5+ IT audit Jobs in India

Designation: Financial Manager 

• Exp: 8-10 Years
• CTC: up tp 30 LPA

Regulatory, Contractual & US Healthcare compliances:

• Ensure compliance to HIPAA & Hi-Tech requirements framework through audits, policy updates, external certifications, internal awareness, etc.
• Periodically update policies and document new procedures / guidelines to update the compliance plan in line with operating changes.
• Work with legal & training teams to drive the compliance programs for awareness and update of important US healthcare regulations as applicable to business.
• Work with VP, Finance, HR & Legal team across all locations to consolidate & present the compliance to regulatory requirements periodically to LT and Audit Committee.
• Update the customer contractual checklists and monitor compliance to same through periodic reviews
• Train the team on compliance programs to deliver standard compliance experience across the locations.
• Enterprise risk management (ERM), Management reviews, Investigations & Internal Audits

Cab Boundary line- 

• Navi Mumbai to Ghatkopar
• Navi Mumbai to Panvel (Ulwe not covered)
• Navi Mumbai to Kalyan

• Guiding team member for handling technical challenges
• Conducting training sessions
• Handling user issues and providing corrective solution
• Fixing of the vulnerabilities and Upgrades of new stable version
• Sustenance and maintenance of Archer tool
• Good scripting knowledge

• Certified RSA Archer Professional, Internal Audit & Controls, Risk (Threat), ISO 27001
• Minimum of 5 years’ experience in the respective field
• Experience of managing a GRC Team
• Strong experience of implementation, commissioning and enhancement of modules of GRC Product
• Strong Understanding of Process workflows, Identifying the manual workflows
• Expertise in configuring GRC tool (Archer)
• Experience with all SDLC activities related to GRC program implementation

Following are some of our key solution offerings · Risk Based IT Internal Audit · IT SOX 404 Controls Testing, Quality Assurance · IT Attestation (SOC1/SOC2/ISAE 3402, ISAE 3000 etc.) · Internal Financial Controls related to IT General Controls · IT General Controls as part of Financial Statements Audits · IT Risk & Control Self-Assessment · Business Systems Controls / IT Application Controls · Auditing Emerging Technologies such as Cloud, Intelligent Automation etc. Position: Associate Consultants/ Consultants/ Assistant Managers Location: Bengaluru .

Responsibilities

Industry Experience: · Plan and execute the day-to-day activities of IT audit engagements for clients, including system development, package implementation, SSAE 16 readiness assessments, and/or platform reviews within multiple industries · Evaluate the design and effectiveness of technology controls throughout the business cycle · Identify and communicate IT audit findings to senior management and clients · Help identify performance improvement opportunities for assigned clients Additional Responsibilities for Assistant Managers: · Supervise associates and interns on engagements · Serve as a liaison between financial services clients and upper management

Qualifications

· Engineering / MBAs with atleast 3 years of experience · Preference would be given to significant experience in relevant technical knowledge: (a) financial statement – IT Audits; (b) SSAE 18/ ISAE 3402 audits; (c) IT SOX engagements (d) Emerging Technology Risks

· Certified Information Systems Auditor (CISA), COBIT Foundation, ITIL Foundation, CISSP, CRISC would be an added advantage · Possesses extensive experience in at least two of the key solutions of IT Audit & Assurance · Prior experience in client facing / account management roles · Possess strong domain knowledge, understanding of IT processes supporting business and possible risks in operations of at least two industry sectors · Strong analytical and problem solving skills · Strong written and verbal communication skills · Ability to work well in teams · Ability to work under pressure – stringent deadlines and tough client conditions which may demand extended working hours · Willingness to travel within India or abroad for continuous long periods of time · Demonstrate integrity, values, principles, and work ethic and lead by example

What The Role Is

We are looking for an GRC Operations Officer based in Chennai. This is a new role within the growing IT Compliance function, where you will be responsible for handling audits, implementation of information security policies etc,. The successful candidate will be comfortable working with the team on implementing frameworks and providing support for internal and external stakeholders. Reporting to the IT Compliance Officer for our Chennai team, this role is integral to the successful growth of the team as well as wider company performance.  

