Senior Analyst, IT Internal Audit

Jobtailor; Hyderabad; On-site; INR 2,200,000 - 3,400,000; Full time

Job summary

Jobtailor, Hyderabad-based, seeks an experienced IT Internal Audit professional to lead risk-based audits spanning technology, security, and business processes. You will define scope, testing procedures, and documentation to strengthen controls and compliance.

The ideal candidate brings 5+ years in IT audit, solid knowledge of cloud, SaaS, and AI governance, with professional certifications preferred. This role collaborates with global teams and drives continuous improvement.

Qualifications

• Bachelor's degree in information systems, Computer Science, Engineering, Accounting, Finance, Business Administration, or a related field
• 5+ years of experience in IT internal audit, technology risk, or information security audit
• Experience performing IT audits in SaaS, cloud, cybersecurity, or product-driven environments
• Working knowledge of IT general controls, cybersecurity controls, cloud controls, and data governance
• Professional certifications such as ISO/IEC 27001 Lead Auditor, CISA, or CISSP preferred
• Understanding AI governance, risk management, and regulatory considerations related to AI adoption

Responsibilities

• Execute and support risk-based internal audit engagements across technology, security, operational, compliance, and business process areas
• Assist in defining audit objectives, scope, control testing procedures, sampling methodology, and documentation requirements
• Perform audits of IT general controls, including access management, change management, logical security, incident management, backup and recovery, system development lifecycle, and IT operations
• Support audits related to SaaS platforms, cloud infrastructure, cybersecurity, data privacy, third-party risk management, and technology-enabled business processes
• Evaluate the design and operating effectiveness of controls across IT, security, compliance, and operational areas
• Support audits and advisory reviews related to artificial intelligence, including AI governance, responsible AI practices, model risk considerations, data quality, access controls, transparency, monitoring, and compliance with internal AI policies
• Assist in assessing controls aligned with relevant frameworks and standards such as ISO/IEC 27001, ISO/IEC 42001, SOC 2, NIST, COBIT, ITIL, and other applicable technology risk frameworks
• Leverage data analytics and automation tools to support audit planning, risk identification, control testing, exception analysis, and continuous monitoring
• Use AI-enabled tools, where appropriate, to improve internal audit efficiency, including audit planning support, control mapping, document review, testing analysis, issue tracking, and reporting
• Document audit workpapers clearly and accurately, ensuring sufficient evidence is retained to support audit conclusions
• Identify control gaps, process inefficiencies, risk exposures, and opportunities for improvement
• Draft clear, practical, and business-oriented audit observations, including root cause, risk impact, and actionable recommendations
• Partner with process owners and management to validate audit findings, agree on remediation actions, and track issue closure
• Monitor and follow up on open audit issues to ensure timely and sustainable remediation
• Maintain audit databases, issue trackers, and engagement status updates to support timely completion of audit activities
• Build effective working relationships with stakeholders across IT, Information Security, Compliance, Legal, Finance, Operations, Product, Engineering, and other business teams
• Support special projects, management requests, and advisory reviews as directed by Internal Audit leadership
• Contribute to continuous improvement initiatives within Internal Audit, including methodology enhancements, audit automation, data analytics, AI use cases, and knowledge-sharing practices

Skills

IT Internal Audit

Information Security Audit

Risk Advisory

Data Analytics

AI Governance

ISO/IEC 27001

CISA/CISSP

Education

Bachelor's degree in information systems / Computer Science / Engineering / Accounting / Finance

