Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.
PwC India is seeking an Associate for IT risk and assurance to conduct ITGC audits, ERP control reviews, and SOX testing across clients in FS and risk domains. You will collaborate with advisory teams to strengthen internal controls and mitigate technology risks.
The role emphasizes governance, risk, and compliance with exposure to COBIT, NIST, and ISO 27001 frameworks, requiring 2–4 years of relevant experience and strong communication skills.
Advisory
FS X-Sector
Risk
Associate
At PwC, our people in risk and compliance focus on maintaining regulatory compliance and managing risks for clients, providing advice, and solutions. They help organisations navigate complex regulatory landscapes and enhance their internal controls to mitigate risks effectively.
Those in governance, risk, controls and compliance at PwC will be responsible for confirming regulatory compliance and managing risks for clients. Your work will involve providing advice and solutions to help organisations navigate complex regulatory landscapes and enhance their internal controls to mitigate risks effectively.
AtPwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes forour clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences foreach other. Learn more
about us.
AtPwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm’s growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations.
ITGC Audits, IT Internal Audits, IT Controls Testing, IT SOX Testing, IT Application Controls, ERP (SAP, Oracle etc.) Control Reviews, IT Compliance Assessments (ISO 27001, NIST etc.)
Prior experience working in an IT Internal Audit Team or consulting company specializing in conducting IT Audits, IT Internal Audits, ERP (SAP, Oracle etc.) Reviews, ITGC, IT Application Controls Reviews.
Strong understanding of IT General Controls domains such as Change Management, User Access Management, IT Operations, Back and Recovery Management, BCP/ DR etc
Strong understanding of IT Application controls (Input/ Output Controls, Processing Controls, Interface controls) specifically w.r.t. ERP applications such as SAP, Oracle etc.
Understanding of IT SOX Control Testing, Internal Financial Controls (IFC) Testing
Understanding of the third-party risk management reviews
Understanding of IT Risk Management frameworks such as COBIT, NIST, ISO 27001, etc.
Should understand complete audit lifecycle from audit scoping to project deliverables
Ability to carry out IT Audits/Assessments (with minimum supervision) including:
Understanding the client’s IT environment
Audit scoping considering critical systems and processes
Finalising Risk & Control Matrix, Data Requirements
Interview client stakeholders (mid-management level)
Conduct walkthrough meetings
Carry out test of design and operating efficiency of IT controls
Obtain relevant artefacts and identify exceptions
Discussion on observations/ issues identified
Drafting audit reports (Observation, Risk, Implication, Identify Action Owner, Timelines for closure) and presenting to key stakeholders
Strong knowledge and experience of MS Office Tools (Excel, Word, PowerPoint), Data Analytics Tool
Excellent communication and presentation skills and ability to effectively communicate observations/ issues at senior management level
Certifications:
CIA/CISA/CISM will be added advantage
2-4 years
(if blank, degree and/or field of study not specified)
Degrees/Field of Study required: Bachelor of EngineeringDegrees/Field of Study preferred:
(if blank, certifications not specified)
Controls Testing
Accepting Feedback, Accepting Feedback, Active Listening, AI Fluency, AI-Human Collaboration, Business Decisions, Business Performance Management, C-Level Presentations, Communication, Compliance Frameworks, Compliance Policies, Compliance Program Implementation, Compliance Review, Controls Testing, Corporate Governance, Digital Tooling, Emotional Regulation, Empathy, External Audit, Finance Target Operating Model, Finance Transformation, Financial Reporting, Fraud Detection, Fraud Prevention, Group Facilitation {+ 15 more}
(If blank, desired languages not specified)
Not Specified
No
No
September 7, 2026