Senior Analyst, IT Internal Audit

This is a fully remote position, open to applicants in India.

📋 Description

• Conduct and assist with risk-focused internal audit assignments across technology, security, operational, compliance, and business process domains.

• Establish audit goals, scope, testing procedures, sampling methods, and documentation criteria.

• Execute audits of IT general controls, which encompass access management, change management, logical security, incident management, backup and recovery, system development lifecycle, and IT operations.

• Assist in audits pertaining to SaaS platforms, cloud infrastructure, cybersecurity, data privacy, third-party risk management, and technology-driven business processes.

• Assess the design and operational efficiency of controls.

• Facilitate audits and advisory evaluations related to AI governance, responsible AI practices, model risk, data quality, access controls, transparency, monitoring, and adherence to internal AI policies.

• Evaluate controls in accordance with ISO/IEC 27001, ISO/IEC 42001, SOC 2, NIST, COBIT, ITIL, and other technology risk frameworks.

• Utilize data analytics and automation tools for audit planning, risk identification, control testing, exception analysis, and ongoing monitoring.

• Implement AI-enabled tools to enhance audit planning, control mapping, document review, testing analysis, issue tracking, and reporting.

• Record audit workpapers and gather adequate evidence to substantiate audit conclusions.

• Identify control deficiencies, process inefficiencies, risk exposures, and opportunities for improvement.

• Compose audit observations that include root causes, risk impacts, and actionable recommendations.

• Collaborate with process owners and management to validate findings, concur on remediation actions, and track issue resolution.

• Oversee open audit issues to guarantee timely and sustainable remediation.

• Maintain audit databases, issue trackers, and engagement status updates.

• Foster relationships with stakeholders across IT, Information Security, Compliance, Legal, Finance, Operations, Product, Engineering, and other teams.

• Assist with special projects, management requests, and advisory evaluations.

• Contribute to enhancements in Internal Audit methodology, automation, data analytics, AI applications, and knowledge-sharing initiatives.

• Report to the Senior Manager, Internal Audit.

⛳️ Requirements

• Bachelor's degree in information systems, Computer Science, Engineering, Accounting, Finance, Business Administration, or a related field.

• A minimum of 5 years of experience in IT internal audit, technology risk, information security audit, internal controls, compliance, risk advisory, or external audit.

• Background in conducting IT audits in SaaS, cloud, technology, cybersecurity, or product-focused environments.

• Proficient understanding of IT general controls, application controls, cybersecurity controls, cloud controls, identity and access management, change management, incident management, and data governance.

• Experience with internal audit methodologies, risk assessments, control design evaluations, operating effectiveness testing, audit documentation, and issue reporting.

• Knowledge of AI governance, responsible AI principles, AI risk management, model oversight, data quality, security, privacy, and regulatory considerations associated with AI adoption.

• Familiarity with ISO/IEC 27001, ISO/IEC 42001, SOC 2, NIST Cybersecurity Framework, COBIT, ITIL, COSO, and cloud security control frameworks.

• Capability to analyze complex technology and business processes, identify risks and control deficiencies, and suggest practical enhancements.

• Excellent written and verbal communication skills.

• Strong project management and organizational abilities.

• Exceptional attention to detail, intellectual curiosity, professional skepticism, and capacity to work independently.

• Ability to effectively collaborate with global teams and stakeholders across various functions and time zones.

• Relevant professional certification is preferred, such as ISO/IEC 27001 Lead Auditor, ISO/IEC 42001 Lead Auditor, CISA, CIA, CISSP, or CCSP.

• Experience utilizing data analytics, automation, or AI-enabled tools to enhance audit execution, control testing, and reporting is preferred.

• Prior experience with Big4 firms or in a global technology, SaaS, cloud, cybersecurity, or product engineering environment is preferred.

• Familiarity with audit management tools, GRC platforms, data visualization tools, or analytics tools is preferred.

• Practical exposure to SOX ITGCs, SOC 2 audits, ISO audits, cybersecurity assessments, vendor risk assessments, or cloud control evaluations is preferred.

🏝️ Benefits

• Flexible working arrangements.

• Mentorship, learning programs, leadership development, and educational support.

• Paid volunteer time off.

• August Free Fridays.

• Well-being resources.

• Regionally tailored programs for employees and their families.