Senior IT Audit & Compliance Specialist

NXP; Bengaluru; On-site; INR 2,000,000 - 3,500,000; Full time

Job summary

NXP in Bengaluru, India is seeking a senior compliance professional to support the annual SOX program across ITGCs, control evidence, and remediation tracking. You will coordinate with Application Owners and Control Owners to ensure complete, accurate, and timely artifacts and reports.

The role requires five-plus years in IT audit or compliance, strong data validation skills, excellent English communication, and the ability to work independently across global teams while maintaining

Qualifications

• Bachelor's degree in IT, IS, cybersecurity, or equivalent experience.
• At least five years in IT audit, compliance, risk, or related GRC function.
• Knowledge of ITGCs, IT application controls, audit evidence, and remediation management.
• Experience reviewing evidence for completeness and traceability.
• Experience coordinating with control owners and auditors.
• Strong analytical skills and accurate reporting.
• Excellent written and verbal English.
• Ability to work independently and manage multiple priorities.
• Proactive, detail-oriented, and structured.
• Ability to escalate risks, delays, dependencies, and quality concerns.
• Familiarity with global stakeholder collaboration.
• Confidentiality in handling sensitive information.

Responsibilities

• Support annual SOX compliance program planning and evidence coordination.
• Review compliance evidence for completeness, relevance, accuracy, and traceability.
• Perform independent control evaluations across SOX, Sustainability, Information Security, AI Compliance, and other domains.
• Evaluate IT General Controls, IT application controls, and key reports.
• Coordinate with Application Owners and Control Owners to obtain evidence and clarify execution.
• Track deficiencies, findings, remediation actions, audit observations, and related commitments.
• Track vulnerability-remediation activities and evaluate closure evidence.
• Maintain compliance documentation, templates, and knowledge repositories.
• Prepare dashboards, management reports, and status updates on compliance progress.
• Perform data validation and reconciliation across compliance data sources.
• Support UAT of changes in GRC tooling.
• Analyze compliance data to identify trends and areas needing attention.
• Support annual e-learning and awareness activities and track completion.
• Support control rationalization and risk assessment.
• Identify opportunities to standardize and automate REPEATED compliance activities.
• Collaborate with global stakeholders and escalate issues timely.

Skills

IT audit

Risk management

Data validation

Communication skills

Problem solving

Attention to detail

Time management

English proficiency

Education

Bachelor's degree in IT / IS / Cybersecurity

Tools

SAP

Workiva

Archer

ServiceNow

Saviynt

Power BI

SharePoint

Job description

ROLE

• – Support the annual SOX compliance program, including planning, evidence coordination, deadline monitoring, control‑execution tracking, maintenance of compliance management systems and related repositories, and onboarding of new SOX applications and controls.
• – Review compliance evidence and control‑execution documentation for completeness, relevance, accuracy, quality, traceability, and alignment with applicable control objectives.
• – Perform independent control evaluations and document conclusions across SOX, Sustainability, Information Security, AI Compliance, and other applicable compliance domains.
• – Evaluate IT General Controls, IT application controls, key reports, and Information Produced by the Entity, including coordinating evidence requests and assessing the completeness and relevance of supporting documentation.
• – Coordinate with Application Owners, Control Owners, and other stakeholders to obtain appropriate evidence, clarify control execution, resolve documentation gaps, and complete compliance activities within agreed deadlines.
• – Track and follow up on deficiencies, findings, remediation actions, audit observations, and related commitments in applicable compliance and remediation tracking systems.
• – Track vulnerability‑remediation activities, coordinate follow‑up with responsible stakeholders, and evaluate supporting closure evidence for completeness and adequacy.
• – Maintain compliance documentation, procedures, templates, work instructions, training materials, guidance documents, and knowledge repositories.
• – Prepare recurring dashboards, management reports, status updates, and summaries covering compliance completion, evidence quality, open findings, remediation progress, overdue actions, and emerging risks or concerns.
• – Perform data validation and reconciliation across compliance data sources to support accurate, complete, and reliable reporting.
• – Support UAT of changes in GRC tooling.
• – Analyze compliance data to identify trends, recurring findings, control‑performance issues, overdue actions, and areas requiring management attention.
• – Support annual compliance e‑learning and awareness activities, including tracking completion rates, validating completion data, and coordinating follow‑up where required.
• – Support control rationalization, risk assessment, and periodic review activities to help maintain appropriate and risk‑aligned compliance coverage.
• – Identify opportunities to standardize, simplify, and automate repetitive compliance activities and support the implementation of appropriate reporting, workflow, and automation improvements.
• – Collaborate with global stakeholders across functions, business units, and locations, escalating risks, delays, dependencies, and quality concerns in a timely manner.

REQUIREMENTS

• – Bachelor’s degree in Information Technology, Information Systems, Cybersecurity, or a related discipline, or equivalent practical experience.
• – Minimum of five years of professional experience in IT audit, IT compliance, risk management, internal controls, information security, or a related GRC function.
• – Working knowledge of IT General Controls, IT application controls, audit evidence, control documentation, control execution, and findings and remediation management.
• – Experience reviewing evidence and control documentation for completeness, relevance, traceability, and alignment with defined control requirements.
• – Experience coordinating compliance, audit, assessment, or remediation activities with Control Owners, Application Owners, auditors, or other business and IT stakeholders.
• – Strong analytical skills, including data validation, inconsistency identification, documentation evaluation, and accurate reporting.
• – Strong written and verbal communication skills in English.
• – Ability to work independently, manage multiple priorities, and appropriately escalates risks, delays, and quality concerns.
• – Proactive and accountable work approach with detail‑oriented, structured methodology.
• – Ability to manage competing deadlines and follow through on open activities.
• – Ability to identify and promptly escalates risks, delays, dependencies, and quality concerns.
• – Ability to collaborate effectively with global and cross‑functional stakeholders.
• – Commitment to maintaining confidentiality when handling audit, compliance, security, and business information.
• – Preferred: Knowledge of SOX compliance, including ITGCs, IT application controls, key reports, and evidence requirements.
• – Preferred: Experience in additional compliance domains such as Information Security, Sustainability, AI Governance, regulatory compliance, or technology risk.
• – Preferred: Familiarity with frameworks and standards such as NIST SP 800‑53, NIST Cybersecurity Framework, COBIT, ISO 27001, internal control frameworks, or AI governance principles.
• – Preferred: Experience working with Internal Audit, External Audit, SOX Controllership, Information Security, or other assurance and governance functions.
• – Preferred: Familiarity with tools such as SAP, Workiva, Archer, ServiceNow, Saviynt, Power BI, SharePoint, or equivalent solutions.
• – Preferred: Experience supporting compliance process improvement, reporting enhancement, workflow optimization, or automation initiatives.
• – Preferred: Professional certification such