Sr. Analyst I Audit & Compliance

Shashwath Solution; Pune District; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Shashwath Solution in Pune, India seeks an experienced IT Audit professional to lead audits, assess controls, and provide risk advisory across IT environments.

You will oversee ITGCs, ERP and cloud audits, and collaborate with InfoSec and external auditors. Strong knowledge of NIST, COBIT, and ISO 27001 is essential, with CISA mandatory and CISSP preferred.

Qualifications

• 5+ years of IT Audit experience within Big 4 firms (Deloitte, PwC, EY, KPMG).
• CISA certification required; CISSP preferred.
• Deep understanding of COBIT, NIST, ISO 27001.

Responsibilities

• Lead ITGC audits, controls testing, SOC1/SOC2, and cybersecurity assessments.
• Conduct risk-based IT audits across infra, cloud, and ERP landscapes (SAP, Oracle, etc).
• Evaluate and validate control design and operational effectiveness across IT environments.
• Provide advisory on IT risk, cybersecurity, compliance (SOX, GDPR), and IT governance best practices.
• Collaborate with cross-functional teams including InfoSec, Internal Audit, and External Audit on integrated audits.
• Assist clients in designing and implementing controls aligned with NIST, COBIT, ISO 27001.
• Draft clear audit reports, risk findings, and remediation plans for executives.
• Maintain knowledge of regulatory/compliance requirements impacting clients' technology landscape.

Skills

IT Audit

ITGC testing

Risk assessment

Stakeholder management

Regulatory compliance

Documentation

Engagement management

Cloud & ERP audits

Education

Bachelor's degree in Information Systems/Computer Science

Tools

SAP

Oracle

AWS

Azure

GCP

Job description

Key Responsibilities:

• Execute and lead ITGC audits, application controls testing, SOC1/SOC2 reviews, and cybersecurity assessments
• Perform risk-based IT audits and assessments across diverse infrastructure, cloud, and ERP landscapes (SAP, Oracle, etc)
• Evaluate and validate control design and operational effectiveness across IT environments
• Provide advisory services on IT risk, cybersecurity, compliance (eg, SOX, GDPR), and IT governance best practices
• Collaborate with cross-functional teams including InfoSec, Internal Audit, and External Audit teams on integrated audits
• Assist clients in designing and implementing controls in line with leading frameworks such as NIST, COBIT, ISO 27001
• Draft clear and concise audit reports, risk findings, and remediation plans for executive stakeholders
• Maintain working knowledge of regulatory and compliance requirements impacting clients' technology landscape

Required Skills & Experience:

• 5+ years of relevant IT Audit experience, exclusively within Big 4 firms (eg, Deloitte, PwC, EY, KPMG)
• Strong hands-on experience in conducting ITGCs, automated controls testing, and IT risk assessments
• Professional certification: CISA (required) or CISSP (preferred/optional)
• Deep understanding of risk and control frameworks including COBIT, NIST, ISO 27001
• Exposure to ERP audits (SAP, Oracle), cloud platforms (AWS, Azure, GCP), and identity/access reviews
• Strong documentation, communication, and stakeholder engagement skills
• Ability to manage multiple engagements and deliver high-quality results under tight deadlines

Preferred Qualifications:

• Experience working on SOC 1 SOC 2 reports, IT Risk Advisory, or Cybersecurity consulting projects
• Working knowledge of SOX IT compliance and regulatory environments
• Bachelors degree in Information Systems, Computer Science, or related discipline