Information Technology Auditor

Location

Pune | India

Job description

Compliance Information Systems Auditor

Job Highlights

Business Transformation Services vertical is delighted to share the opening available with them for this position. We are looking to hire Hands-on experience in the multiple areas of IT audits, SOX / ICFR / IFC / SAS 70 / SSAE / SOC, IT Financial Audit and Business Automated Controls, IT Risk consulting

Job description

Roles and Responsibilities

• Perform testing of general and automated application controls relevant for Sarbanes-Oxley compliance.
• Prepare appropriate documentation (e.g. narratives, flowchart, control matrices, segregation of duties analyses, audit reports, etc.) in support of all assurance and consulting work performed.
• Comply with auditing standards, follow good business practices, and efficiently utilize audit resources.
• Test and identify network and system vulnerabilities and create counteractive strategies to protect the network.
• Troubleshoot security and network problems.
• Participate in the change management process.
• Development of an annual risk-based IT audit plan and execute assigned components thereof.
• Recommend changes to controls, processes, and procedures to ensure data integrity and security and improve operational efficiency and appropriate suggestions to achieve the improvements.
• Incorporate the use of computer-assisted audit tools and techniques when deemed cost-effective.
• Conduct efficient and effective IT audit procedures.
• Communicate complex technical issues in simplified terms to the relevant staff.
• Perform regular audit testing and provide recommendations.
• Review, evaluate, and test application controls.
• Provide recommendations and guidance on identified security and control risks.
• Develop a strong understanding of business and system processes.

 Other projects and duties as assigned.

Desired Candidate Profile

Must Have

• A degree in information technology/computer information systems or related.
• Certified Information Systems Auditor (CISA) (essential).
• 2 years of work experience in ITGC, application control testing in professional firms

· Financial and IT application experience (SAP, Oracle, QAD, MFGPro, Peoplesoft, and Hyperion)

· Have worked for ICFR/IFC clients Is Aware of Documentation methodology adopted by ICAI/ISA and similar bodies

· Experience with creating Information Security Framework and its related policies and procedures

· Excellent understanding of Firewalls, VPN, Data Loss Prevention, IDS/IPS, Web-Proxy, and Security Audits

Good to Have

• Clear understanding of IT audit methodologies.
• Good understanding of major ERPs (SAP, Oracle, NetSuite, Dynamics)
• Ability to work under pressure in a fast-paced environment.
• Strong attention to detail with an analytical mind and outstanding problem-solving skills.
• Great awareness of cybersecurity trends and hacking techniques.

Job tags

Salary