Intermediate IT Auditor

Moody's Investors Service; Gurugram District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Moody's Investors Service in India is seeking an IT audit professional to assess risks, controls, cybersecurity, and data security across technology environments. You will work to strengthen ITGCs, SDLC, access management, and control effectiveness while collaborating with stakeholders and utilizing analytics.

The role requires strong communication, problem-solving, and the ability to translate findings into actionable remediation with adherence to COSO/COBIT frameworks and regulatory

Qualifications

• Bachelor’s degree in cybersecurity, CS, IT, or related field.
• Professional certifications such as CISA, CISSP, CIA preferred.
• Progress toward obtaining one is considered an asset.

Responsibilities

• Support the execution of technology-focused audits by assessing risks, evaluating control design and effectiveness, and contributing to audit planning activities.
• Perform audit testing, document results, and assist in identifying, validating, and communicating control gaps, risks, and recommendations.
• Partner with audit team members and business stakeholders to gather information, understand processes, and support audit objectives throughout the audit lifecycle.
• Contribute to issue validation activities to confirm remediation of actions.
• Apply data analytics and technology-enabled audit techniques to strengthen testing procedures and monitoring.
• Promote adherence to Internal Audit methodologies, standards, and ethical practices.
• Continuously expand knowledge of business operations, regulatory developments, and industry-leading audit practices.

Skills

IT audit

IT risk

Controls

Cybersecurity

Data analysis

Excel

Pivot tables

Data security

Communication

COSO

COBIT

NIST

ISO

SOC reporting

AI tools

Cloud environments

Education

Bachelor’s degree in Cybersecurity

Bachelors degree in CS/IT/IS

CISA

CISSP

CIA

Job description

At Moody's, we unite the brightest minds to turn today’s risks into tomorrow’s opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are—with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways. Moody’s is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment, we’re advancing AI to move from insight to action—enabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence.

Skills and Competencies

• Minimum 2 years of experience in IT audit, IT risk, controls, cybersecurity, or related areas
• Knowledge of IT general controls (ITGCs), application controls, Software Development Life Cycle (SDLC), access management, and data security concepts
• Strong analytical and problem-solving skills, with the ability to assess risks, evaluate controls, and identify opportunities to improve processes and audit effectiveness
• Effective written and verbal communication skills, with the ability to collaborate with stakeholders and present audit observations clearly and professionally
• Intermediate data analysis capabilities using Excel or equivalent tools, including pivot tables, lookups, reconciliations, and large dataset analysis
• Familiarity with audit, risk, and control frameworks such as COSO, COBIT, NIST, ISO, or SOC reporting, as well as emerging technologies, automation, AI tools, or cloud-based environments is preferred

Education

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, Information Systems, or a related field
• Professional certifications such as CISA, CISSP, CIA, or progress toward obtaining one are preferred

Responsibilities

• Support the execution of technology-focused audits by assessing risks, evaluating control design and effectiveness, and contributing to audit planning activities
• Perform audit testing, document results, and assist in identifying, validating, and communicating control gaps, risks, and recommendations
• Partner with audit team members and business stakeholders to gather information, understand processes, and support audit objectives throughout the audit lifecycle
• Contribute to issue validation activities to confirm the successful implementation of management action plans and remediation efforts
• Apply data analytics and technology-enabled audit techniques to strengthen testing procedures, support continuous monitoring activities, and enhance audit efficiencyEvaluate controls across a broad range of technology environments, including infrastructure, applications, access management, and data security processes
• Promote adherence to Internal Audit methodologies, professional standards, and ethical practices while maintaining a high level of quality and integrity in audit work
• Continuously expand knowledge of business operations, emerging technologies, regulatory developments, and industry-leading audit practices to enhance audit effectiveness and drive value for the organization

About the Team

The Internal Audit team provides independent assurance and advisory services that help strengthen risk management, governance, and control processes across Moody’s. Working closely with business and technology stakeholders, the team evaluates key risks, assesses the effectiveness of controls, and identifies opportunities to enhance operational efficiency and resilience. Team members are encouraged to bring curiosity, critical thinking, and innovative approaches to audit execution while gaining broad exposure to Moody’s businesses, technologies, and strategic initiatives.

Moody’s is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender expression, gender identity or any other characteristic protected by law. Candidates for Moody's Corporation may be asked to disclose securities holdings pursuant to Moody’s Policy for Securities Trading and the requirements of the position. Employment is contingent upon compliance with the Policy, including remediation of positions in those holdings as necessary.