Senior IT Auditor

UL Solutions; Bengaluru; On-site; INR 1,100,000 - 1,700,000; Full time

Job summary

UL Solutions Bengaluru is seeking an IT Auditor to execute risk-based IT audits and support technology governance across the organization. You will assess IT controls for design and operating effectiveness, conduct IT SOX testing, and provide advisory support for major technology initiatives.

The role involves planning and executing audits across infrastructure, applications, cybersecurity, and cloud, with a focus on risk identification, remediation tracking, and clear, actionable

Qualifications

• 5–8 years of IT auditing or related IT security experience.
• Professional certification (CISA/CISM/CISSP) or willingness to pursue.
• Experience with IT controls, COSO/COBIT, IT SOX.
• Familiarity with NIST CSF, GDPR, ISO 27001.
• Experience with data analytics and automation in risk assessment

Responsibilities

• Plan and execute IT audits across infrastructure, applications, cybersecurity, cloud, and compliance.
• Evaluate IT controls for design and operating effectiveness; identify risks and gaps.
• Perform IT SOX testing including ITGCs and automated controls.
• Provide advisory support for system implementations and major technology initiatives.
• Document work and communicate findings and recommendations to management.
• Monitor remediation and strengthen IT control environment.
• Collaborate with external auditors and participate in audits as needed.
• Travel as required; follow UL's Code of Conduct.

Skills

IT audit

Risk assessment

IT governance

Data analytics

Automation in audit

Security frameworks

Education

Bachelor's degree in information systems or related

CISA/CISM/CISSP certification or willingness to pursue

Tools

Oracle ERP

Cloud platforms

Job description

Description

Role Overview

Reporting to the Senior IT Audit Manager, the IT Auditor is responsible for executing riskbased IT audits and supporting key technology governance activities across the organization.

Key Responsibilities

• Assist in planning and executing IT audits covering infrastructure, applications, cybersecurity, cloud, and compliance areas.
• Evaluate IT controls for design and operational effectiveness, identifying risks and control gaps.
• Conduct IT SOX testing, including assessments of IT General Controls (ITGCs) and automated controls.
• Support advisory engagements for new system implementations and major technology initiatives.
• Document audit work, analyze technical findings, and develop clear, actionable recommendations.
• Communicate audit results and improvement opportunities to management and relevant stakeholders.
• Monitor remediation efforts and contribute to strengthening the overall IT control environment.

Responsibilities

Demonstrate an understanding of IT processes, controls, risk management, and related regulatory and compliance standards and frameworks.
Provide insights and recommendations for the IT and cyber risk assessment process.
Develop and execute IT audit programs to achieve audit objectives by performing audit steps, coordinating audit activity and preparing documentation.

Provide advisory services to management within cybersecurity, operational, compliance, and control domains.

Embrace, promote, and leverage new technology and analytics within audit reviews.

Prepare well-written and timely audit reports and work papers that support the audit conclusions and recommendations.

Participate in meetings with key stakeholders to achieve the audit objectives.

Execute audit assignments, including IT SOX testing.

Assists department management in planning and scheduling audits.

Cooperate with external auditors in support of the external audits.

Travels as necessary to conduct audits.

Read and follow the Underwriters Laboratories Code of Conduct and follow all physical and digital security practices.

Performs other duties as required.

Qualifications

University Degree (Equivalent to a bachelors/master's degree) in information systems or a related discipline, plus generally between 5 to 8 years of experience in information technology auditing, or relevant information security or information technology roles.

Professional designation (CISA, CISM, CISSP, etc.) or willingness to pursue certification.

Knowledge of Oracle ERP and cloud systems.

Experience working in a global internal audit function, Big 4, or regional audit firm.

Working knowledge of IT standards or controls frameworks, such as NIST CSF, NIST, GDPR, and/or ISO 27001.

IT SOX experience and familiarity with COSO/COBIT framework.

Experience with data analytics, AI & automation efforts to support risk assessment, planning, audit procedures, and continuous monitoring