IT Auditor

Assurant Solutions; Chennai; Hybrid; INR 900,000 - 1,500,000; Full time

Job summary

Assurant Solutions is seeking an IT Auditor, GCC to strengthen IT controls and risk management. You will perform risk-based IT audits, advise on controls, and partner with business and technology teams to deliver assurance across the organization.

The role covers risk assessments, audit planning, and reporting, with a focus on governance, compliance, and technology risk management. Based in India, you will engage across Bengaluru, Chennai, and Hyderabad.

Qualifications

• Bachelor's degree required in IT/CS/Business/Finance/Risk Management or related field.
• 4+ years of experience in Internal/External IT Audit or technology risk.
• Experience with audit testing, risk assessments, control evaluations, and audit documentation.
• Strong written reports and stakeholder presentation abilities.

Responsibilities

• Participate in risk-based IT audits across processes, apps, infrastructure, cloud, cybersecurity, and IT operations.
• Design and execute audit procedures through planning, fieldwork, testing, reporting, and follow-ups.
• Evaluate internal controls and identify opportunities to strengthen the control environment.
• Develop audit programs and testing strategies aligned with objectives and risks.
• Assist in annual risk assessments and audit planning across the enterprise.
• Follow up on audit findings to assess remediation effectiveness.

Skills

Risk-based audit methodologies

ITGCs understanding

Data analytics

Stakeholder management

Communication skills

Independent work

Education

Bachelor's degree in IT/CS/Business/Finance/Risk Management

Tools

Power BI

Tableau

SharePoint

Excel

Job description

Job Summary

The IT Auditor, GCC - Assurant is responsible for evaluating and strengthening Assurant's IT control and risk environment through the execution of risk-based IT audits and advisory activities. Working as part of the Internal Audit & Advisory Services (IAAS) team, this role partners with business and technology stakeholders to assess risks, evaluate control effectiveness, identify improvement opportunities, and provide objective assurance across the organization.

This role contributes by performing independent audits across technology domains, supporting enterprise risk assessments, and communicating meaningful insights that help management make informed decisions. Through strong analytical skills, stakeholder engagement, and adherence to audit methodology and professional standards, the Sr. IT Auditor I helps protect and enhance Assurant's operational effectiveness and risk management framework.

Role Focus

• Risk-Based IT Audits
• IT General Controls (ITGC) Assessment
• Technology Risk Management
• Internal Control Evaluation
• Audit Planning and Execution
• Enterprise Risk Assessment Support
• Audit Reporting and Stakeholder Communication
• Professional Practice and Continuous Improvement Initiatives

This position will be based in Bengaluru, Chennai and Hyderabad, India.

Work Hours - 3:30 PM - 12:30 AM IST

Responsibilities

IT Audit Planning & Execution

• Participate in risk-based IT audits across business processes, applications, infrastructure, cloud environments, cybersecurity, and technology operations.
• Design and execute audit procedures through all phases of the audit lifecycle, including planning, fieldwork, testing, reporting, and follow-up activities.
• Evaluate the adequacy and effectiveness of internal controls and identify opportunities to strengthen the control environment.
• Develop audit programs and testing strategies aligned with audit objectives, organizational risks, and professional auditing standards.
• Assist in annual risk assessments and audit planning activities across the enterprise.
• Follow up on audit findings and recommendations to evaluate remediation effectiveness.

Risk Assessment & Control Evaluation

• Assess IT risks associated with change management, logical access, information security, system development, data privacy, databases, networks, and IT operations.
• Analyze business processes, technologies, and emerging trends to identify control gaps and operational risks.
• Evaluate compliance with internal policies, industry standards, and regulatory requirements.
• Provide recommendations that balance risk mitigation with business objectives.

Stakeholder Engagement & Communication

• Communicate audit findings, observations, and recommendations through concise written reports and presentations.
• Collaborate with business leaders, technology teams, and audit stakeholders throughout audit engagements.
• Build strong working relationships and establish credibility as an independent and trusted advisor.
• Translate technical audit results into business-focused insights and actionable recommendations.

Professional Practice & Continuous Improvement

• Participate in Internal Audit initiatives, centers of excellence, and methodology enhancement activities.
• Support quality assurance and continuous improvement programs aligned with IIA standards.
• Contribute to departmental knowledge sharing, training, and capability development.
• Assist in developing and maintaining audit methodologies, policies, procedures, and documentation.
• Participate in regulatory and legal information requests, when required.
• Support internal communication and knowledge management activities within SharePoint and other collaboration platforms.

Business Partnership & Development

• Develop a strong understanding of Assurant's businesses, operating environment, and strategic priorities.
• Stay informed of technology, cybersecurity, regulatory, and industry developments that may impact risk management practices.
• Pursue ongoing professional development and share knowledge and lessons learned with colleagues.

Requirements

Education

• Bachelors degree in Information Technology, Computer Science, Business, Accounting, Finance, Information Systems, Risk Management, or a related discipline.
• Equivalent combination of education and relevant experience may be considered.

• Experience: Overall 4+ Yea-3 years of experience in Internal Audit, External Audit, IT Audit, Technology Risk, Information Security, Compliance, or related technology-focused roles.
• Experience performing audit testing, risk assessments, control evaluations, and audit documentation.
• Experience collecting and analyzing complex information and drawing logical conclusions.
• Experience preparing professional written reports and presenting findings to stakeholders.
• Experience collaborating with cross-functional business and technology teams.

Core Skills & Competencies

• Strong knowledge of risk-based audit methodologies and internal control frameworks (COSO, IIA IPPF, etc.).
• Understanding of IT General Controls (ITGCs), risk assessment techniques, governance frameworks, and audit standards.
• Knowledge of cloud technologies, infrastructure, databases, systems development, networking, cybersecurity, logical access controls, and information security practices.
• Strong analytical and critical-thinking skills with the ability to identify root causes and recommend practical solutions.
• Ability to work independently, navigate ambiguity, and manage multiple priorities.
• Excellent verbal and written communication skills.
• Strong stakeholder management and collaboration capabilities.
• Ability to document work thoroughly and maintain audit evidence in accordance with professional standards.
• Proficiency with Microsoft Office tools, particularly Excel and PowerPoint.
• Experience using data analytics techniques and tools to support audit activities.

Preferred Qualifications

• Professional certifications such as CISA, CISSP, CRISC, CISM, CIA, CPA, or equivalent.
• Experience within the insurance, financial services, banking, or highly regulated industries.
• Experience auditing cloud platforms, cybersecurity controls, privacy controls, and technology governance frameworks.
• Familiarity with enterprise risk management, compliance, and regulatory environments.
• Experience using Power BI, Tableau, or other data visualization and analytics tools.
• Experience creating and maintaining content within SharePoint environments.
• Knowledge of business process improvement methodologies such as Lean or Six Sigma.
• Experience managing project plans, issue logs, risk registers, and remediation activities.