IT Audit & Compliance Analyst / Senior Analyst (ITGC & ITAC)

Orcapod Consulting Services; Mumbai, Gurugram District; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Orcapod Consulting Services in Mumbai seeks an IT Audit & Compliance Analyst / Senior Analyst (ITGC & ITAC) to support SOX, internal audits, and regulatory requirements by performing IT General Controls and IT Application Controls testing across Access Management, Change Management, IT Operations, SAP, Oracle, and other enterprise systems.

The role coordinates with internal and external auditors, control owners, and business stakeholders through the full audit lifecycle, reviews evidence for

Qualifications

• IT General Controls (ITGC) testing across Access Management, Change Management, and IT Operations.
• IT Application Controls (ITAC) testing within SAP, Oracle, and other enterprise apps.

Responsibilities

• Perform ITGC testing across key domains for SOX, internal audits, and regulatory compliance.
• Execute ITAC testing within SAP, Oracle, and other enterprise apps, including automated, configuration, interface controls and key reports.
• Coordinate with internal auditors, external auditors, control owners, and business stakeholders through audit lifecycle.
• Review, validate, and maintain audit evidence for completeness and accuracy prior to submission.
• Lead User Access Review (UAR) activities and drive remediation of SoD issues.
• Review changes (normal, standard, emergency) for compliance with Change Management policies.
• Assess SOC 1 and SOC 2 reports and determine impact on control environment.
• Identify control gaps, risks, and opportunities for optimization and process improvement.
• Document audit observations, risk assessments, and remediation plans; track closures.

Job description

Role & responsibilities

Job Title: IT Audit & Compliance Analyst / Senior Analyst (ITGC & ITAC)

Key Responsibilities

• Perform and support IT General Controls (ITGC) testing across key domains including Access Management, Change Management, and IT Operations for SOX, internal audits, and regulatory compliance requirements.
• Execute IT Application Controls (ITAC) testing within SAP, Oracle, and other enterprise applications, including automated controls, configuration controls, interface controls, and key reports testing.
• Coordinate with internal auditors, external auditors, control owners, and business stakeholders throughout the audit lifecycle, including planning, walkthroughs, testing discussions, evidence collection, and issue resolution.
• Review, validate, and maintain audit evidence to ensure completeness, accuracy, and compliance with audit requirements prior to submission to auditors.
• Lead and monitor User Access Review (UAR) activities, ensuring timely completion by control owners and remediation of segregation of duties (SoD), inappropriate access, and other identified issues.
• Conduct periodic reviews of normal, standard, and emergency changes to assess compliance with established Change Management policies and identify deviations or control exceptions.
• Analyze and evaluate SOC 1 and SOC 2 reports, assess complementary user entity controls (CUECs), and determine their impact on the organization’s control environment and audit requirements.
• Assess IT policies, standards, and procedures to identify control gaps, compliance risks, process inefficiencies, and opportunities for control optimization and process improvement.
• Document audit observations, risk assessments, control deficiencies, and recommendations; track remediation plans to ensure timely closure of audit findings and compliance issues.
• Support enterprise-wide IT risk assessments, compliance monitoring, and control effectiveness evaluations, while facilitating walkthroughs and stakeholder discussions to strengthen the overall IT governance and control framework.