Senior IT Internal Auditor

Kellogg Brown & Root Engineering & Construction India Pvt Ltd (KBR); Chennai; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Kellogg Brown & Root Engineering & Construction India Pvt Ltd (KBR) seeks an experienced Senior IT Auditor to lead SOX and ITGC/ITAC testing, evaluate tech risks, and drive robust audit reporting. You will mentor junior staff and collaborate with IT leadership, process owners, and external auditors.

The role requires strong analytical, problem-solving, and communication skills, with up to 25% travel both international and domestic.

Qualifications

• 5+ years of progressive IT audit or related experience.
• Strong IT risk, controls, SDLC, and cybersecurity knowledge.
• SOX 404 testing and ITGC/ITAC experience.
• Familiarity with SAP, Dynamics, Workday and cloud systems.

Responsibilities

• Execute and lead SOX and internal audit testing across ITGCs, ITACs, IPE, SDLC controls, and tech audits.
• Plan and perform audit procedures, evaluate control design and operating effectiveness, and develop risk-based conclusions.
• Develop clear, evidence-based audit documentation to support testing, observations, conclusions, and reporting requirements.
• Collaborate with business process owners, IT management, external auditors, and stakeholders to obtain evidence and discuss results.
• Evaluate technology risks related to access management, change management, cybersecurity, interfaces, data migration, cloud technologies, and system implementations.
• Identify control deficiencies, process improvement opportunities, and emerging risks; communicate observations promptly.
• Utilize data analytics, automation, and AI-enabled tools to improve audit effectiveness and efficiency.
• Leverage AI tools (Copilot, Claude, ChatGPT, etc.) to enhance planning, documentation, research, analysis, reporting, and productivity while maintaining governance and data protection.
• Stay current on evolving tech trends, cybersecurity risks, regulatory developments, and industry best practices.
• Support annual audit plan and SOX compliance program.
• Review work of less experienced auditors and provide coaching and feedback.
• Manage multiple assignments with quality and timely delivery.

Skills

Intellectual curiosity

IT risk knowledge

Governance frameworks

Audit methodologies

Interpersonal skills

Analytical thinking

Problem solving

Communication skills

Project management

Mentoring

Data analytics

Automation

AI productivity tools

Education

Bachelor's or Master’s degree in Information Systems, Computer Science, Business, Accounting, Engineering, Cybersecurity, or related field

Tools

SAP

Microsoft Dynamics

Workday

Cloud systems

Job description

Senior Internal Auditor (IT)

KBR — Delivering Solutions, Changing the World. KBR is a global leader in delivering science, technology, and engineering solutions to governments and top tier commercial clients to overcome tomorrow’s challenges, always maintaining our commitment to Zero Harm. With a full portfolio of services, proprietary technologies and expertise, our approximately 37,000 employees are ready to handle projects and missions throughout their entire lifecycle, from planning and design to sustainability and maintenance. Whether at the bottom of the ocean or in outer space, our clients trust us to deliver the impossible on a daily basis.

Audit and Advisory Services at KBR plays a trusted role in supporting the company’s governance, risk management, and control environment through independent assurance and practical advisory insights. The team partners across the business to evaluate key risks, strengthen processes, and provide objective perspectives that help KBR operate with integrity, accountability, and continuous improvement.

Summary

This role supports the company’s success by providing independent, objective assurance and advisory services across the organization. The Senior IT Auditor collaborates with IT management, business process owners, and audit stakeholders to evaluate the effectiveness of governance, risk management, and internal controls through a systematic and disciplined approach. The role requires strong analytical thinking, problem-solving, communication, project management, and organizational skills. International and domestic travel of up to 25% may be required.

Responsibilities

• Execute and lead SOX and internal audit testing across IT General Controls (ITGCs), IT Application Controls (ITACs), Information Produced by the Entity (IPE), SDLC controls, and technology-focused audits.
• Independently plan and perform audit procedures, evaluate control design and operating effectiveness, and develop risk-based conclusions.
• Develop clear, complete, and evidence-based audit documentation that supports testing procedures, observations, conclusions, and reporting requirements.
• Collaborate with business process owners, IT management, external auditors, and other stakeholders to obtain evidence and discuss audit results.
• Evaluate technology risks related to access management, change management, cybersecurity, interfaces, data migration, cloud technologies, and system implementations.
• Identify control deficiencies, process improvement opportunities, and emerging risks, and communicate observations in a timely and professional manner.
• Utilize data analytics, automation techniques, and technology-enabled audit tools to enhance audit effectiveness and efficiency.
• Leverage artificial intelligence (AI) tools such as Microsoft Copilot, Claude, ChatGPT, and similar technologies to improve audit planning, documentation, research, analysis, reporting, and productivity while adhering to company governance and data protection requirements.
• Stay current on evolving technology trends, cybersecurity risks, regulatory developments, and industry-leading audit practices.
• Support the execution of the annual audit plan and SOX compliance program.
• Review work performed by less experienced auditors and provide coaching, guidance, and constructive feedback.
• Manage multiple assignments simultaneously while ensuring quality, accuracy, and timely completion of deliverables.

Preferred Skills

• Demonstrates intellectual curiosity and a commitment to continuous learning and professional development.
• Strong knowledge of IT risks, controls, governance frameworks, and audit methodologies.
• Excellent interpersonal, analytical, problem-solving, and decision-making skills.
• Excellent verbal and written communication skills with the ability to effectively communicate with stakeholders at all levels of the organization.
• Strong project management and organizational skills with the ability to manage multiple priorities and deadlines.
• Demonstrated ability to work independently while contributing to team success and mentoring junior team members.
• Proficiency in leveraging data analytics, automation, and AI-enabled productivity tools such as Microsoft Copilot, Claude, ChatGPT, or similar technologies to improve audit effectiveness and efficiency.
• Ability to adapt to a rapidly changing technology and business environment.

Preferred Qualifications and Experience

• Five or more years of progressive IT audit, internal audit, external audit, cybersecurity, risk management, compliance, or related experience.
• Strong understanding of information systems auditing concepts and risks, including logical access, privileged access, change management, information security, system development lifecycle (SDLC), business continuity, disaster recovery, cloud technologies, and network security.
• Experience performing SOX 404 testing and evaluating ITGCs, ITACs, interfaces, automated controls, and system-generated reports.
• Familiarity with enterprise applications such as SAP, Microsoft Dynamics, Workday, and cloud-based systems.
• Bachelor's or Master’s degree in Information Systems, Computer Science, Business, Accounting, Engineering, Cybersecurity, or a related field.
• Professional certification such as CISA, CIA, CPA, CISSP, CISM, or equivalent certification preferred.
• Experience utilizing data analytics, automation, and AI-assisted technologies within audit, risk, or compliance activities is preferred.

Experience Level Senior Level