Sr. Analyst I Audit & Compliance

Shashwath Solution; Dadri; On-site; INR 2,400,000 - 3,600,000; Full time

Job summary

Shashwath Solution is seeking an experienced IT Audit professional to lead ITGCs, control testing, and cybersecurity assessments for diverse client environments in India. You will deliver risk-based audits across on-premises, cloud, and ERP landscapes, while advising on governance, SOX-like controls, and regulatory alignment.

The role requires 5+ years in Big 4 IT audit, CISA certification, and strong communication with executive stakeholders.

Qualifications

• 5+ years of IT audit experience, exclusively in Big 4 firms (e.g., Deloitte, PwC, EY, KPMG)
• Hands-on experience in ITGCs, automated controls testing, and IT risk assessments
• CISA required or CISSP preferred
• Strong understanding of COBIT, NIST, ISO 27001
• Exposure to ERP audits (SAP, Oracle), cloud platforms (AWS, Azure, GCP)
• Excellent documentation, communication, and stakeholder engagement skills
• Ability to manage multiple engagements and meet tight deadlines

Responsibilities

• Execute and lead ITGC audits, controls testing, SOC1/SOC2 reviews, and cybersecurity assessments
• Perform risk-based IT audits across diverse infrastructure, cloud, and ERP landscapes
• Evaluate control design and operating effectiveness across IT environments
• Provide advisory services on IT risk, cybersecurity, and IT governance best practices
• Collaborate with InfoSec, Internal Audit, and External Audit teams on integrated audits
• Advise on controls per frameworks like NIST, COBIT, ISO 27001
• Draft audit reports, risk findings, and remediation plans for executives
• Maintain knowledge of regulatory and compliance requirements impacting clients' technology landscape

Skills

ITGC audits

IT risk assessments

Controls testing

Cybersecurity

Stakeholder engagement

Education

Bachelor's degree in Information Systems/Computer Science

Tools

COBIT

NIST

ISO 27001

SAP

Oracle

Job description

Key Responsibilities

• Execute and lead ITGC audits, application controls testing, SOC1/SOC2 reviews, and cybersecurity assessments
• Perform risk-based IT audits and assessments across diverse infrastructure, cloud, and ERP landscapes (SAP, Oracle, etc)
• Evaluate and validate control design and operational effectiveness across IT environments
• Provide advisory services on IT risk, cybersecurity, compliance (eg, SOX, GDPR), and IT governance best practices
• Collaborate with cross-functional teams including InfoSec, Internal Audit, and External Audit teams on integrated audits
• Assist clients in designing and implementing controls in line with leading frameworks such as NIST, COBIT, ISO 27001
• Draft clear and concise audit reports, risk findings, and remediation plans for executive stakeholders
• Maintain working knowledge of regulatory and compliance requirements impacting clients' technology landscape

Required Skills & Experience

• 5+ years of relevant IT Audit experience, exclusively within Big 4 firms (eg, Deloitte, PwC, EY, KPMG)
• Strong hands-on experience in conducting ITGCs, automated controls testing, and IT risk assessments
• Professional certification: CISA (required) or CISSP (preferred/optional)
• Deep understanding of risk and control frameworks including COBIT, NIST, ISO 27001
• Exposure to ERP audits (SAP, Oracle), cloud platforms (AWS, Azure, GCP), and identity/access reviews
• Strong documentation, communication, and stakeholder engagement skills
• Ability to manage multiple engagements and deliver high-quality results under tight deadlines

Preferred Qualifications

• Experience working on SOC 1 SOC 2 reports, IT Risk Advisory, or Cybersecurity consulting projects
• Working knowledge of SOX IT compliance and regulatory environments
• Bachelors degree in Information Systems, Computer Science, or related discipline