What You’ll Do

• Contribute and assist with continuous improvement of company policies, practices, and procedures
• Review, modify and maintain existing practices and policies to reflect our operations and values within specific industry-standard frameworks like ISO and NIST, among others
• Provide support for internal and third-party audits
• Respond to due diligence and TPRM requests from customers and other interested parties.
• Support internal staff with GRC-related questions and topics
• Develop, maintain and execute awareness programs
• Be a local representative of the company’s GRC group and manage the physical security requirements for the location
• Work independently and prioritize multiple tasks and adapt to needed changes
• Effectively communicate risks to diverse audiences, both in writing and verbally
• Apply a risk-based approach to planning, executing, and reporting on audit engagements and auditing process;

What You’ll Bring

• 2-5 years IT Security, IT risk, IT auditing, and/or IT Compliance experience within a technology company, accounting firm,  or others.
• Bachelor's degree or equivalent work experience working in compliance/GRC team.
• Exceptional organisational skills and attention to details.
• Knowledge of applicable domestic and internationally recognized information security management, governance, and compliance principles, practices, laws, rules and regulations;
• Information systems auditing, monitoring, controlling, and assessment process.

Perks & Benefits: 

• Competitive base salary
• Equity - every employee is a stakeholder in our enormous upside
• A tech-first company culture driven by entrepreneurial thinking and talent
• A great team working in unison towards the same mission
• Transparency is what our product is built on—and so is our culture
• Generous health insurance benefits for employees and their dependents
• Parental leave.
• Flexible work schedule and work-from-home options
• Flexible PTO

Position: IT Auditor

Experience: 4-12 Years

Location: Pune

Key Skills Required:

CISA, CISSP, CISM, IT Audit, Technology Audit, IT Infrastructure Audit, Application Security Audit, Information Security Audit, Cyber Security Audit, Cloud Security, Ethical Hacker

Additional key words: Vulnerability assessment, Penetration Testing, ITGC testing, Cloud Computing,

IT AUDITOR is responsible to plan and perform the audit assignment starting from audit announcement, audit planning, field work, audit quality reviews, pre-closing / closing meetings with the respective Directors / Head of the Departments including writing of the audit report and its finalization as well as follow up of the audit actions. Additionally IT AUDITOR will also be responsible to:
•    Evaluate IT systems, processes and projects in place;
•    Determine risks to the Group’s information assets, and help identify methods to minimize those risks;
•    Ensure information management processes are in compliance with IT-specific laws, policies and standards;
•    Determine inefficiencies in IT systems, IT projects and associated management processes and
•    Consult in IT projects, new initiatives and organizational frameworks.

Description

Audit Planning

1)    Perform audits at Volkswagen Group entities. and other concerned Volkswagen Group Companies with focus on IT processes keeping the associated business risks in mind.
2)    Participate in the preparation of audit objective & scope document along with audit schedule based on the audit objective and timeline specified by Head of IT Audit India Hub.
3)    Participate in the preparation of work program

Audit Process

1)     Prepare and conduct preparatory interviews with the Directors and Heads of the audited departments to identify the processes to be assessed during the audit.
2)     Request and collect relevant audit data for analysis from respective business areas.
3)     Prepare audit matrix on periodic basis to record the audit field work and update the progress of the audit to IT Audit Manager and the Head of IT Audit Hub India.
4)    Define actions including relevant controls to mitigate the business risks identified based on the evidences provided during the audit.
5)    Organize and conduct pre-closing meetings with business areas to agree upon audit observations and relevant actions.
6)    Prepare and conduct closing meetings with the Directors / Heads of the Department for audited division to agree upon the audit observations, risks and proposed actions.
7)    Prepare the draft audit report and submit the same to the  IT Audit Manager and the Head of IT Audit India Hub for review.
8)    Ensure that adequate documentation is prepared for the audit assignment. Peer review changes are done before release of the final audit report to the business area.
9)    Contact business area to review the progress of the implementation of audit actions defined in the final audit report. Based on the review, write the status of the follow up and submit the same for upload in RIAS.
10)    Obtain necessary certifications / qualifications to support the job requirements by attending relevant trainings
11)    Support the conduction of unscheduled audits/special investigations and audits from the anti-corruption system.
12)    Relevant knowledge is shared among the team members.
13)    Consult in IT projects, new initiatives and organizational frameworks.
14)    Ensure information management processes are in compliance with IT-specific laws, policies and standards.
15)    Determine risks to the Group’s information assets, and help identify methods to minimize those risks.
16)    Evaluate IT systems, processes and projects in place.
17)    Determine inefficiencies in IT systems, IT projects and associated management processes.