IT/IS Auditor

Incred; Mumbai; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Incred is seeking an IT Auditor / IS Auditor in Mumbai to evaluate IT controls, ensuring the security, integrity, and availability of information systems. The role focuses on planning and executing risk-based audits of IT infrastructure, applications, and processes, including cybersecurity and data protection.

The candidate should have a BE or CISA certification and experience with IT governance frameworks.

Qualifications

• BE or CISA certification required.
• Knowledge of IT governance and control frameworks.
• Experience with risk-based IT auditing is preferred.

Responsibilities

• Audit Planning & Execution: Develop and execute risk-based IT audit programs for IT infrastructure, applications, and processes (ITGCs, application controls, cybersecurity). Conduct testing on logical access, change management, data backup/recovery, BCP, and network security.
• Risk & Compliance Assessment: Assess IT General Controls (ITGCs) across operating systems, databases, and network devices.
• Reporting & Follow-up: Prepare audit reports detailing findings and risks and track remediation with stakeholders.
• Advisory & Improvement: Provide guidance to IT and business teams on designing internal controls for new systems and stay updated on emerging technologies.

Skills

IT audit methodology

Cybersecurity

Data analysis

Control frameworks

Education

BE or CISA

Job description

Role: IT Auditor / IS Auditor

Location: Mumbai (Andheri)

Objective: Responsible for evaluating the design, implementation, and operating effectiveness of the organizations IT controls, ensuring the security, integrity, and availability of information systems.

Key Responsibilities

• Audit Planning & Execution: Develop and execute risk-based audit programs for IT infrastructure, applications, and processes (e.g., ITGCs, Application Controls, Cybersecurity). Conduct testing on logical access, change management, data backup/recovery, BCP, and network security.


• Risk & Compliance Assessment: Assess IT General Controls (ITGCs) across various platforms (operating systems, databases, network devices).


• Reporting & Follow-up: Prepare clear and concise audit reports detailing findings and risks. Effectively communicate technical issues to stakeholders and track the timely remediation of identified gaps.


• Advisory & Improvement: Provide guidance to IT and business teams on designing internal controls for new systems, and stay updated on emerging technologies.

Qualifications & Skills

• Education: BE (Bachelor of Engineering/Technology) degree OR CISA (Certified Information Systems Auditor) certification.

Technical Skills Required

• IT Audit Methodology: Understanding of audit standards, principles, and a risk-based approach to Information Systems (IS) auditing.


• Cybersecurity: Familiarity with information security principles, vulnerability management, penetration testing concepts, and standard security tools.


• Data Analysis: Proficiency with audit tools or advanced data analysis techniques.


• Control Frameworks: Working knowledge of IT governance and control frameworks