IT Risk & Cybersecurity Professional - CISA

S K R and Company LLP; Chennai District; On-site; INR 900,000 - 1,300,000; Full time

Job summary

S K R and Company LLP in Chennai is expanding its IT Risk & Cybersecurity practice and seeks two CISA-qualified professionals to perform IT General Controls testing, ICFR-IT, and SOC 1/SOC 2 attestations for US-listed and cross-border clients.

You will work under engagement partners, document control design, and evaluate operating effectiveness, with emphasis on strong client communication. Prior hands-on exposure to ITGC or SOC audits is strongly preferred.

Qualifications

• CISA certification is mandatory.
• Experience in IT General Controls testing and SOC audits preferred.
• Familiarity with SSAE 18, AT-C 105/205, or ISO 27001 is advantageous.
• Strong documentation skills and attention to control-level detail.
• Ability to work directly with clients during fieldwork.

Responsibilities

• Perform IT General Controls testing covering access management, change management, and IT operations controls.
• Support SOC 1 and SOC 2 Type I and Type II examinations under SSAE 18 / AT-C 105/205, including system description evaluation and control matrix testing.
• Contribute to ICFR-IT testing and the IT controls component of SOX 404 integrated audits for US-listed and SEC-registrant clients.
• Identify and document CUECs and CSOCs, and evaluate control design and operating effectiveness.
• Work directly with engagement partners across client industries, including technology and SaaS service organisations.

Skills

CISA certification

ITGC testing

SOC 1/SOC 2 audits

Documentation skills

Client interaction

Tools

SSAE 18

AT-C 105/205

ISO 27001

Job description

About Us

S K R and Company LLP is an integrated consulting practice based in Chennai, serving multinational corporations, domestic businesses, and cross-border clients across assurance, tax, technology risk, compliance, transformation, and managed services. Every engagement is led by a partner holding the relevant credential, not handed between generalists and outside specialists.

The role

We are expanding our IT Risk & Cybersecurity practice and are looking for two CISA-qualified professionals to work on IT General Controls testing, ICFR-IT, and SOC 1/SOC 2 attestation engagements. Prior hands‑on exposure to ITGC or SOC audits is strongly preferred.

What you will do

• Perform IT General Controls testing covering access management, change management, and IT operations controls


• Support SOC 1 and SOC 2 Type I and Type II examinations under SSAE 18 / AT-C 105 and 205, including system description evaluation and control matrix testing


• Contribute to ICFR-IT testing and the IT controls component of SOX 404 integrated audits for US-listed and SEC-registrant clients


• Identify and document CUECs and CSOCs, and evaluate control design and operating effectiveness


• Work directly with engagement partners across client industries, including technology and SaaS service organisations

What we are looking for

• CISA certification (mandatory)


• Prior experience in ITGC testing, SOC 1/SOC 2 examinations, or information systems audit


• Familiarity with SSAE 18, AT-C 105/205, or ISO 27001 is an advantage


• Strong documentation skills and attention to control-level detail


• Ability to work directly with clients during fieldwork

Location: Chennai