Role Overview :

As an IT Auditor, you will be responsible for planning, executing, and reporting on IT audits across the organization, ensuring compliance with regulatory requirements and industry best practices. You will collaborate closely with IT teams, business stakeholders, and external auditors to assess the effectiveness of IT controls and identify areas for improvement. Your work will directly contribute to mitigating IT risks, safeguarding sensitive data, and maintaining the integrity of our systems, ultimately protecting our customers and ensuring business continuity.

Key Responsibilities :

- Develop and execute comprehensive IT audit plans based on risk assessments and organizational priorities to ensure alignment with business objectives.

- Evaluate the design and operating effectiveness of IT controls across various domains, including cybersecurity, data privacy, and IT operations, to identify vulnerabilities and weaknesses.

- Conduct detailed testing of IT systems, applications, and infrastructure to verify compliance with relevant policies, standards, and regulations (e.g., ISO 27001, PCI DSS, GDPR).

- Prepare clear and concise audit reports summarizing findings, recommendations, and management responses to communicate audit results effectively to stakeholders.

- Track and validate the implementation of corrective actions to address audit findings and improve the overall control environment.

- Provide guidance and support to IT teams on control design and implementation to enhance IT governance and compliance.

- Stay abreast of emerging IT risks, technologies, and regulatory changes to continuously improve audit methodologies and ensure relevance.

Required Skillset :

- Demonstrated ability to plan, execute, and report on IT audits in complex organizational environments.

- Proven expertise in evaluating IT controls related to cybersecurity, data privacy, IT operations, and regulatory compliance.

- Excellent communication and interpersonal skills, with the ability to effectively interact with IT professionals, business stakeholders, and external auditors.

- Strong analytical and problem-solving skills, with the ability to identify and assess IT risks and vulnerabilities.

- Deep understanding of IT governance frameworks, such as COBIT, and industry standards, such as ISO 27001 and NIST.

- Professional certifications such as CISA, CISSP, or equivalent are highly preferred.

- Bachelor's degree in Computer Science, Information Systems, or a related field.

- Ability to work effectively in a fast-paced, dynamic environment and adapt to changing priorities.

- Minimum 10-15 years of experience in IT audit, IT compliance, or IT risk management.