Get a reply from this employer — a resume and cover letter tailored to exactly what they’re hiring for.
PwC is seeking an Associate in Risk Management to conduct ITGC and IT controls audits, ERP reviews, and SOX testing. The role focuses on risk assessment, control design, and implementation across SAP/Oracle environments.
Qualified candidates will have 2–4 years in IT risk assurance, strong communication skills, and exposure to COBIT/ISO27001/NIST frameworks. A Big 4 background is a plus, with travel as required.
Line of Service Advisory Industry/Sector FS X-Sector Specialism Risk Management Level Associate Job Description & Summary At PwC, our people in risk and compliance focus on maintaining regulatory compliance and managing risks for clients, providing advice, and solutions. They help organisations navigate complex regulatory landscapes and enhance their internal controls to mitigate risks effectively. Those in governance, risk, controls and compliance at PwC will be responsible for confirming regulatory compliance and managing risks for clients. Your work will involve providing advice and solutions to help organisations navigate complex regulatory landscapes and enhance their internal controls to mitigate risks effectively.
At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other. Learn more about us.
At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm’s growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations.
Prior experience working in an IT Internal Audit Team or consulting company specializing in conducting IT Audits, IT Internal Audits, ERP (SAP, Oracle etc.) Reviews, ITGC, IT Application Controls Reviews.
Strong understanding of IT General Controls domains such as Change Management, User Access Management, IT Operations, Back and Recovery Management, BCP/ DR etc.
Strong understanding of IT Application controls (Input/ Output Controls, Processing Controls, Interface controls) specifically w.r.t. ERP applications such as SAP, Oracle etc.
Understanding of IT SOX Control Testing, Internal Financial Controls (IFC) Testing.
Understanding of the third-party risk management reviews.
Understanding of IT Risk Management frameworks such as COBIT, NIST, ISO 27001, etc.
Should understand complete audit lifecycle from audit scoping to project deliverables.
Ability to carry out IT Audits/Assessments (with minimum supervision) including: Understanding the client’s IT environment, Audit scoping considering critical systems and processes, Finalising Risk & Control Matrix, Data Requirements, Interview client stakeholders (mid-management level), Conduct walkthrough meetings, Carry out test of design and operating efficiency of IT controls, Obtain relevant artefacts and identify exceptions, Discussion on observations/ issues identified, Drafting audit reports (Observation, Risk, Implication, Identify Action Owner, Timelines for closure) and presenting to key stakeholders.
Strong knowledge and experience of MS Office Tools (Excel, Word, PowerPoint), Data Analytics Tool.
Excellent communication and presentation skills and ability to effectively communicate observations/ issues at senior management level.
Certifications: CIA/CISA/CISM will be added advantage.
Years of Experience Required: 2-4 years
Education Qualification Minimum Qualification: BE/ BTech/ CA (Intermediate)
Postgraduates in any stream would be preferred (not mandatory)
Prior Big 4 experience, consulting company, internal audit department would be an added advantage.
Experience in IT Risk Assurance for varied industry segments preferred
Excellent communication skills - both written and oral
Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required: Bachelor of Engineering
Degrees/Field of Study preferred: Certifications (if blank, certifications not specified)
Travel Requirements Not Specified Available for Work Visa Sponsorship? No Government Clearance Required? No Job Posting End Date September 7, 2026
Are you ready to make a difference? Want to unlock new value by applying your unique perspective and talents? You can grow exponentially at PwC. Here, you can uncover hidden talents, build lifelong relationships rooted in trust and empathy and turn challenges into opportunities for innovation. We’ll help you grow your skills through challenging, meaningful work so you can go further.