Manager - IT Audit

Job Description : Manager, IT Audit

Location : Mumbai

Designation : Manager IT Audit

Total Experience : 5 - 8 Years

Relevant Manager-Level Experience : 2.5 - 5 Years

CTC : Up to 25 LPA

Notice Period : Up to 60 Days

Role Overview :

We are looking for an experienced Manager - IT Audit to join our IT Audit & Risk Consulting practice in Mumbai. The role is suited for professionals with strong experience in IT Audit, IT General Controls (ITGC), IT Risk & Controls Assurance, Internal Audit and Technology Risk Consulting. Candidates must have relevant experience from IT Services, Management/Technology Consulting, Big 4/Advisory firms, or Financial Services/Banking/Insurance organizations. Strict requirement : Candidates should have 2.5-5 years of experience at Manager / equivalent project-management level, with strong hands-on exposure to IT Audit and Controls Assurance.

Key Responsibilities :

1. IT Audit & Controls Assurance :

- Lead and execute multiple IT Audit / IT Risk & Controls Assurance engagements simultaneously.

- Perform and review IT General Controls (ITGC) audits covering :

1. Applications

2. Databases

3. Operating Systems

4. Middleware

5. Networks

6. Access Management

7. Change Management

8. IT Operations

9. Backup & Recovery

10. Incident Management

- Execute/review IT Application Controls and technology control assessments.

- Conduct risk assessments, control walkthroughs, control testing, evidence review and issue identification.

- Perform assessments relating to IT Regulatory Compliance, Third-Party Risk Assurance and Technology Risk.

- Support SOC 1 / SOC 2 assurance and attestation engagements where applicable.

- Develop audit work programs, testing methodologies, working papers and audit reports.

- Prepare management reports and audit committee presentations.

- Identify control gaps and provide practical remediation recommendations.

2. Project Management :

- Independently manage 3 - 5 IT Audit / Controls Assurance projects at a time.

- Own engagements from initiation through closure, including planning, execution, reporting and closure.

- Ensure project delivery within agreed timelines, quality standards and budgets.

- Monitor project risks, issues, dependencies and resource requirements.

- Coordinate with Directors/Partners and provide regular engagement updates.

- Ensure appropriate engagement documentation and quality standards.

3. Client & Stakeholder Management :

- Act as a key client-facing contact for assigned engagements.

- Conduct client discussions, walkthroughs, status meetings and issue-resolution discussions.

- Understand client business processes, technology environment and associated risks.

- Build strong relationships with technology, risk, audit and business stakeholders.

4. People Leadership :

- Manage and mentor consultants/analysts working on engagements.

- Allocate work, review deliverables and provide performance feedback.

- Coach team members on IT Audit methodology, controls testing and professional development.

- Support staffing and resource planning for projects.

5. Business Development :

- Support business development through client relationship management.

- Contribute to RFP/RFI responses, proposals, presentations and pre-sales activities.

- Identify opportunities for additional IT Risk, IT Audit and Cyber Risk services.

- Support Partners/Directors in account development and revenue-generation initiatives.

6. Emerging Technology :

Exposure to technology risks and controls in one or more areas such as :

1. Cloud / AWS / Azure

2. DevSecOps

3. Intelligent Automation

4. Cybersecurity

5. Data Privacy

6. Digital Transformation

7. Emerging Technology Risk

Required Skills & Experience :

- 5 - 8 years of total professional experience.

- 2.5 - 5 years of relevant Manager / equivalent project-management experience.

- Strong hands-on experience in IT Audit / IT Risk / Controls Assurance / Technology Risk Consulting.

- Candidates must have relevant experience in IT Services, Consulting/Advisory, or Financial Services.

- Strong understanding of ITGC and IT Application Controls.

- Experience with IT audit frameworks and standards such as :

1. COBIT

2. COSO

3. ITIL

4. ISO 27001

5. NIST

- Experience in risk assessment, control testing, audit documentation and reporting.

- Client-facing and team-management experience.

- Exposure to business development, proposals, RFP/RFI and pre-sales is preferred.

- Strong analytical, problem-solving and communication skills.

- Willingness to travel to client locations in India and, where required, overseas.

Preferred Certifications :

- CISA

- CISSP

- CIA

- CISM

- ISO 27001 Lead Auditor

- SAP/Oracle Security certifications

- Relevant Cloud / Cybersecurity certifications