Senior Audit - Information Systems

Description

Job Description Senior Audit Information Systems

We are seeking an experienced and detail-oriented Senior Audit Information Systems professional to join our internal audit and risk management team. The ideal candidate will be responsible for evaluating IT controls, information security practices, system governance, and compliance frameworks across business applications and infrastructure environments. The role requires strong analytical skills, risk assessment capabilities, and hands-on experience in IT audit processes.

Key Responsibilities

• Conduct Information Systems (IS) audits, ITGC reviews, application control reviews, and cybersecurity assessments across business functions.
• Evaluate the effectiveness of IT controls, system security, data integrity, and compliance with internal policies and regulatory requirements.
• Perform risk assessments and identify control gaps in ERP systems, databases, networks, cloud platforms, and IT operations.
• Review user access management, change management, backup procedures, disaster recovery processes, and incident management controls.
• Assist in developing audit plans, audit programs, and risk-based audit methodologies.
• Prepare audit reports with observations, risk ratings, recommendations, and management action plans.
• Coordinate with business stakeholders, IT teams, and external auditors during audit assignments.
• Monitor implementation of corrective actions and follow up on audit findings.
• Support compliance initiatives related to ISO 27001, SOX, GDPR, RBI guidelines, or other applicable standards and regulations.
• Stay updated on emerging risks, cybersecurity trends, and technology advancements impacting audit functions.
  
  

• Strong understanding of IT audit frameworks, information security principles, and risk management practices.
• Knowledge of ITGC, application controls, cybersecurity controls, and system audit techniques.
• Experience with ERP systems such as SAP, Oracle, or Microsoft Dynamics is preferred.
• Familiarity with databases, operating systems, cloud environments, and network security concepts.
• Proficiency in audit documentation, risk assessment, and reporting.
• Strong analytical, problem-solving, and communication skills.
• Ability to manage multiple assignments and work independently within timelines.