IT Audit

This role is for one of the Weekday's clients

Salary range: Rs 1000000 - Rs 1200000 (ie INR 10-12 LPA)

Min Experience: 2 years

JobType: full-time

We are seeking an IT Auditor to lead the annual review of critical assets supporting financial reporting, ensuring compliance with protection standards and regulatory requirements. The role involves collaborating with external auditors, platform/risk leads, and system SMEs to assess, validate, and strengthen information security controls.

Assets in Scope

• Applications: SaaS platforms, in-house applications/tools, services, EUC solutions, ETL tools.
• Databases: IBM DB2 AS400 (mainframe), Oracle, SAP, SQL, and other relational databases.
• Servers: Windows Server, Linux, Unix, and associated operating systems.

Scope of IT General Controls (ITGC)

• Password Controls: Evaluate enforcement mechanisms, domain/application-level policies, storage methods, and encryption standards.
• Shared Account Management: Review usage of privileged accounts, vaults, and PAM solutions.
• Access Control: Assess provisioning/deprovisioning processes, periodic reviews, and recertification.
• Segregation of Duties & Environment Controls: Validate role separation, technical constraints, and development-to-deployment lifecycle.
• Change Management: Review change logging, approvals, testing, and system/deployment tool configurations.
• System Management: Evaluate incident management, error reporting, and ticket-tracking processes.

Additional Responsibilities

• Support external auditors with walkthroughs, sampling, and evidence gathering.
• Document and report on control assessments; manage findings in line with audit standards.
• Communicate outcomes to SMEs, providing clarity on risks and control gaps.
• Contribute to team-wide knowledge sharing, testing support, and training initiatives.

Skills & Knowledge

• Strong understanding of ITGC frameworks and Financial Reporting Control Framework (FRCF) testing.
• Technical knowledge of risk management and audit techniques.
• Familiarity with IT governance frameworks and regulatory requirements.
• Excellent communication, negotiation, and stakeholder management skills.
• Strong analytical, report-writing, and IT proficiency.
• Understanding of corporate governance and compliance principles.
• Self-driven with a high level of motivation to achieve excellence.

Location

• Magarpatta City, Pune

Dimensions

• Operating model focused on delivering value-added services to stakeholders.
• Dynamic team of 50+ professionals.
• Close coordination with business units, transformation, and risk teams.
• Engagement with senior stakeholders and supplier partners.

Experience

• 2–3 years of relevant experience in IT audit, governance, or risk.
• Experience with a Big 4 audit firm is preferred.