Manager - IT Audit Role

EXL; Dadri, Gurugram District; Hybrid; INR 1,200,000 - 2,000,000; Full time

Job summary

EXL is seeking an experienced IT audit professional to evaluate IT risks from a SOX perspective and perform ITGC and application controls testing across complex environments. Responsibilities include reviewing SOC Reports, validating audit evidence, SAP Security reviews, and liaising with clients and external auditors to close issues with precise test work papers.

Certifications like CISA, CISSP, CISM are highly valued.

Qualifications

• Experience in internal auditing with SOX.
• Experience performing ITGCs and application controls tests.
• Experience reviewing SOC Reports and audits.
• Familiarity with SAP Security reviews and IT data center operations.
• Industry certifications such as CISA, CISSP, CISM, CEH, ISO 27001 LA, IA are preferred.

Responsibilities

• Evaluate IT risks from a SOX perspective.
• Perform design and operating effectiveness tests of ITGCs and application controls.
• Review SOC Reports and key SOX-related reports.
• Liaise with client and external auditors for requirements and questions.
• Document test work papers with precision and detail.
• Holds industry certifications such as CISA, CISSP, CISM, CEH, ISO 27001 LA, IA.

Skills

IT risk assessment

SOX compliance

ITGC testing

SOC Reports

Audit evidence

SQL

UNIX scripting

SAP Security

IT controls design

Stakeholder liaison

Tools

ACL

SQL queries

UNIX scripting

Job description

Role & responsibilities

• Evaluate IT risks from SOX perspective
• Experience in performing multiple full round of internal auditing and proficient with SOX regulation. Perform Design and operating effectiveness test of ITGCs as well as application controls
• Experience reviewing SOC Reports and auditing key reports for SOX compliance
• Leverages industry knowledge from prior experience.
• Familiarity with tools such as ACL, SQL queries, UNIX scripting.
• Performs, and is responsible for, reviewing the audit evidences, validating them for completeness and accuracy and documenting the work-papers.
• A good understanding of IT data center operations and a variety of technology platforms.
• Participate/conduct SAP Security reviews of individual programs. SAP Security includes, but not limited to role maintenance activities, adherence with segregation of duties requirements, and supporting the current organization level design
• Perform Design and operating effectiveness test of ITGCs as well as application controls
• Evaluate Design and performance of automated/configuration controls
• Liaise with client as well as external auditors for requirements and questions
• Finalize Issues noted and discuss it with the required stakeholders to bring it to closure
• Document Test work papers with precision and detail
• Holds industry certifications such as CISA, CISSP, CISM, CEH, ISO 27001 LA, IA etc.

Work Window: 12 noon to 12 midnight