Job Description

We are seeking an experienced and proactive IT Audit Manager to lead and execute IT audit activities across various systems and applications, including SAP and Cloud environments. The ideal candidate will have strong expertise in IT General Controls (ITGC), IT Application Controls (ITAC), and SOX Compliance. This position requires hands-on experience in IT risk management, audit planning, and process improvement.

Core Responsibilities:

• Plan, coordinate, and conduct end-to-end IT audits including defining audit scope, developing testing procedures, performing fieldwork, and preparing audit reports.
• Evaluate the effectiveness of IT General Controls (ITGC) and IT Application Controls (ITAC) across systems like SAP, cloud platforms, and other business-critical applications.
• Perform SOX IT controls testing to ensure compliance with regulatory requirements and internal policies and assist in the documentation and reporting of SOX-related findings.
• Identify gaps, weaknesses, or risks in IT systems and processes, assess their potential impact, and recommend practical and timely solutions for risk mitigation.
• Collaborate with internal departments such as IT, Finance, and Compliance, as well as with external auditors, to ensure smooth audit execution and accurate communication of issues.
• Design and maintain audit programs and test plans that are tailored to specific systems, business functions, and risk areas.
• Track audit findings and ensure that management’s corrective actions are implemented effectively within agreed timelines, conduct follow-up reviews as necessary.
• Provide support and advice during system implementations, upgrades, and process changes by assessing IT risks and suggesting necessary control measures.
• Stay informed about changes in IT audit regulations, industry best practices, cybersecurity risks, and emerging technologies to ensure that audit practices remain up to date.
• Prepare clear, comprehensive, and well-structured audit documentation, working papers, and reports to present findings, risk assessments, and recommendations to leadership.

Must-Have Skills:

• 6 to 10 years of experience in IT Audit, including exposure to ITGC, ITAC, and SOX compliance
• Must have team handling experience
• Hands-on experience in auditing SAP systems
• Experience working with cloud platforms (e.g., AWS, Azure, GCP) from a risk/control audit perspective
• Strong understanding of audit standards and frameworks like COBIT, ISO 27001, or NIST
• Ability to identify IT-related risks and evaluate the effectiveness of internal controls
• Experience in preparing and executing audit programs and test plans
• Strong documentation and report writing skills
• Excellent communication and collaboration skills to work with cross-functional teams and external auditors