Key Responsibilities

• Perform risk-based IT audits covering IT governance, cybersecurity, IT operations, applications, infrastructure, and regulatory compliance.

• Support the development of the IT Audit Universe, risk assessment, annual audit plan, and audit programs.

• Conduct end-to-end audit activities including planning, fieldwork, documentation, reporting, and follow-up.

• Review IT General Controls (ITGC) including access management, change management, IT operations, asset management, backup/DR, BCP, cybersecurity, vulnerability management, and physical/environmental controls.

• Perform audits of SAP/Oracle ERP, applications, databases, networks, Active Directory, Windows/Linux, cloud, virtualization, and data center environments.

• Identify control weaknesses and technology risks, assess business impact and root causes, and provide practical recommendations.
• Prepare audit reports and presentations and communicate findings with IT, Business Units, Risk, Compliance, and other stakeholders.
• Monitor corrective action plans and follow up on outstanding audit issues.
• Support data analytics, audit process improvement, special audits, and other assignments as required.

Qualifications

• Bachelor’s or Master’s degree in IT, Computer Science, Information Systems, Accounting, or related fields.

• 3–5 years of experience in IT Audit, IT Risk, Technology Risk, IT Governance, IT Compliance, or related areas.

• Good knowledge of ITGC, cybersecurity, IT governance, technology risk, and internal controls.

• Experience with SAP and/or Oracle ERP and knowledge of IT infrastructure, applications, databases, networks, and cloud environments.

• Knowledge of COBIT, ISO 27001, NIST, or other relevant IT governance and cybersecurity frameworks.
• Strong analytical, problem-solving, report-writing, presentation, and stakeholder management skills.
• Good command of written and spoken English.

• Professional certifications such as CISA, CIA, CISSP, or CRISC would be an advantage.