Senior IT Audit & Compliance Specialist

Growth For Impact; Bengaluru; On-site; INR 1,400,000 - 2,200,000; Full time

Job summary

Growth For Impact is seeking a seasoned IT compliance professional to support the annual SOX program, oversee evidence collection, and monitor deadlines across ITGCs and AI governance. The role involves coordinating with control owners and auditors to ensure complete, accurate documentation and timely remediation of findings.

You will analyze compliance data, generate dashboards, and support UAT of GRC tooling while maintaining confidential information across multiple domains in a fast-paced

Qualifications

• Bachelor's degree in IT/IS/Cybersecurity or related discipline.
• Minimum of five years of professional experience in IT audit, IT compliance, risk management, internal controls or a related GRC function.
• Working knowledge of IT General Controls, IT application controls, audit evidence, control documentation, control execution, and remediation management.
• Experience coordinating compliance, audit, assessment, or remediation activities with Control Owners, Application Owners, auditors, or other stakeholders.
• Strong written and verbal communication skills in English.
• Ability to work independently, manage multiple priorities, and escalate risks and timelines as needed.
• Proactive and accountable work approach with detail-driven methodology.

Responsibilities

• Support the annual SOX compliance program, including planning, evidence coordination, deadline monitoring, and onboarding of new SOX applications and controls.
• Review compliance evidence and control documentation for completeness, relevance, accuracy, and traceability.
• Perform independent control evaluations and document conclusions across SOX, Information Security, AI Compliance, and other domains.
• Coordinate with Application Owners and Control Owners to obtain evidence and resolve gaps.
• Prepare recurring dashboards and status updates on compliance progress and open findings.
• Track deficiencies, remediation actions, and audit observations in remediation tracking systems.
• Maintain compliance documentation, templates, and knowledge repositories.

Skills

IT audit

Data validation

Analytical skills

English communication

Independent work

Stakeholder collaboration

Education

Bachelor's degree in IT/IS/Cybersecurity

Tools

SAP

Workiva

Archer

ServiceNow

Saviynt

Power BI

SharePoint

Job description

ROLE

• Support the annual SOX compliance program, including planning, evidence coordination, deadline monitoring, control‑execution tracking, maintenance of compliance management systems and related repositories, and onboarding of new SOX applications and controls.
• Review compliance evidence and control‑execution documentation for completeness, relevance, accuracy, quality, traceability, and alignment with applicable control objectives.
• Perform independent control evaluations and document conclusions across SOX, Sustainability, Information Security, AI Compliance, and other applicable compliance domains.
• Evaluate IT General Controls, IT application controls, key reports, and Information Produced by the Entity, including coordinating evidence requests and assessing the completeness and relevance of supporting documentation.
• Coordinate with Application Owners, Control Owners, and other stakeholders to obtain appropriate evidence, clarify control execution, resolve documentation gaps, and complete compliance activities within agreed deadlines.
• Track and follow up on deficiencies, findings, remediation actions, audit observations, and related commitments in applicable compliance and remediation tracking systems.
• Track vulnerability‑remediation activities, coordinate follow‑up with responsible stakeholders, and evaluate supporting closure evidence for completeness and adequacy.
• Maintain compliance documentation, procedures, templates, work instructions, training materials, guidance documents, and knowledge repositories.
• Prepare recurring dashboards, management reports, status updates, and summaries covering compliance completion, evidence quality, open findings, remediation progress, overdue actions, and emerging risks or concerns.
• Perform data validation and reconciliation across compliance data sources to support accurate, complete, and reliable reporting.
• Support UAT of changes in GRC tooling.
• Analyze compliance data to identify trends, recurring findings, control‑performance issues, overdue actions, and areas requiring management attention.
• Support annual compliance e‑learning and awareness activities, including tracking completion rates, validating completion data, and coordinating follow‑up where required.
• Support control rationalization, risk assessment, and periodic review activities to help maintain appropriate and risk‑aligned compliance coverage.
• Identify opportunities to standardize, simplify, and automate repetitive compliance activities and support the implementation of appropriate reporting, workflow, and automation improvements.
• Collaborate with global stakeholders across functions, business units, and locations, escalating risks, delays, dependencies, and quality concerns in a timely manner.

REQUIREMENTS

• Bachelor’s degree in Information Technology, Information Systems, Cybersecurity, or a related discipline, or equivalent practical experience.
• Minimum of five years of professional experience in IT audit, IT compliance, risk management, internal controls, information security, or a related GRC function.
• Working knowledge of IT General Controls, IT application controls, audit evidence, control documentation, control execution, and findings and remediation management.
• Experience reviewing evidence and control documentation for completeness, relevance, traceability, and alignment with defined control requirements.
• Experience coordinating compliance, audit, assessment, or remediation activities with Control Owners, Application Owners, auditors, or other business and IT stakeholders.
• Strong analytical skills, including data validation, inconsistency identification, documentation evaluation, and accurate reporting.
• Strong written and verbal communication skills in English.
• Ability to work independently, manage multiple priorities, and appropriately escal risks, delays, and quality concerns.
• Proactive and accountable work approach with detail‑oriented, structured methodology.
• Ability to manage competing deadlines and follow through on open activities.
• Ability to identify and promptly escal risks, delays, dependencies, and quality concerns.
• Ability to collaborate effectively with global and cross‑functional stakeholders.
• Commitment to maintaining confidentiality when handling audit, compliance, security, and business information.
• Preferred: Knowledge of SOX compliance, including ITGCs, IT application controls, key reports, and evidence requirements.
• Preferred: Experience in additional compliance domains such as Information Security, Sustainability, AI Governance, regulatory compliance, or technology risk.
• Preferred: Familiarity with frameworks and standards such as NIST SP 800‑53, NIST Cybersecurity Framework, COBIT, ISO 27001, internal control frameworks, or AI governance principles.
• Preferred: Experience working with Internal Audit, External Audit, SOX Controllership, Information Security, or other assurance and governance functions.
• Preferred: Familiarity with tools such as SAP, Workiva, Archer, ServiceNow, Saviynt, Power BI, SharePoint, or equivalent solutions.
• Preferred: Experience supporting compliance process improvement, reporting enhancement, workflow optimization, or automation initiatives.
• Preferred: Professional certification such