Information Technology Auditor

Position - IT Audit Infra Specialist

Experience - 4-8 Years

Location - Bangalore (Open from Pan India Location who are ready to relocate)

Roles and Responsibilities -

 Maintain compliance with audit methodology, while also operating within industry best practices, applicable

regulations, and internal and external professional practice expectations.

 Act as a leader and role model and continuously improve self and department.

 Build relationships with peers and clients within the organization and exhibit a high standard of performance and

professional conduct that will create a culture of integrity and inclusion, where all individual and departmental

choices are rooted in good judgment and support organization's Principal of Ethics and Conduct.

 Operate with an innovative and flexible mindset by continuously identifying ways to enhance consistency,

efficiency, quality and/or value.

 Demonstrate professional skepticism and personal accountability.

 Lead walkthrough meetings and interviews with business stakeholders to develop an understanding of

business processes.

 Lead formal discussions with business stakeholders throughout the duration of audit engagements to

communicate status or concerns.

 Identify potential risks and controls and assist in developing scope and work programs.

 Evaluate design and operational effectiveness of internal controls and identify control weaknesses.

 Generate insightful, meaningful observations that effectively convey significance and impact on risk and/or risk

management practices, reporting findings and audit issues to Audit Management.

 Prepare workpapers and audit reports with documented results that adhere to methodology, applicable

standards and regulatory requirements, using appropriate business and technical language.

 Document workpapers demonstrating the work was appropriately performed (e.g., detailed lead sheets

describing the control attributes that were tested, and the results were documented in a manner to support the

conclusions reached, effectiveness and sustainable controls are evident in documentation). Documentation

should stand alone to enable re-performance.

 Identify control weaknesses and escalate and discuss findings with Audit Management and business

stakeholders as appropriate.

 Complete work on a timely basis and deliver work products that meet objectives and standards of

methodology, applicable standards and regulatory requirements.

Education, Licensure, Year of Experience (and type of work experience):

 A bachelor's degree, preferably in Computer Science, Information Systems, Engineering or related business

discipline at an accredited college or university.

 Relevant certifications, such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP) preferred.

Skills and Experience:

 Minimum of 5 years and/or equivalent of experience of internal audit and/or equivalent of experience with the

financial services industry, related markets, and related regulatory agencies.

 Experience preferred in IT audit.

 Working Knowledge in one or more of the following area:

 IP networks infrastructure (network topology, switches, routers, firewalls, intrusion detection /

prevention)

 Windows Active Directory, Azure and LDAP (policies, structure, elements)

 Databases (SQL, Oracle, DB2, monitoring tools)

 Mobile and DLP technologies (Data Leakage Prevention, BYOD security)

 Cloud Computing

 Standards / Frameworks (e.g., CoBIT 5, ITIL, NIST series 800 guidance, FFIEC)

 Exhibits effective communication (both verbal and written), negotiation and presentation skills; strong

interpersonal skills; and ability to engage with all levels of internal audit and business line management.

 Strong analytical and problem-solving skills.

 Employs critical thinking skills to identify pragmatic recommendations within an evolving and increasingly

complex regulatory and risk management environment.

 Proficiency in technology as required for assigned areas (MS Office, audit data analytics, etc.).

---