Senior Internal Auditor (IT)

KBR; Chennai District; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

KBR is seeking a Senior Internal Auditor (IT) to strengthen governance, risk management, and internal controls across IT processes. The role leads SOX and IT audit testing, collaborates with IT management and stakeholders, and analyzes technology risks including cloud and cybersecurity. Domestic and international travel up to 25% may be required.

The ideal candidate has 5+ years in IT audit, certifications such as CISA/CISSP, and a strong background in ITGCs, SDLC, and data analytics.

Qualifications

• Five or more years of progressive IT audit, internal audit, cybersecurity, risk management, or related experience.
• Strong understanding of information systems auditing concepts and risks (logical access, change management, SDLC, cloud, network security).
• Experience performing SOX 404 testing and evaluating ITGCs, ITACs, interfaces, and automated controls.

Responsibilities

• Lead SOX and internal audit testing across ITGCs, ITACs, IPE, SDLC controls, and technology audits.
• Plan and perform audit procedures, evaluate control design and operating effectiveness.
• Develop clear audit documentation supporting procedures, observations, and conclusions.
• Collaborate with IT management, process owners, and external auditors to obtain evidence.
• Evaluate technology risks related to access, change management, cybersecurity, cloud, and data migration.
• Identify control deficiencies and process improvements; communicate findings timely.
• Use data analytics, automation, and AI-enabled tools to enhance audit efficiency.
• Stay current on tech trends, cybersecurity, and regulatory developments.
• Support annual audit plan and SOX compliance; review work of junior auditors.

Skills

IT risk knowledge

Governance frameworks

Audit methodologies

SOX testing

Mentoring junior staff

Data analytics

AI-enabled productivity tools

Communication

Education

Bachelor's degree in Information Systems, Computer Science, Business, Accounting, Engineering, Cybersecurity, or related field

Master's degree in a related field

Tools

SAP

Microsoft Dynamics

Workday

Job description

Senior Internal Auditor (IT)

KBR — Delivering Solutions, Changing the World. KBR is a global leader in delivering science, technology, and engineering solutions to governments and top tier commercial clients to overcome tomorrow’s challenges, always maintaining our commitment to Zero Harm. With a full portfolio of services, proprietary technologies and expertise, our approximately 37,000 employees are ready to handle projects and missions throughout their entire lifecycle, from planning and design to sustainability and maintenance. Whether at the bottom of the ocean or in outer space, our clients trust us to deliver the impossible on a daily basis. Audit and Advisory Services at KBR plays a trusted role in supporting the company’s governance, risk management, and control environment through independent assurance and practical advisory insights. The team partners across the business to evaluate key risks, strengthen processes, and provide objective perspectives that help KBR operate with integrity, accountability, and continuous improvement.

Summary Section

This role supports the company’s success by providing independent, objective assurance and advisory services across the organization. The Senior IT Auditor collaborates with IT management, business process owners, and audit stakeholders to evaluate the effectiveness of governance, risk management, and internal controls through a systematic and disciplined approach. Responsibilities include leading and executing Sarbanes-Oxley (SOX) and internal audit testing, assessing compliance with policies and regulatory requirements, identifying technology-related risks, and communicating audit results to management. International and domestic travel of up to 25% may be required.

Responsibilities

• Execute and lead SOX and internal audit testing across IT General Controls (ITGCs), IT Application Controls (ITACs), Information Produced by the Entity (IPE), SDLC controls, and technology-focused audits.
• Independently plan and perform audit procedures, evaluate control design and operating effectiveness, and develop risk-based conclusions.
• Develop clear, complete, and evidence-based audit documentation that supports testing procedures, observations, conclusions, and reporting requirements.
• Collaborate with business process owners, IT management, external auditors, and other stakeholders to obtain evidence and discuss audit results.
• Evaluate technology risks related to access management, change management, cybersecurity, interfaces, data migration, cloud technologies, and system implementations.
• Identify control deficiencies, process improvement opportunities, and emerging risks, and communicate observations in a timely and professional manner.
• Utilize data analytics, automation techniques, and technology-enabled audit tools to enhance audit effectiveness and efficiency.
• Leverage artificial intelligence (AI) tools such as Microsoft Copilot, Claude, ChatGPT, and similar technologies to improve audit planning, documentation, research, analysis, reporting, and productivity while adhering to company governance and data protection requirements.
• Stay current on evolving technology trends, cybersecurity risks, regulatory developments, and industry-leading audit practices.
• Support the execution of the annual audit plan and SOX compliance program.
• Review work performed by less experienced auditors and provide coaching, guidance, and constructive feedback.
• Manage multiple assignments simultaneously while ensuring quality, accuracy, and timely completion of deliverables.

Preferred Skills

• Demonstrates intellectual curiosity and a commitment to continuous learning and professional development.
• Strong knowledge of IT risks, controls, governance frameworks, and audit methodologies.
• Excellent interpersonal, analytical, problem-solving, and decision-making skills.
• Excellent verbal and written communication skills with the ability to effectively communicate with stakeholders at all levels of the organization.
• Strong project management and organizational skills with the ability to manage multiple priorities and deadlines.
• Demonstrated ability to work independently while contributing to team success and mentoring junior team members.
• Proficiency in leveraging data analytics, automation, and AI-enabled productivity tools such as Microsoft Copilot, Claude, ChatGPT, or similar technologies to improve audit effectiveness and efficiency.
• Ability to adapt to a rapidly changing technology and business environment.

Preferred Qualifications and Experience

• Five or more years of progressive IT audit, internal audit, external audit, cybersecurity, risk management, compliance, or related experience.
• Strong understanding of information systems auditing concepts and risks, including logical access, privileged access, change management, information security, system development lifecycle (SDLC), business continuity, disaster recovery, cloud technologies, and network security.
• Experience performing SOX 404 testing and evaluating ITGCs, ITACs, interfaces, automated controls, and system-generated reports.
• Familiarity with enterprise applications such as SAP, Microsoft Dynamics, Workday, and cloud-based systems.
• Bachelor's or Master's degree in Information Systems, Computer Science, Business, Accounting, Engineering, Cybersecurity, or a related field.
• Professional certification such as CISA, CIA, CPA, CISSP, CISM, or equivalent certification preferred.
• Experience utilizing data analytics, automation, and AI-assisted technologies within audit, risk, or compliance activities is preferred.

Values

• We Value Our People – We create diverse, inclusive environments in which each person can feel safe, respected and valued, and where everyone has opportunities to grow and reach their full potential.
• We Deliver – We are uncompromising in our commitment to deliver innovative, high-quality, technology-led solutions for our customers and exceptional, sustainable value for all our stakeholders.
• We Are People of Integrity – We value honesty, trust, courage, fairness, prudence and tenacity. We believe doing what’s right for the planet, the communities where we work, and our people is good for business.
• We Empower – We empower our people with a shared purpose, the right tools and the supportive culture they need to be proactive decision-makers, to be adaptive to change, and to succeed.
• We Are a Team of Teams – We have a will to succeed, but we value the achievements of our team of teams over individual accomplishments. Our collective focus makes us a better, stronger, more effective company.

We have also embedded environmental, social and governance (ESG) principles in every business operation and corporate function. Not only are we committed to operating safely, sustainably and equitably, but we are also committed to using our capabilities and expertise to help our customers accomplish their sustainability goals.

Worldwide, KBR employs a diverse workforce approximately 29,000 people strong, with customers in more than 80 countries and operations in 40 countries.

At KBR, We Deliver.