ITGC Reviews, IT Internal Audits, Controls Testing, Compliance Reviews, ISO 27001 Reviews, HIPAA/HITRUSTReviews

Position title

Associate

Experience:

2+years

Location

Bangalore

Department

Risk Consulting

Purpose of the JobRole

Perform IT Assessment Reviews whichincludesIT General Controls, Internal Audits, Controls Testing, Compliance Reviews (such as ISO 27001, HIPAA, HITRUST etc.)

The person we are looking for:

• Demonstrate a strong understanding of IT General Controls (ITGCs), including Change Management, User Access Management, IT Operations, Backup and Recovery, and their relevance to statutory and SOX-aligned audits.

• Possess solid knowledge of Third-Party Risk Management (TPRM) and its impact on financial reporting and regulatory compliance.

• Apply implementation and assessment experience across leading industry standards and frameworks such as ISO 27001, HIPAA, HITRUST, NIST, and similar regulatory requirements.

• Understand and apply IT Risk Assessment methodologies, including risk identification, control evaluation, and testing across the end-to-end IT audit lifecycle.

• Conduct client stakeholder interviews and walkthroughs, document processes, and develop comprehensive audit and assessment artifacts.

• Demonstrate a clear understanding of the complete assessment lifecycle, from planning and scoping through fieldwork, reporting, and final deliverables.

• Lead and manage the execution of IT audits and assessments, including supervision and review of team members’ work to ensure adherence to audit methodology, quality standards, and statutory requirements.

• Collaborate with cross-functional stakeholders to address complex audit and control issues, and develop practical, risk-based recommendations.

• Monitor audit progress, manage risks and dependencies, and ensure timely communication with key stakeholders regarding status, issues, and outcomes.

• Present clear, concise audit findings and recommendations that address root causes, assess business and financial reporting impact, and support management remediation.

• Manage approved audit budgets and resource allocation, including task assignment, performance review, and quality assurance of team deliverables.

• Coach and mentor team members on audit methodologies, tools, and best practices, fostering continuous improvement and professional development.

• Demonstrate strong people management and leadership capabilities, with the ability to think creatively and solve problems beyond standard audit approaches.

• Exhibit excellent verbal and written communication skills, with the ability to translate complex IT and data security concepts into clear, business-focused language.

• Deliver effective presentations and confidently communicate audit results, recommendations, and viewpoints to senior management and governance committees.

Education:

• Minimum Qualification:CA/BE/ BTech

• Postgraduatesin any stream would be preferred (not mandatory)

• Prior Big 4 experience would be an added advantage

• Experience inIT Risk Advisory/ Assurancefor varied industry segments preferred

• Hands-on experience in statutory audit(minimum 3-4 years), including understanding of audit processes and controls, preferred

• Excellent communication skills - both written and oral

Certifications:

• CIACISACISMwill be added advantage