You will execute end-to-end IT audit engagements and support US SOX, ISO 27001, and SOC 1 and SOC 2 audit activities. You will assess IT risks and controls across infrastructure, cloud, data governance, cybersecurity, and applications; evaluate IT application controls; support system changes and governance forums; and identify risks from process changes, integrations, and automation.
Responsibilities
- Conduct IT risk assessments across IT infrastructure, cloud, data governance, cybersecurity, and application systems
- Maintain understanding of IT Application Controls and their impact on business processes and automation
- Partner with IT on system-related changes and clarify ownership between infrastructure and process or control design
- Improve the organization’s control environment, governance maturity, and operational scalability
- Identify and manage risks from process changes, system integrations, and automation initiatives
- Support governance forums with insights on process and control improvements
Requirements
- Degree in Information Technology, Computer Science, Accounting, Finance, or a related discipline
- 4–6 years of relevant experience in IT audit, cybersecurity, technical audit, consultancy, or GRC roles
- Hands-on experience performing IT General Controls and IT Application Controls audits
- Knowledge of NIST SP 800-53, ISO 27002, ITIL, ITU, GSMA, and 3GPP guidelines
- Knowledge of cybersecurity risk management, vulnerability management, incident response, cloud security controls, and assurance practices
- Experience with US SOX, ISO 27001, SOC audits, and Segregation of Duties reviews is advantageous
- CIA, CISA, CISSP, or equivalent certification preferred
- Documentation, analytical, and problem-solving skills
- Business acumen and ability to define success metrics
- Ability to translate technical IT topics into business impact
- Stakeholder management, interpersonal, and communication skills
- Project coordination skills
- Basic understanding of AI products, LLM capabilities and limitations, and business use cases
Benefits
- Attractive welfare benefits