Job Description

We are looking for an experienced and detail-oriented IT Audit - Assistant Manager to support the planning and execution of IT audit engagements across a range of systems, platforms, and business processes. This role plays a key part in assessing technology-related risks, evaluating internal controls, and supporting overall compliance and risk mitigation efforts.

The ideal candidate will bring strong experience in IT general controls (ITGC), application controls, cybersecurity assessments, and risk-based auditing, with the ability to supervise junior staff and communicate effectively with stakeholders.

Key Responsibilities:

• Assist in the planning, scoping, and delivery of IT audit engagements, ensuring adherence to internal methodologies and professional standards.
• Evaluate IT general controls (access, change management, operations) and application controls across various systems and platforms.
• Perform risk assessments and support audits of cloud environments, cybersecurity frameworks, and infrastructure controls.
• Lead and supervise junior auditors during fieldwork, providing guidance and review of working papers.
• Prepare audit reports and present findings, recommendations, and remediation strategies to internal stakeholders or clients.
• Collaborate with cross-functional teams to identify and resolve control gaps and improve audit readiness.
• Support audit testing for SOX or other regulatory compliance requirements, including evidence collection and documentation.
• Stay current with emerging technologies, cybersecurity trends, and IT risk management practices.

Qualifications:

• Bachelors degree in Information Systems, Computer Science, Accounting, or related field.
• 5-7 years of experience in IT audit, technology risk, or related assurance roles.
• Strong understanding of ITGCs, application controls, cybersecurity frameworks (e.g., NIST, ISO 27001), and regulatory standards (e.g., SOX, GDPR).
• Experience with audit tools and ERP systems (e.g., SAP, Oracle, Workday) is a plus.
• Preferred certifications: CISA, CRISC, or other IT audit or security-related credentials.
• Strong analytical and problem-solving skills; detail-oriented with sound professional judgment.
• Excellent written and verbal communication skills.
• Ability to manage multiple projects, work independently, and lead audit teams in a dynamic environment.