Senior IT Auditor

Position- Senior IT Audit Experience- 5+ years Location- Mumbai Notice Period- Immediate / 15 days / 1 Month Key Responsibilities IT General Controls (ITGC) Lead planning, walkthroughs, and testing of ITGCs across access management, change management, and IT operations. Perform testing of user access, privileged access, password controls, provisioning/de-provisioning, and database security. Evaluate change management processes, including approvals, segregation of duties, and production migrations. Test IT operations controls such as backups, job monitoring, interface processing, and disaster recovery. Assess control effectiveness, document findings, and recommend practical remediation. IT Application Controls (ITAC) Test automated application controls and key system interfaces supporting financial reporting. Evaluate automated calculations, configuration settings, validation controls, and interface completeness. Validate system-generated reports and information produced by the entity (IPE). Technology Risk & Transformation Perform risk assessments for ERP, SaaS, cloud, WMS, CRM, and technology implementation projects. Review project governance, security design, SoD, data migration, UAT, interfaces, and go-live readiness. Identify implementation risks and provide recommendations to strengthen controls. SOX, Cybersecurity & Compliance Support SOX IT scoping, ITGC/ITAC testing, control deficiency assessment, and remediation validation. Coordinate with external auditors and review SOC reports. Support PCI DSS assessments and evaluate cybersecurity controls, including access management, vulnerability management, and logging. Data Analytics & Stakeholder Management Leverage data analytics to improve audit coverage and automation. Support GRC and audit management tools. Lead audit engagements, review workpapers, mentor junior team members, and build strong relationships with business and IT stakeholders. Qualifications Bachelor's degree in Information Systems, Computer Science, Accounting, Finance, or a related field. 4+ years of experience in IT Audit, SOX, Technology Risk, or IT Compliance. CISA preferred; CIA, CISSP, or CRISC is a plus. Experience with ITGC, ITAC, ERP/SaaS environments, SAP, JD Edwards, Oracle, Active Directory, and cloud platforms (OCI/Azure/AWS). Knowledge of SOX, COSO, COBIT, SDLC, PCI DSS, SOC reports, and cybersecurity frameworks. Strong analytical, communication, documentation, and stakeholder management skills. Key Attributes Self-driven IT audit professional with strong technical, analytical, and problem-solving skills. Ability to independently lead audits, manage multiple priorities, and deliver practical, business-focused recommendations. Email ID - khadija@springhr.com