implications to stakeholders.

Stakeholder Coordination

• Coordinate with business and technology teams to obtain evidence and resolve audit queries.
• Track audit findings, remediation plans, and closure activities.
• Collaborate with global stakeholders and collaborate with global stakeholders and collaborate with global stakeholders and collaborate with global stakeholders and collaborate with global stakeholders and collaborate with global stakeholders