Senior Information Technology Auditor

Role: Senior IT AuditorExperience: 6-10 yearsWork location: GurgaonNote: only diversity candidates can apply.Responsibilities: Operates as an IT Internal Auditor on progressively more complex audits, consultations, Sarbanes-Oxley assessments, and related projects, which may occur concurrently.Documents and evaluates the design adequacy of internal controls via a variety of methods, including flowcharting, walkthroughs, best practices benchmarking, as well as detailed test work. Plans, executes, and reports results of risk-based projects, which assess the design and effectiveness of IT infrastructure, financial, operational, and compliance processes for both manual and automated controls, which may be on first time topics within established or emerging business processes. Testing responsibilities will generally include IT General Controls, including logical access, security reviews, change management, and IT operations, IT application controls, IT report controls, and user access reviews.Documents the results of projects, including identification of internal control weaknesses and/or improvement opportunities via detailed issue logs and executive summaries.Partners with management to determine appropriate remediation steps and ensure corrective action is carried out.Facilitates work of external auditors.Provides direct assistance to external auditors (performs work on the behalf of external auditors and is supervised directly by external auditors).Supports projects from inception to completion.Skills and Abilities:Strong ability to quickly gain knowledge of changing business and system environments.Proven experience identifying problems and developing solutions (via core audit knowledge, and conceptual and analytical thinking) as well as established experience managing time, resources and projects. Advanced risk/controls, finance/accounting and/or information technology/operations knowledge.Strong oral and written communications skills, including process flowcharting.Proven track record of effectively building relationships with all levels of management in a positive and proactive manner.Demonstrated understanding of compliance standards and proven experience keeping up to date with industry and regulatory changes and professional standards.Proficient in MS Office applications including Word, Excel, PowerPoint and Visio.Robust skill in reviewing JAVA and SQL scripts.Knowledge:Knowledge and experience in testing IT General Controls across platform (Application, OS, DB) for following areas:Change managementUser access managementBackup and Recovery managementBatch job ManagementProblem and Incident managementStrong understanding of fundamental IT and Business processes, risk, controls, security controls and Risk management.Working knowledge of Hosted applications and cloud application with processes and controls understanding. Knowledge of IT Security aspects towards key areas like IT General Controls, SDLC, Database Management systems, Network Security, SOX/ICFR, COBIT, COSO, SSAE 16/18 etc.Knowledge of generally accepted audit standards and corporate internal audit standardsQualification:Combination of Graduate/Post Graduate Degree (in Computer Applications, Management Information systems, Computer Science Engineering or related field) and/or certifications (e.g. CPA, CGA, CISA, CIA, etc.) and 4+ years of related experience from Big 4 audit firm or Industry. Big 4 experience is preferred. PRB