IN_Senior Associate_ITGC-Stat Audit_ITRA_Advisory_Bangalore

PwC; Bengaluru; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

PwC in Bengaluru is seeking a Senior Associate in IT Risk Advisory/ Assurance to focus on IT General Controls and internal audits. You will lead client engagements, coordinate with stakeholders, and deliver risk-based recommendations to strengthen governance and controls.

The role emphasizes risk assessment, data privacy, and regulatory frameworks such as ISO 27001, HIPAA and HITRUST, while mentoring juniors and contributing to firm growth in a dynamic environment.

Qualifications

• Strong understanding of IT General Controls (ITGCs) including Change Management, User Access, IT Operations and Backup/Recovery.
• Experience with Third-Party Risk Management (TPRM) and its impact on financial reporting and compliance.
• Familiarity with ISO 27001, HIPAA, HITRUST, NIST and similar frameworks.
• Hands-on experience in statutory audit and IT risk advisory across multiple industries.

Responsibilities

• Perform IT assessment reviews including IT General Controls and internal audits.
• Lead and supervise IT audits, ensuring methodology compliance and quality.
• Document processes, conduct stakeholder interviews, and develop audit artefacts.
• Present findings with risk-based, actionable recommendations to management.
• Monitor progress, manage risks and communicate status to stakeholders.
• Coach and mentor junior team members to enhance audit delivery and development.

Skills

Data Privacy

Education

Bachelor of Engineering / Bachelor of Technology

CA / BE / BTech (minimum)

Tools

CIA/CISA/CISM

Job description

Line of Service

Advisory

Industry/Sector

Not Applicable

Specialism

Deals

Management Level

Senior Associate

Job Description & Summary

At PwC, our people in audit and assurance focus on providing independent and objective assessments of financial statements, internal controls, and other assurable information enhancing the credibility and reliability of this information with a variety of stakeholders. They evaluate compliance with regulations including assessing governance and risk management processes and related controls.

Those in internal audit at PwC help build, optimise and deliver end-to-end internal audit services to clients in all industries. This includes IA function setup and transformation, co-sourcing, outsourcing and managed services, using AI and other risk technology and delivery models. IA capabilities are combined with other industry and technical expertise, in areas like cyber, forensics and compliance, to address the full spectrum of risks. This helps organisations to harness the power of IA to help the organisation protect value and navigate disruption, and obtain confidence to take risks to power growth.

Why PWC

At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes forour clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences foreach other. Learn moreabout us.

At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm’s growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations.

Responsibilities

ITGC Reviews, IT Internal Audits, Controls Testing, Compliance Reviews, ISO 27001 Reviews, HIPAA/HITRUSTReviews

Position title:

Associate

Experience:

2+years

Location:

Bangalore

Department:

Risk Consulting

Purpose of the Job/Role

Perform IT Assessment Reviews whichincludesIT General Controls, Internal Audits, Controls Testing, Compliance Reviews (such as ISO 27001, HIPAA, HITRUST etc.)

The person we are looking for:

• Demonstrate a strong understanding of IT General Controls (ITGCs), including Change Management, User Access Management, IT Operations, Backup and Recovery, and their relevance to statutory and SOX-aligned audits.
• Possess solid knowledge of Third-Party Risk Management (TPRM) and its impact on financial reporting and regulatory compliance.
• Apply implementation and assessment experience across leading industry standards and frameworks such as ISO 27001, HIPAA, HITRUST, NIST, and similar regulatory requirements.
• Understand and apply IT Risk Assessment methodologies, including risk identification, control evaluation, and testing across the end-to-end IT audit lifecycle.
• Conduct client stakeholder interviews and walkthroughs, document processes, and develop comprehensive audit and assessment artifacts.
• Demonstrate a clear understanding of the complete assessment lifecycle, from planning and scoping through fieldwork, reporting, and final deliverables.
• Lead and manage the execution of IT audits and assessments, including supervision and review of team members’ work to ensure adherence to audit methodology, quality standards, and statutory requirements.
• Collaborate with cross-functional stakeholders to address complex audit and control issues, and develop practical, risk-based recommendations.
• Monitor audit progress, manage risks and dependencies, and ensure timely communication with key stakeholders regarding status, issues, and outcomes.
• Present clear, concise audit findings and recommendations that address root causes, assess business and financial reporting impact, and support management remediation.
• Manage approved audit budgets and resource allocation, including task assignment, performance review, and quality assurance of team deliverables.
• Coach and mentor team members on audit methodologies, tools, and best practices, fostering continuous improvement and professional development.
• Demonstrate strong people management and leadership capabilities, with the ability to think creatively and solve problems beyond standard audit approaches.
• Exhibit excellent verbal and written communication skills, with the ability to translate complex IT and data security concepts into clear, business-focused language.
• Deliver effective presentations and confidently communicate audit results, recommendations, and viewpoints to senior management and governance committees.

Education

• Minimum Qualification:CA/BE/ BTech- Postgraduatesin any stream would be preferred (not mandatory)
• Prior Big 4 experience would be an added advantage
• Experience inIT Risk Advisory/ Assurancefor varied industry segments preferred
• Hands-on experience in statutory audit(minimum 3-4 years), including understanding of audit processes and controls, preferred
• Excellent communication skills - both written and oral

Certifications

• CIA/CISA/CISMwill be added advantage

Mandatory Skill sets

• Data Privacy

Preferred Skill sets

• Data Protection

Years of Experiencerequired

7

Education Qualification

B.Tech

Education

(if blank, degree and/or field of study not specified)

Degrees/Field of Study required: Bachelor of Engineering, Bachelor of Technology

Degrees/Field of Study preferred:

Certifications

(if blank, certifications not specified)

Required Skills

Creating Shared Value (CSV)

Optional Skills

Accepting Feedback, Accepting Feedback, Accounting and Financial Reporting Standards, Active Listening, AI Fluency, AI-Human Collaboration, Analytical Thinking, Artificial Intelligence (AI) Platform, Auditing, Auditing Methodologies, Business Process Improvement, Communication, Compliance Auditing, Corporate Governance, Creativity, Data Analysis and Interpretation, Data Ingestion, Data Modeling, Data Quality, Data Security, Data Transformation, Data Visualization, Digital Tooling, Embracing Change, Emotional Regulation {+ 27 more}

Desired Languages

(If blank, desired languages not specified)

Travel Requirements

Not Specified

Available for Work Visa Sponsorship?

No

Government Clearance Required?

No

Job Posting End Date

October 28, 2026