Manager - IT Audit Role

EXL; Gurugram District, Dadri; On-site; INR 1,400,000 - 2,100,000; Full time

Job summary

EXL is seeking an IT Audit professional to evaluate IT risks from a SOX perspective, perform multiple rounds of internal auditing, and test ITGCs and application controls across diverse platforms.

You will review SOC Reports, leverage ACL, SQL queries, and UNIX scripting, document test work papers precisely, and liaise with clients and external auditors to bring issues to closure.

Qualifications

• Experience in SOX ITGC testing and internal audits.
• Familiarity with reviewing SOC Reports.
• Proficient with ACL, SQL queries, and UNIX scripting.
• Industry certifications such as CISA, CISSP, CISM, CEH, ISO 27001 LA, IA preferred.

Responsibilities

• Evaluate IT risks from SOX perspective.
• Perform multiple rounds of internal auditing and test ITGCs and application controls.
• Review SOC Reports and auditing key reports for SOX compliance.
• Liaise with client and external auditors; finalize issues; document test work papers.

Skills

SOX compliance

IT risk assessment

Internal audit

SQL queries

UNIX scripting

SOC reports review

SAP Security reviews

Test ITGCs

Stakeholder liaison

Audit evidence documentation

Tools

ACL

Job description

Role & responsibilities

• Evaluate IT risks from SOX perspective


• Experience in performing multiple full round of internal auditing and proficient with SOX regulation. Perform Design and operating effectiveness test of ITGCs as well as application controls


• Experience reviewing SOC Reports and auditing key reports for SOX compliance


• Leverages industry knowledge from prior experience.


• Familiarity with tools such as ACL, SQL queries, UNIX scripting.


• Performs, and is responsible for, reviewing the audit evidences, validating them for completeness and accuracy and documenting the work-papers.


• A good understanding of IT data center operations and a variety of technology platforms.


• Participate/conduct SAP Security reviews of individual programs. SAP Security includes, but not limited to role maintenance activities, adherence with segregation of duties requirements, and supporting the current organization level design


• Perform Design and operating effectiveness test of ITGCs as well as application controls


• Evaluate Design and performance of automated/configuration controls


• Liaise with client as well as external auditors for requirements and questions


• Finalize Issues noted and discuss it with the required stakeholders to bring it to closure


• Document Test work papers with precision and detail


• Holds industry certifications such as CISA, CISSP, CISM, CEH, ISO 27001 LA, IA etc.

Work Window: 12 noon to 12 midnight