Senior Internal Auditor

Okta Inc.; Bengaluru; Presencial; INR 2 000 000 - 3 200 000; Tempo integral

Resumo da oferta

Okta Inc. is seeking an experienced Senior Internal Auditor to join its global Internal Audit team in Bengaluru. You will lead ITGC/ITAC testing, review SOC reports, and partner with Engineering, Information Security, and Finance to safeguard ICFR.

You will mentor auditors, prepare audit-ready workpapers, and drive remediation of control deficiencies while aligning with Okta’s SOX methodology.

Qualificações

• Bachelor’s or Master’s degree in MIS/CS/IT/Accounting/Finance.
• 4–6 years of IT audit/SOX/compliance experience in Big Four or enterprise.
• Deep knowledge of SOX 404, COBIT, NIST CSF, and COSO.
• Experience testing ERP/CRM systems, IAM tools, and cloud environments.

Responsabilidades

• Lead ITGC/ITAC walkthroughs across enterprise apps and cloud environments.
• Review SOC 1 / SOC 2 Type II reports for CUECs.
• Prepare audit workpapers and documentation with clear evidence and conclusions.
• Coach and review auditors to elevate quality.
• Identify root causes of control deficiencies and remediation actions.
• Track MAPs and perform remediation testing to ensure closure.
• Collaborate with Engineering, Information Security, and Finance to support ICFR.

Conhecimentos

IT audit

SOX compliance

Risk assessment

Stakeholder collaboration

Control testing

Formação académica

Bachelor’s or Master’s degree in MIS/CS/IT/Accounting/Finance

Ferramentas

Optro

SQL

Descrição da oferta de emprego

Okta is searching for an experienced, detail-oriented, and high-impact Senior Internal Auditor to join our global Internal Audit team and drive the successful execution of Okta’s global Internal Audit and SOX IT compliance program.

In this role, you will lead and execute IT General Control (ITGC), IT Application Control (ITAC), and Information Produced by Entity (IPE/Key Reports) walkthroughs and testing across Okta’s critical enterprise applications, infrastructure, and cloud environments.

You will operate with significant autonomy, collaborate closely with external auditors, mentor and review the work of auditors, and partner with Engineering, Information Security, and Finance stakeholders to safeguard the integrity of internal controls over financial reporting (ICFR).

Independently lead end-to-end SOX IT walkthroughs and execute design (TOD) and operating effectiveness (TOE) testing in strict alignment with Okta’s Internal Audit and SOX methodology.

Assess IT General Controls across all primary domains: Logical Access & Security, Change Management, Computer Operations & Resiliency.

Perform rigorous evaluations of automated application controls (ITAC), system-generated reports/queries (IPE), key data integrations, and interface reconciliations.

Review third-party Service Organization Control reports (SOC 1 / SOC 2 Type II) to evaluate complementary user entity controls (CUECs).

Prepare self-reviewed, audit-ready workpapers and documentation within Okta's GRC platform with clear evidence, testing samples, and audit conclusions.

Review staff and associate auditor work products, providing actionable coaching and feedback to elevate overall team quality and audit rigor.

Pinpoint systemic root causes of control breakdowns and bridge technical gaps between engineering realities and compliance expectations.

Draft precise, well-contextualized deficiency write-ups and collaborate with control owners to reach alignment on remediation strategies.

Track Management Action Plans (MAPs) and perform remediation testing to validate sustained resolution of identified gaps.

Identify opportunities to rationalize redundant controls, eliminate manual testing fatigue, and leverage automated system capabilities.

Bachelor’s or Master’s degree in Management Information Systems (MIS), Computer Science, Information Technology, Accounting, Finance, or related STEM/business discipline.

4–6 years of relevant experience in IT audit, SOX compliance, technology risk consulting, or internal controls assurance within a Big Four public accounting firm and/or a publicly traded enterprise.

Deep functional knowledge of SOX 404 requirements, PCAOB standards, COBIT, NIST CSF, and the COSO internal control framework.

Practical experience testing core enterprise systems, including ERP platforms, CRM/Billing systems, Identity & Access Management tools, and cloud environments.

Proven capability in assessing control deficiencies, determining financial statement impact/significance, and formulating corrective actions.

Preferred: Professional certification such as CISA (Certified Information Systems Auditor) strongly preferred; CIA, CISSP, CISM, or CPA is an added advantage.

Preferred: Direct hands-on experience using modern GRC tools such as Optro.

Preferred: Familiarity with database query languages (SQL) or data analytics platforms to automate testing validations.

Preferred: Understanding of modern DevOps environments, cloud security posture, and CI/CD release management tools.