IT Audit

Deloitte Shared Services India; Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Deloitte Shared Services India is seeking a Deputy Manager IT Audit & IT Controls to independently design and execute IT control testing, assess control deficiencies, and provide remediation guidance across IT systems and processes in Bengaluru.

You will work with IT and business stakeholders to strengthen controls, participate in vendor security reviews, and mentor junior team members while staying updated on evolving IT control practices.

Qualifications

• 6–8 years of experience in IT Audit, IT Security, IT Risk, or related roles with emphasis on IT control testing.
• Strong knowledge of IT control frameworks and testing methodologies.
• Hands-on ITGC and ITAC testing experience.
• Experience with SOX IT controls preferred.
• Familiarity with IT controls across Access Management, Change Management, IT Operations, Security, DR/BCP.

Responsibilities

• Develop and maintain understanding of IT control frameworks, regulatory requirements, including SOX.
• Lead ITGC/ITAC testing and design test plans.
• Identify control deficiencies and provide remediation recommendations.
• Collaborate with IT teams, control owners and stakeholders to address gaps.
• Perform vendor security reviews across cybersecurity domains.
• Explore automation opportunities for control testing and implement where feasible.

Skills

IT Audit

IT Security

IT Risk

Technology Risk

IT control testing

SOX IT controls

Vendor security reviews

GRC Tools

Education

Bachelor's or Master's in Computer Science/IT/Engineering/Cybersecurity

Tools

ServiceNow

RSA Archer

Jira

Job description

Deputy Manager IT Audit & IT Controls

Mandatory Experience: 6-8 Years
Role: Deputy Manager IT Audit / IT Controls

Job Overview

We are looking for a Deputy Manager IT Audit & IT Controls with strong experience in IT control testing, ITGC/ITAC assessments, IT audit, risk assessments, and cybersecurity controls. The role will involve independently designing and executing control testing, identifying control deficiencies, providing remediation recommendations, and working closely with IT and business stakeholders.

Key Responsibilities

• Develop and maintain a strong understanding of IT control frameworks, regulatory requirements, and relevant regulations such as SOX.
• Participate in IT risk assessments to identify control deficiencies and prioritize testing activities.
• Independently design and execute ITGC and ITAC test plans using various testing methodologies.
• Perform control testing across areas including:
• Access Control / Identity & Access Management
• Change Management
• IT Operations
• Security Incident Response
• Disaster Recovery
• Business Continuity Management
• Risk Management
• Governance, Risk & Compliance
• Identity Access Reviews
• Perform complex control testing using automated tools and manual testing techniques.
• Document testing procedures, evidence, observations, findings, and conclusions comprehensively.
• Analyze control findings, identify weaknesses, assess risks, and recommend appropriate remediation actions.
• Collaborate with IT teams, control owners, and business stakeholders to address control deficiencies and implement corrective actions.
• Perform vendor security reviews covering various cybersecurity domains.
• Assess opportunities for automation of manual control testing processes and provide recommendations on feasibility and implementation.
• Work with GRC platforms and control testing tools such as ServiceNow, Archer, Jira, or equivalent tools.
• Lead and mentor junior team members on IT control testing methodologies and best practices.
• Stay updated on emerging IT threats, regulatory requirements, and evolving IT control practices.

Required Skills & Experience

• 6-8 years of experience in IT Audit, IT Security, IT Risk, Technology Risk, or a similar role with a strong focus on IT control testing.
• Strong working knowledge of IT control frameworks and IT control testing methodologies.
• Hands-on experience in ITGC and ITAC testing.
• Experience with SOX / SOX IT controls is preferred.
• Strong understanding of IT controls across Access Management, Change Management, IT Operations, Security, Disaster Recovery, and Business Continuity.
• Experience performing vendor security / third-party security reviews.
• Knowledge of security technologies and techniques including:
• Cryptography
• Algorithms
• Secure IT Authentication
• Secure Development
• Data Protection
• Certificate Management Lifecycle
• Experience with automated and manual IT control testing tools.
• Experience evaluating opportunities to automate manual control testing.
• Familiarity with GRC platforms such as ServiceNow, RSA Archer, Jira, or equivalent tools.
• Strong analytical, problem-solving, documentation, and stakeholder management skills.
• Ability to independently manage multiple control testing activities and changing client requirements.
• Team leadership and mentoring experience is an added advantage.

Preferred Skills

• ITGC / ITAC
• SOX IT Audit
• IT Risk & Controls
• Technology Risk
• Cybersecurity Controls
• IT Control Testing
• Access Control / IAM
• Change Management
• Disaster Recovery / BCP
• Vendor Security Assessment
• GRC Tools
• Control Automation

Education

Bachelors or Masters degree in Computer Science, Information Technology, Engineering, Cybersecurity, or a related discipline.