Senior IT Auditor

Moody's Investors Service; Gurugram District, Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Moody's Investors Service is seeking an experienced IT audit professional to join the Internal Audit team in enhancing governance, risk management, and controls across technology platforms.

The role focuses on evaluating ITGCs, SDLC processes, access controls, and data protection while leveraging analytics and automation to improve audit coverage and efficiency. Strong communication with stakeholders is essential.

Qualifications

• Minimum 4 years of experience in IT audit, technology risk, controls, or related assurance functions.
• Strong understanding of ITGCs including SDLC, Agile, DevOps, and DevSecOps.
• Knowledge of access management, cybersecurity, data protection risks, and related control frameworks.
• Excellent analytical, problem-solving, and stakeholder communication skills, with the ability to translate technical findings into business risk insights.
• Proficiency in Microsoft Office and familiarity with GenAI and AI tools such as Microsoft Copilot, Claude, or similar technologies.
• Experience using data analytics techniques, including Excel-based analysis (pivot tables, lookups, reconciliations) with large data sets and automation interest.

Responsibilities

• Lead and execute technology-focused audit engagements, assessing risks and evaluating controls.
• Support all phases of the audit lifecycle, including planning, risk assessment, control testing, issue validation, reporting, and follow-up.
• Evaluate technology, cybersecurity, data security, and access management controls across systems, applications, and infrastructure.
• Partner with business and technology stakeholders to challenge control design and develop practical, risk-based recommendations.
• Apply data analytics, automation, and technology-enabled auditing techniques to improve audit coverage, efficiency, and insight generation.
• Translate technical audit findings into clear business risks and actionable recommendations for senior leadership.
• Contribute to innovation within Internal Audit by supporting the adoption of analytics, automation, AI, and continuous monitoring capabilities.
• Maintain compliance with Internal Audit standards, methodologies, professional ethics, and regulatory requirements.

Skills

Analytical thinking

Stakeholder communication

Data analytics

Problem solving

GenAI tools familiarity

Education

Bachelor’s degree in Cybersecurity, CS, CE, IT

CISA/CISSP/CIA or progress toward one

Tools

Microsoft Copilot

Claude

Excel (Pivot, VLOOKUP)

Job description

At Moody's, we unite the brightest minds to turn today’s risks into tomorrow’s opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are—with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways. Moody’s is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment, we’re advancing AI to move from insight to action—enabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence.

Skills and Competencies

• Minimum 4 years of experience in IT audit, technology risk, controls, or related assurance functions
• Strong understanding of Application Controls and IT General Controls (ITGCs), including controls across the Software Development Lifecycle (SDLC), Agile, DevOps, and DevSecOps environments
• Knowledge of access management, cybersecurity, data protection risks, and associated control frameworks
• Excellent analytical, problem-solving, and stakeholder communication skills, with the ability to translate technical findings into business risk insights
• Proficiency in Microsoft Office applications and familiarity with GenAI and Agentic AI tools such as Microsoft Copilot, Claude, or similar technologies
• Experience using data analytics techniques, including Excel-based analysis (pivot tables, lookups, reconciliations, and large data sets), with a strong interest in leveraging automation and emerging technologies to improve audit effectiveness

Education

• Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, or a related field
• Professional certifications such as CISA, CISSP, CIA, or progress toward obtaining one are preferred

Responsibilities

• Lead and execute technology-focused audit engagements with limited supervision, assessing risks, evaluating controls, and identifying opportunities to strengthen governance and operational effectiveness
• Support all phases of the audit lifecycle, including planning, risk assessment, control testing, issue validation, reporting, and follow-up activities
• Evaluate technology, cybersecurity, data security, and access management controls across a broad range of systems, applications, and infrastructure environments
• Partner with business and technology stakeholders to challenge control design, communicate audit observations, and develop practical, risk-based recommendations
• Apply data analytics, automation, and technology-enabled auditing techniques to improve audit coverage, efficiency, and insight generation
• Translate technical audit findings into clear business risks and actionable recommendations for senior leadership and governance committees
• Contribute to innovation within Internal Audit by supporting the adoption of analytics, automation, AI, and continuous monitoring capabilities
• Maintain compliance with Internal Audit standards, methodologies, professional ethics, and regulatory requirements while fostering a culture of integrity and continuous improvement

About the Team

The Internal Audit team provides independent assurance that Moody’s technology, risk management, and control environments operate effectively to support the organization’s strategic objectives. The team works across a diverse range of businesses, technologies, and emerging risks, partnering with stakeholders to enhance governance, strengthen controls, and drive continuous improvement. As Moody’s accelerates its use of AI, automation, and advanced analytics, the team plays a key role in assessing risk, enabling innovation, and helping the organization navigate an increasingly complex technology landscape with confidence

Moody’s is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender expression, gender identity or any other characteristic protected by law.

Candidates for Moody's Corporation may be asked to disclose securities holdings pursuant to Moody’s Policy for Securities Trading and the requirements of the position. Employment is contingent upon compliance with the Policy, including remediation of positions in those holdings as necessary.