Internal Auditor -SOX

EY; Hyderabad; On-site; INR 1,200,000 - 2,100,000; Full time

Job summary

EY in Hyderabad is seeking an Internal Auditor for SOX to strengthen IT controls and compliance. The role focuses on evaluating control frameworks such as COSO and applying SOX/J-SOX requirements across IT environments, with emphasis on risk-based audits and data accuracy.

The ideal candidate will have 4–7 years of experience in internal controls and internal audit, familiarity with security standards (ISO 27001, PCI DSS, NIST, COBIT), and proficient data analysis using Excel/SQL tools.

Qualifications

• Preferably bachelor's degree in Finance/Accounting, Electronics, Electronics & Telecommunications, Computer Science; MBA/M.Sc./CA.
• Minimum of 4-7 years of experience in internal controls and Internal Audit.
• Enterprise risk services with focus on IT and related industry standards.
• COSO and internal control principles with SOX/J-SOX experience.
• Security skills across OS, databases, firewalls/IDS; familiarity with IT analysis, SDLC and Change Management.
• Familiarity with ISO 27001-2, PCI DSS, NIST, ITIL, COBIT.
• Experience in security testing methods: network, OS, application reviews.
• Application controls testing: sensitive access, SOD, controls testing; data analysis tools: Excel, Access, SQL Server, ACL, Monarch.

Skills

Internal controls

Internal audit

SOX compliance

COSO framework

IT security testing

SDLC

Change management

ISO 27001

PCI DSS

NIST

COBIT

UNIX/Linux security

Education

Bachelor's degree in Finance/Accounting

Bachelor's degree in Electronics

Bachelor's degree in Electronics & Telecommunications

Bachelor's degree in Computer Science

MBA

M.Sc.

CA

Tools

MS Excel

MS Access

MS SQL Server

ACL

Monarch

Job description

Position -Internal Auditor -SOX

Location -Hyderabad only

To qualify for the role, you must have.

• Preferably bachelors degree in (Finance/Accounting, Electronics, Electronics & Telecommunications, Comp. Science)/MBA/M.Sc./CA
• Minimum of 4-7 years of experience in internal controls and Internal Audit
• Enterprise risk services with specific focus on IT and related industry standards
• Control frameworks such as COSO, internal control principles and related regulations including SOX and J-SOX
• Preferred security skills related to a broad range of operating systems, databases or security tools, e.g., UNIX, Linux, Windows 2000 and NT, firewalls and IDS systems.
• Familiarity with IT analysis, delivery, and operations methods, including SDLC and Change Management
• Familiarity with security and risk standards such as ISO 27001-2, PCI DSS, NIST, ITIL, COBIT
• Experience of security testing methods and techniques including network, operating and application system configuration review
• Application controls and security experience:
• sensitive access and SOD testing
• controls testing
• Knowledge of data analysis tools like MS Excel, MS Access, MS SQL Server, ACL, Monarch, etc.

Preferred candidate profile

• Preferred Certifications: CISA, CRISC, ISO 27001 Lead Auditor