IT Risk Auditor

Roles and Responsibilities

Conduct tests of design and operating effectiveness for IT general controls and IT dependent controls. Business control knowledge is a plus.

Participate in walkthrough meetings and conduct interviews with control executers / owners for evaluation of control design.

Prepare comprehensive, accurate, and high-quality audit documentation evidencing procedures performed and conclusion reached.

Work collaboratively with IT and business teams to provide guidance and consultation on controls and risk management.

Qualifications :

Bachelor's degree in Information Systems, Computer Science, Accounting or related field.

At least 3-5 years of experience in IT audit, internal controls, or risk management, with a focus on SOX compliance.

Experience working in a public accounting firm is preferred.

Strong knowledge of control frameworks such as COSO, COBIT, or ITIL.

Strong understanding of IT processes such as access management, change management, SDLC, Computer operations.

Experience in auditing ERP applications such as SAP, Non-ERP applications such as Salesforce, Workday and various infrastructure platforms such as Unix, Linux, Windows, SQL.

Strong verbal and written communication skills

Professional certification such as CISA or equivalent is a plus.

Good analytical and critical thinking skills

Ability to work both independently and as a team member.