IT Audit Manager

Purpose of the Job /Role 

Perform IT Assessment Reviews which includes IT General Controls, Internal Audits, Controls Testing, Compliance Reviews (such as ISO 27001, HIPAA, HITRUST etc.) 

The person we are looking for: 

• Strong understanding of IT General Controls domains such as Change Management ,User Access Management, IT Operations, Back and Recovery Management etc 

• Strong understanding of the third-party risk management 

• Implementation and assessment knowledge of various industry standards, frameworks, and compliances such as ISO 27001, HIPAA, HITRUST, NIST etc 

• Understanding of the IT Risk Assessment methodologies and ability to comprehend and apply the knowledge during IT assessment lifecycle 

• Interview client stakeholders and conducts walkthrough meetings and develop assessment artifacts 

• Should understand complete assessment lifecycle from assessment scoping to project deliverables 

• Manage execution of assigned IT assessments, supervision of the work performed by the team members during the different phases of the audit ensuring ongoing compliance to methodology and quality standards 

• Collaboration with the different stakeholders on the complex assessment issues to develop possible recommendations 

• Monitor progress, manage risk, and verify key stakeholders are kept informed about progress and expected outcomes 

• Presents findings and proposes recommendations that deal with root cause of issues and impact to the organization 

• Manages the approved budget and resources for the assigned audit; assigns and reviews the work done by all team members 

• Coaches team members and colleagues in the best use of company & teams methodologies and tools 

• Demonstrates excellent people management capabilities and is able to think out of the box 

• Great communication skills and the ability to break down and explain complex data security problems 

• Excellent presentation skills and ability to effectively communicate proposals and point of view at senior management levels 

Education:  

• Minimum Qualification: BE/ BTech 

• Postgraduates in any stream would be preferred (not mandatory) 

• Prior Big 4 experience would be an added advantage 

• Experience in IT Risk Advisory/ Assurance for varied industry segments preferred 

• Excellent communication skills - both written and oral 

 CIA/CISA/CISM will be added advantage