A leading insurance firm in Mumbai is looking for an IT Auditor to coordinate audits, assess risk, and ensure compliance with standards such as ISO and SOX. The ideal candidate will have a background in Computer Science or a relevant MBA, along with knowledge of software development life cycle and IT controls. Responsibilities include communicating with process owners about risks, leading audit planning, and interacting with external auditors. This position offers opportunities to enhance compliance knowledge while working in a dynamic environment.
Qualifications
Certification of CA, CPA or CIA or actively working towards similar certifications is advantageous.
Demonstrated in-depth knowledge of best practices and controls in Information Security areas.
Ability to understand complex technologies and regulations.
Responsibilities
Coordinate with business and IT process owners to conduct controls assessments.
Communicate issues to process owners and ensure understanding of risks.
Lead ISO, SOX and ICoFR audit planning and documentation.
Skills
Knowledge of SDLC (Software Development Life Cycle)
Risk management
Cybersecurity
Compliance management
Education
BE / B.Tech Computer Science
MBA – Systems
Tools
ISO
SOX
COBIT
Job description
Coordinate withbusiness and IT process owners to initiate, scope, plan, and conduct periodiccontrols assessments to identify areas of risk by evaluating the design andoperating effectiveness of Information Technology General Controls (ITGC) overapplications, operating systems, and databases as well as the networkinfrastructure including cybersecurity controls
Planning,testing, documentation and reporting
Communicateissues to process owners, ensuring their understanding of associated risks andthe actions needed to remediate those risks
Prepare reportsbased on the adequacy and effectiveness of controls evaluated/tested
Track andMonitors open issues and conductsfollow-up to evaluate the adequacy of remediation efforts
Communicate withexternal auditors and support their initiatives effectively from an IT auditstandpoint.
Lead ISO, SOX and ICoFR audit planning, fieldwork(testing and documentation), and reporting
Interact withthe IT application owner and provide assistance as needed during the SOXcontrol testing processes, including attending walkthrough meetings andperforming testing on their behalf
Aware about ITControls and related compliances
Evaluatecompliance with Company policies and procedures and regulatory standards
Buildcollaborative working relationships with internal stakeholders (appropriatelevels of management
Education
BE / B.Tech Computer Science / MBA – Systems
Competencies (Knowledge & Skills)
Knowledge ofSDLC (Software Development Life Cycle)
Certification ofCA, CPA or CIA (or actively working towards) or other similar certificationswould be an added advantage.
Demonstratedin-depth knowledge of concepts, best practices and controls in a breadth ofInformation Security areas/domains. These include governance & riskmanagement, access control, cybersecurity, physical security, securityarchitecture and design, business continuity/disaster recovery, networksecurity, application & operations security and compliance/incidentmanagement.
Demonstratedability to understand complex technologies, business processes, regulations andemerging risks.
Strongunderstanding of ISO, SOX and IT frameworks including COSO and COBIT.