IT Internal Auditor

• Lead and execute technology risk, internal audit, and SOX initiatives focused on ITGCs, ITACs, and technology controls supporting financial reporting
• Perform end-to-end SOX testing, including walkthroughs, risk assessment, Test of Design, Test of Operating Effectiveness, evidence evaluation, documentation, and control-deficiency assessment
• Evaluate and test ITGCs covering access management, privileged access, access reviews, segregation of duties, change management, computer operations, security configurations, and SDLC
• Evaluate and test ITACs, configurable controls, system-generated reports, IPE, interfaces, and technology-dependent controls supporting ICFR
• Perform IT risk assessments across financially relevant applications and technology environments, including applications, databases, operating systems, cloud solutions, and integrations
• Develop and enhance IT risk and control matrices, control descriptions, testing procedures, documentation, and evidence standards for SOX readiness
• Identify control deficiencies, perform root-cause and risk assessments, and partner with control owners on remediation or compensating controls
• Perform control benchmarking and rationalization to identify gaps, redundant controls, and opportunities to strengthen or streamline the IT control environment
• Partner with IT, Information Security, Finance, Accounting, application owners, and business process owners on control design, testing, remediation, and implementation
• Coordinate with internal and external auditors on testing, evidence, deficiencies, remediation, and SOX deliverables
• Independently manage multiple audit and controls assignments from planning and scoping through testing, reporting, remediation, and closure

• Bachelor’s degree in Accounting, Finance, Management Information Systems, Computer Science, Information Technology, or a related field, or equivalent relevant education and work experience
• 8+ years of relevant experience in IT Audit, Internal Audit, External Audit, Technology Risk, Risk Advisory, SOX Advisory, or a related assurance function
• Prior experience at a Big 4 public accounting firm
• Significant hands-on experience with SOX compliance, SOX readiness, ITGCs, ITACs, and technology controls supporting ICFR
• Strong understanding of the COSO Internal Control Framework and its practical application
• Strong experience performing technology risk assessments and evaluating controls across applications and supporting IT environments
• Hands-on experience evaluating ITGC design and operating effectiveness, including Change Management, Access, Security, Computer Operations, SDLC, Test of Design, Test of Operating Effectiveness, authentication, and security configurations
• Experience evaluating IT Automated/Application Controls within ERP environments such as SAP ECC and SAP S/4HANA
• Experience evaluating system-generated reports, IPE, interfaces, automated data transfers, and technology-dependent controls relevant to financial reporting
• Experience evaluating technology risks and controls associated with applications, operating systems, and databases
• Experience developing and reviewing IT process narratives, flowcharts, risk and control matrices, control descriptions, walkthrough documentation, test procedures, workpapers, and supporting evidence
• Strong understanding of the relationship between ITGCs, ITACs, business process controls, financial reporting risks, and financial statement assertions
• Professional certification such as CISA, CIA, CPA, CA, CISSP, or equivalent is preferred

• Remote opportunity
• 1 PM to 11 PM IST work timing