Manager

Virtuoso Staffing Solutions; Mumbai; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Virtuoso Staffing Solutions in Mumbai seeks a Manager – IT Audit with 5–8 years total experience to lead IT risk assurance engagements. You will oversee ITGC and application controls, mentor analysts and drive client discussions across financial services and technology sectors.

The role requires strong stakeholder management, ability to run 3–5 projects concurrently, and to contribute to business development and pre‑sales activities.

Qualifications

• 5–8 years total professional experience in IT audit or risk roles.
• 2.5–5 years of manager-level / project-management experience.
• Strong hands-on ITGC and IT Application Controls knowledge.

Responsibilities

• Lead and execute multiple IT Audit/IT Risk engagements.
• Perform ITGC audits across applications, databases, OS, networks.
• Develop audit programs, testing methodologies, and audit reports.
• Manage client discussions and issue-resolution.
• Mentor consultants and manage 3–5 projects at a time.
• Support business development and pre-sales activities.

Skills

IT Audit

ITGC

IT Risk & Controls

Tech Risk Consulting

Internal Audit

Job description

Job Description Manager, IT Audit

Location: Mumbai
Designation: Manager IT Audit
Total Experience: 5–8 Years
Relevant Manager-Level Experience: 2.5–5 Years
CTC: Up to 25 LPA
Notice Period: Up to 60 Days

Role Overview

We are looking for an experienced Manager – IT Audit to join our IT Audit & Risk Consulting practice in Mumbai. The role is suited for professionals with strong experience in IT Audit, IT General Controls (ITGC), IT Risk & Controls Assurance, Internal Audit and Technology Risk Consulting.

Candidates must have relevant experience from IT Services, Management/Technology Consulting, Big 4/Advisory firms, or Financial Services/Banking/Insurance organizations.

Strict requirement: Candidates should have 2.5–5 years of experience at Manager / equivalent project-management level, with strong hands‑on exposure to IT Audit and Controls Assurance.

Key Responsibilities

IT Audit & Controls Assurance

• Lead and execute multiple IT Audit / IT Risk & Controls Assurance engagements simultaneously.
• Perform and review IT General Controls (ITGC) audits covering:
• Applications
• Databases
• Operating Systems
• Middleware
• Networks
• Access Management
• Change Management
• IT Operations
• Backup & Recovery
• Incident Management
• Execute/review IT Application Controls and technology control assessments.
• Conduct risk assessments, control walkthroughs, control testing, evidence review and issue identification.
• Perform assessments relating to IT Regulatory Compliance, Third‑Party Risk Assurance and Technology Risk.
• Support SOC 1 / SOC 2 assurance and attestation engagements where applicable.
• Develop audit work programs, testing methodologies, working papers and audit reports.
• Prepare management reports and audit committee presentations.
• Identify control gaps and provide practical remediation recommendations.

Project Management

• Independently manage 3–5 IT Audit / Controls Assurance projects at a time.
• Own engagements from initiation through closure, including planning, execution, reporting and closure.
• Ensure project delivery within agreed timelines, quality standards and budgets.
• Monitor project risks, issues, dependencies and resource requirements.
• Coordinate with Directors/Partners and provide regular engagement updates.
• Ensure appropriate engagement documentation and quality standards.

Client & Stakeholder Management

• Act as a key client‑facing contact for assigned engagements.
• Conduct client discussions, walkthroughs, status meetings and issue‑resolution discussions.
• Understand client business processes, technology environment and associated risks.
• Build strong relationships with technology, risk, audit and business stakeholders.

People Leadership

• Manage and mentor consultants/analysts working on engagements.
• Allocate work, review deliverables and provide performance feedback.
• Coach team members on IT Audit methodology, controls testing and professional development.
• Support staffing and resource planning for projects.

Business Development

• Support business development through client relationship management.
• Contribute to RFP/RFI responses, proposals, presentations and pre‑sales activities.
• Identify opportunities for additional IT Risk, IT Audit and Cyber Risk services.
• Support Partners/Directors in account development and revenue‑generation initiatives.

Emerging Technology

Exposure to technology risks and controls in one or more areas such as:

• Cloud / AWS / Azure
• DevSecOps
• Intelligent Automation
• Cybersecurity
• Data Privacy
• Digital Transformation
• Emerging Technology Risk

Required Skills & Experience

• 5–8 years of total professional experience.
• 2.5–5 years of relevant Manager / equivalent project‑management experience.
• Strong hands‑on experience in IT Audit / IT Risk / Controls Assurance / Technology Risk Consulting.
• Candidates must have relevant experience in IT Services, Consulting/Advisory, or Financial Services.
• Strong understanding of ITGC and IT Application Controls.
• Experience with IT audit frameworks and standards such as:
• COBIT
• COSO
• ITIL
• ISO 27001
• NIST
• Experience in risk assessment, control testing, audit documentation and reporting.
• Client‑facing and team‑management experience.
• Exposure to business development, proposals, RFP/RFI and pre‑sales is preferred.
• Strong analytical, problem‑solving and communication skills.
• Willingness to travel to client locations in India and, where required, overseas.

Preferred Certifications

• CISA
• CISSP
• CIA
• CISM
• ISO 27001 Lead Auditor
• SAP/Oracle Security certifications
• Relevant Cloud / Cybersecurity certifications