Job Summary
We are looking for an ITGC Analyst with 23 years of relevant experience inInformation Technology General Controls (ITGC), IT audits, risk assessment, and compliance. The candidate should have hands‑on experience in evaluating IT controls, reviewing audit evidence, identifying control gaps, and supporting internal and external audits.
Key Responsibilities
- Perform IT General Controls (ITGC) testing and assessments across IT systems and applications.
- Review User Access Management, including user creation, modification, deletion, access reviews, and privileged access.
- Evaluate Change Management Controls, including change requests, approvals, testing evidence, and deployment authorization.
- Assess IT Operations Controls, including backup monitoring, job scheduling, incident management, and system monitoring.
- Review logical access controls, password policies, authentication mechanisms, and segregation of duties.
- Collect and validate audit evidence to ensure compliance with internal policies and regulatory requirements.
- Identify control deficiencies, assess risks, and recommend corrective actions.
- Coordinate with IT teams, process owners, internal auditors, and external auditors.
- Prepare ITGC testing workpapers, audit reports, and control documentation.
- Track audit observations and follow up on remediation of identified gaps.
- Support audits related to SOX, ISO 27001, COBIT, and other applicable compliance requirements.
Required Qualifications
- Bachelor's degree in IT, Computer Science, Computer Applications, or a related field.
- Minimum 23 years of relevant experience in ITGC, IT Audit, IT Risk, or IT Compliance.
- Practical knowledge of ITGC testing methodologies and audit documentation.
- Understanding of user access management, change management, and IT operations controls.
- Experience in evidence collection, control testing, risk assessment, and audit reporting.
- Good analytical, communication, and documentation skills.
- Proficiency in MS Excel and MS Office.
Preferred Skills
- Experience with ERP systems such as SAP, Oracle, or Microsoft Dynamics.
- Knowledge of Active Directory, Windows/Linux access controls, and database access management.
- Exposure to SOX compliance and internal or external audits.
- Certifications such as CISA or ISO 27001 are an advantage.
Important Note
Only candidates with 23 years of relevant experience in ITGC, IT Audit, IT Risk, or IT Compliance should apply. Candidates without the required relevant experience are requested to kindly disregard this job posting.