Sr. Analyst I Audit & Compliance

Shashwath Solution; Pune District; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Shashwath Solution in Pune, India, seeks an experienced IT Audit professional to lead ITGC audits, controls testing, and SOC1/SOC2 reviews across SAP, Oracle, and cloud environments. The role emphasizes risk assessment, advisory on IT risk, and governance best practices.

You will collaborate with InfoSec and Internal/External Audit teams to design and implement controls per COBIT, NIST, ISO 27001 and deliver concise reports with remediation plans to executives.

Qualifications

• 5+ years IT Audit experience in Big 4 environments
• Strong ITGC and automated controls testing experience
• CISA is required; CISSP preferred
• Knowledge of COBIT, NIST, ISO 27001
• ERP (SAP, Oracle), cloud (AWS/Azure/GCP) exposure
• Excellent documentation and stakeholder communication
• Ability to manage multiple engagements under deadlines

Responsibilities

• Execute and lead ITGC audits, controls testing, SOC1/SOC2 reviews, and cybersecurity assessments
• Perform risk-based IT audits across infrastructure, cloud, and ERP landscapes (SAP, Oracle)
• Evaluate and validate control design and operational effectiveness across IT environments
• Provide advisory on IT risk, cybersecurity, compliance (SOX, GDPR) and governance best practices
• Collaborate with InfoSec, Internal Audit, and External Audit on integrated audits
• Assist clients in designing and implementing controls per frameworks such as NIST, COBIT, ISO 27001
• Draft audit reports, risk findings, and remediation plans for executive stakeholders
• Maintain knowledge of regulatory and compliance requirements impacting clients' technology landscape

Skills

IT Audit

ITGC testing

Risk assessment

Stakeholder engagement

Documentation

Education

Bachelor's degree in Information Systems/Computer Science

CISA certification

CISSP (preferred)

Tools

COBIT

NIST

ISO 27001

Job description

Key Responsibilities

• Execute and lead ITGC audits, application controls testing, SOC1/SOC2 reviews, and cybersecurity assessments
• Perform risk-based IT audits and assessments across diverse infrastructure, cloud, and ERP landscapes (SAP, Oracle, etc)
• Evaluate and validate control design and operational effectiveness across IT environments
• Provide advisory services on IT risk, cybersecurity, compliance (eg, SOX, GDPR), and IT governance best practices
• Collaborate with cross-functional teams including InfoSec, Internal Audit, and External Audit teams on integrated audits
• Assist clients in designing and implementing controls in line with leading frameworks such as NIST, COBIT, ISO 27001
• Draft clear and concise audit reports, risk findings, and remediation plans for executive stakeholders
• Maintain working knowledge of regulatory and compliance requirements impacting clients' technology landscape

Required Skills & Experience

• 5+ years of relevant IT Audit experience, exclusively within Big 4 firms (eg, Deloitte, PwC, EY, KPMG)
• Strong hands-on experience in conducting ITGCs, automated controls testing, and IT risk assessments
• Professional certification: CISA (required) or CISSP (preferred/optional)
• Deep understanding of risk and control frameworks including COBIT, NIST, ISO 27001
• Exposure to ERP audits (SAP, Oracle), cloud platforms (AWS, Azure, GCP), and identity/access reviews
• Strong documentation, communication, and stakeholder engagement skills
• Ability to manage multiple engagements and deliver high-quality results under tight deadlines

Preferred Qualifications

• Experience working on SOC 1 SOC 2 reports, IT Risk Advisory, or Cybersecurity consulting projects
• Working knowledge of SOX IT compliance and regulatory environments
• Bachelors degree in Information Systems, Computer Science, or related discipline