Tools

Data Analytics Tools

AI-enabled Tools

Job description

Responsibilities

• Execute and support risk-based internal audit engagements across technology, security, operational, compliance, and business process areas
• Assist in defining audit objectives, scope, control testing procedures, sampling methodology, and documentation requirements
• Perform audits of IT general controls, including access management, change management, logical security, incident management, backup and recovery, system development lifecycle, and IT operations
• Support audits related to SaaS platforms, cloud infrastructure, cybersecurity, data privacy, third-party risk management, and technology-enabled business processes
• Evaluate the design and operating effectiveness of controls across IT, security, compliance, and operational areas
• Support audits and advisory reviews related to artificial intelligence, including AI governance, responsible AI practices, model risk considerations, data quality, access controls, transparency, monitoring, and compliance with internal AI policies
• Assist in assessing controls aligned with relevant frameworks and standards such as ISO/IEC 27001, ISO/IEC 42001, SOC 2, NIST, COBIT, ITIL, and other applicable technology risk frameworks
• Leverage data analytics and automation tools to support audit planning, risk identification, control testing, exception analysis, and continuous monitoring
• Use AI-enabled tools, where appropriate, to improve internal audit efficiency, including audit planning support, control mapping, document review, testing analysis, issue tracking, and reporting
• Document audit workpapers clearly and accurately, ensuring sufficient evidence is retained to support audit conclusions
• Identify control gaps, process inefficiencies, risk exposures, and opportunities for improvement
• Draft clear, practical, and business-oriented audit observations, including root cause, risk impact, and actionable recommendations
• Partner with process owners and management to validate audit findings, agree on remediation actions, and track issue closure
• Monitor and follow up on open audit issues to ensure timely and sustainable remediation
• Maintain audit databases, issue trackers, and engagement status updates to support timely completion of audit activities
• Build effective working relationships with stakeholders across IT, Information Security, Compliance, Legal, Finance, Operations, Product, Engineering, and other business teams
• Support special projects, management requests, and advisory reviews as directed by Internal Audit leadership
• Contribute to continuous improvement initiatives within Internal Audit, including methodology enhancements, audit automation, data analytics, AI use cases, and knowledge-sharing practices

Requirements

• Bachelor’s degree in information systems, Computer Science, Engineering, Accounting, Finance, Business Administration, or a related field
• 5 or more years of experience in IT internal audit, technology risk, information security audit, internal controls, compliance, risk advisory, or external audit
• Experience performing IT audits in SaaS, cloud, technology, cybersecurity, or product-driven environments
• Working knowledge of IT general controls, application controls, cybersecurity controls, cloud controls, identity and access management, change management, incident management, and data governance
• Experience with internal audit methodology, risk assessment, control design evaluation, operating effectiveness testing, audit documentation, and issue reporting
• Relevant professional certification preferred, such as: ISO/IEC 27001 Lead Auditor, ISO/IEC 42001 Lead Auditor, Certified Information Systems Auditor, CISA, Certified Internal Auditor, CIA, Certified Information Systems Security Professional, CISSP, Certified Cloud Security Professional, CCSP
• Understanding of AI governance, responsible AI principles, AI risk management, model oversight, data quality, security, privacy, and regulatory considerations related to AI adoption
• Experience using data analytics, automation, or AI-enabled tools to improve audit execution, control testing, and reporting is preferred
• Familiarity with frameworks and standards such as ISO/IEC 27001, ISO/IEC 42001, SOC 2, NIST Cybersecurity Framework, COBIT, ITIL, COSO, and cloud security control frameworks
• Ability to analyze complex technology and business processes, identify risks and control gaps, and recommend practical improvements
• Strong written and verbal communication skills, with the ability to clearly articulate audit findings, risks, and recommendations
• Strong project management and organizational skills, with the ability to manage multiple audit tasks and deadlines
• High attention to detail, intellectual curiosity, professional skepticism, and ability to work independently in a dynamic, fast-paced environment
• Ability to collaborate effectively with global teams and stakeholders across different functions and time zones

Core Competencies

Demonstrates expertise in IT Internal Audit, Risk Management, and Compliance, with a strong focus on evaluating IT general controls, cybersecurity, and data governance. Proficient in leveraging data analytics and AI-enabled tools to enhance audit efficiency and effectiveness.