This role is for one of the Weekday's clients
Min Experience: 4 years
Location: Gurugram
JobType: full-time
We are seeking a skilled and detail-oriented ITGC Auditor with 4 to 8 years of relevant experience to join our internal audit or risk assurance team. The ideal candidate will possess strong knowledge of SOX (Sarbanes-Oxley) compliance, IT general controls testing (TOD/TOE), and risk-based audit methodologies. Experience with ERP systems like SAP and Oracle, as well as familiarity with the insurance industry, is highly desirable. Certifications such as CISA or CA will be a strong plus.
Requirements
Key Responsibilities:
- Perform end-to-end ITGC audits covering access controls, change management, backup and recovery, logical security, and IT operations.
- Execute SOX 404 audits, including the planning, execution, and documentation of testing controls in accordance with regulatory and internal audit standards.
- Conduct Test of Design (TOD) and Test of Effectiveness (TOE) procedures to validate the design and operational effectiveness of IT controls.
- Work closely with business process owners, IT stakeholders, and external auditors to coordinate audit-related activities and ensure timely resolution of identified issues.
- Evaluate general and application controls in ERP environments (SAP and Oracle) to ensure the integrity, confidentiality, and availability of information systems.
- Identify control gaps, process inefficiencies, and opportunities for improvement, providing actionable recommendations to strengthen IT control environments.
- Maintain comprehensive and well-organized documentation of all audit work performed and ensure that audit evidence supports conclusions.
- Prepare clear and concise audit reports and presentations to communicate findings to senior management and recommend remediation plans.
- Track and verify the implementation of audit recommendations and mitigation of identified risks.
- Stay updated on industry best practices, changes in regulatory standards (e.g., SOX), and evolving technologies impacting IT risk and audit.
Required Skills and Qualifications:
- Bachelor’s degree in Information Systems, Accounting, Finance, or a related field.
- Professional certifications such as CISA (Certified Information Systems Auditor) or CA (Chartered Accountant) are highly preferred.
- 4–8 years of hands-on experience in ITGC auditing with a strong focus on SOX compliance.
- In-depth knowledge of internal control frameworks (e.g., COSO) and IT governance principles.
- Experience working in or auditing insurance, financial services, or regulated industries is a strong advantage.
- Strong familiarity with ERP systems such as SAP and Oracle, including understanding of key business processes and associated risks.
- Solid understanding and application of Test of Design (TOD) and Test of Effectiveness (TOE) methodologies.
- Excellent communication, interpersonal, and stakeholder management skills.
- Proficiency in audit tools, data analytics, and Microsoft Office Suite.
Preferred Attributes:
- Ability to work independently and as part of a team in a fast-paced and dynamic environment.
- Analytical mindset with strong problem-solving skills.
- High attention to detail, integrity, and professionalism.