Sr IT Auditor

Randstad; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Randstad is seeking an IT Audit professional to review and test IT controls under the SOX 404 program in Hyderabad. You will develop analytics to spot weaknesses in compliance exposure and operational processes, and partner with Internal Audit on risk-based programs.

The role requires experience in IT audit, cybersecurity risk evaluation, and familiarity with COSO, COBIT, NIST, GDPR, and related frameworks. A focus on data analytics tools and governance matters is essential.

Qualifications

• Progressive experience in IT audit, information security, or technology risk.
• Experience auditing IT infrastructure, cybersecurity risks, and operating systems.
• Knowledge of SOX, COSO, COBIT, NIST, GDPR, and related governance frameworks.
• Familiarity with IT compliance programs, control testing, and internal control frameworks.

Responsibilities

• Review IT processes and controls within the SOX 404 program and assess control effectiveness.
• Develop and implement continuous auditing analytics to identify weaknesses in compliance-exposures and processes.
• Partner with Internal Audit to develop risk-based audit programs and deliver departmental outputs.
• Contribute to IT operational audits per IIA standards and internal policies.
• Implement audit sections with minimal supervision while ensuring quality and compliance.
• Complete SOX 404 IT compliance reviews and testing of controls assigned by management.
• Provide internal control guidance to business functions on governance and controls.
• Identify opportunities to enhance operational efficiencies and support audit recommendations to Senior Management.

Skills

IT audit

SOX 404

COSO

COBIT

NIST

Data analytics

CISA

CISM

CISSP

Tools

Dataiku

Alteryx

Job description

Role & responsibilities

• Review IT processes and controls within scope of the company's SOX 404 program and assess control effectiveness.
• Develop and implement continuous auditing analytics to identify weaknesses in compliance-related exposures, operational processes, and internal controls.
• Partner with Internal Audit colleagues to develop risk-based audit programs and support departmental deliverables.
• Contribute to IT operational audits in accordance with Institute of Internal Auditors (IIA) standards, internal policies, and procedures.
• Implement assigned audit sections independently with minimal supervision while maintaining audit quality and compliance.
• Complete SOX 404 IT compliance reviews and testing of controls assigned by Internal Audit management.
• Provide internal control expertise to business functions and departments seeking guidance on governance and control practices.
• Find opportunities to enhance operational efficiencies and support the preparation of audit recommendations and reports for Senior Management and the Audit Committee.

Preferred candidate profile

• Minimum 3 years of progressive experience in IT audit, information security, or technology risk.
• Experience auditing and evaluating IT infrastructure, cybersecurity risks and controls, and operating systems.
• Strong understanding of SOX, Committee of Sponsoring Organizations (COSO), Control Objectives for Information and Related Technologies (COBIT), National Institute of Standards and Technology (NIST), Good Practice (GxP), General Data Protection Regulation (GDPR), and related governance and regulatory frameworks.
• Knowledge of IT compliance programs, process reviews, testing of controls, and internal control frameworks.
• Experience using data analytics tools such as Dataiku, Alteryx, or similar technologies.
• Understanding of artificial intelligence concepts, associated risks including model governance, data quality, access, ethical use, and controls relevant to AI-enabled processes.
• Ability to interact autonomously with middle management and provide practical guidance on risk, governance, and control matters.
• Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), and/or Certified Information Systems Security Professional (CISSP) preferred.
• Pharmaceutical, life sciences, or other regulated industry experience preferred.
• Big Four or public accounting experience preferred.