Information Technology Auditor

ThoughtFocus; Bengaluru; On-site; INR 1,400,000 - 2,200,000; Full time

Job summary

ThoughtFocus is seeking an IT Auditor with 10+ years of internal audit experience to assess the effectiveness of technology controls across multiple domains. You will plan, execute, and document audits in line with professional standards, focusing on risk assessment and testing programs.

Hard skills include MS Office, data analysis, and familiarity with AuditBoard; professional certifications such as CISA are preferred. The role may involve collaboration on third-party or co-sourced audits.

Qualifications

• 10+ years of internal IT audit experience.
• Ability to plan and execute audits per standards.
• Experience evaluating design and operating effectiveness of IT controls.

Responsibilities

• Plan and execute internal audits per department standards.
• Evaluate risks and craft testing programs for identified risks.
• Assess control effectiveness across workstation security, servers, networks, and cloud.
• Review IT asset management, database management, access controls, and software development processes.
• Evaluate cybersecurity governance and information security programs.
• Assist with third-party audits or co-sourced audits as needed.
• Perform other duties as assigned.

Skills

MS Office

Written Communication

Verbal Communication

Project Management

Detail Orientation

Data Analysis

AuditBoard

Education

CISA

CISSP

CCSP

Tools

AuditBoard

Job description

Looking for an IT Auditor who can look past the checklist and tell us whether our technology controls actually work.

Experience Range: 10+years

What you’ll do

• Plan and execute internal audits in line with department and professional standards.
• Evaluate risks in auditable areas and create or restructure audit testing programs to address these risks.
• Evaluate the design and operating effectiveness of internal controls over processes that include but are not limited to:
• Workstation Security
• Server / OS Operations
• Network Operations
• Security Operations
• IT Asset (Hardware & Software) Management
• Database Management
• Access Management
• Software Development
• Cloud Computing
• Managed IT Services
• Payment Solutions
• Core Process Solutions
• Cybersecurity
• IT Governance / Information Security Program
• May assist with Operational or Compliance audit procedures.
• May assist with Third Party (e.g. SOC) or co-sourced/outsourced internal audits.
• Perform other duties as assigned.

Frameworks

Global Internal Audit Standards | FFIEC | PCI DSS | NIST CSF

What we’re looking for

• Proficient knowledge of Microsoft Office Applications (e.g., Word, Excel, Power-Point, etc.)
• Strong Written and Verbal Communication Skills
• Strong Project Management Skills
• Detail Oriented
• Ability to apply professional judgment and critical thinking to:
• Assess risk, materiality, and control effectiveness
• Determine if evidence is sufficient and complete
• Analyze root causes of issues
• Effectively interpret and document processes.
• Experience with data analysis is a plus.
• Familiarity with AuditBoard is a plus.
• CISA, CISSP or CCSP certification (preferred)

Looking for Immediate to 30 Days joiner Only*