IT Auditor( ITGC & ITACs)

Summary:

Duties & Responsibilities:

Job Title: IT Auditor (6–10 Years Experience)
Location: Pune
Job Type: Full-Time / Permanent / Contract
Department: IT Audit / Risk & Compliance
Reporting To: IT Audit Manager / Audit Lead

Key Responsibilities

• Evaluate the design, implementation, and operating effectiveness of IT General Controls (ITGCs) like Access Controls, Change Management, Security Management, Operations Management, Backup and Recovery.
• Evaluate the design, implementation, and operating effectiveness of IT Application Controls (ITACs) like Input, Processing and Output Controls along with Integrity Controls, Authorization and Validation across various environments.
• Perform access controls testing, including user provisioning, segregation of duties (SoD), password policies, and privileged access within Oracle ERP and other corporate IT applications.
• Knowledge of various business process flows such as procure to pay, order to cash and report to report.
• Experience in configuration reviews and perform control testing within Oracle modules such as Financials (AP, AR, GL), Procurement, and Supply Chain.
• Collaborate with business and IT stakeholders to understand system changes, control risks, and document control matrices and process narratives.
• Lead and/or support SOX 404 compliance audits including walkthroughs, control testing, and remediation tracking.
• Develop and execute SQL queries or database scripts to extract and validate data as part of control testing and data analytics.
• Provide recommendations to improve system controls, efficiency, and data security based on audit findings.
• Monitor control gaps and follow up with relevant teams on timely remediation actions.
• Participate in pre-implementation reviews for new system rollouts or Oracle patches/upgrades to ensure controls are embedded in design.
• Engage with external auditors, providing necessary documentation and walkthroughs related to IT controls.
• Contribute to risk assessments, audit planning, and development of the IT audit universe.
• Stay informed about industry trends, cybersecurity developments, and compliance requirements to continuously enhance audit practices.
• Plan, execute, and report on IT audits focused on Oracle Applications R12, ensuring effective control design and operational efficiency.

Required Skills & Qualifications

• 6–10 years of relevant IT Audit experience.
• Solid understanding of ITGC (IT General Controls) and ITACs (IT Application Controls).
• Experience working with or auditing ERP systems, particularly in a regulated environment.
• SQL skills and familiarity with relational database systems (e.g., Oracle DB, SQL Server) is a plus.
• Big 4 consulting or assurance experience would be added advantage

Soft Skills & Attributes

• Excellent verbal and written communication skills.
• Strong analytical and problem-solving capabilities.
• Must be presentable, professional, and capable of engaging with senior stakeholders.
• High degree of dedication, integrity, and attention to detail.
• Ability to work independently and as part of a team in a dynamic environment.

Pre-Requisites / Skills / Experience Requirements: