About This Role
The IT Auditor will handle internal and external audit engagements involving IT systems, controls, compliance, security, and third-party environments. This role is ideal for an IT audit or compliance professional with strong experience in IT General Controls (ITGC), ISO standards, audit execution, evidence validation, and documentation, who can work independently and communicate findings effectively with both technical and non-technical stakeholders.
Responsibilities
- Lead and execute internal and external IT audits covering systems, infrastructure, security, compliance, and third-party environments
- Assess IT General Controls (ITGC), application controls, access controls, system configurations, and security controls against established audit criteria
- Review systems, processes, and controls for compliance with applicable regulatory, internal, and ISO requirements
- Perform audit preparation, system readiness checks, functional testing, user/identity verification, and other audit procedures
- Validate the completeness, accuracy, and reliability of audit evidence and investigate identified gaps or anomalies
- Perform root cause analysis and identify potential control weaknesses, unauthorized activities, or instances of non-compliance
- Prepare clear and well-supported audit documentation, findings, working papers, and reports
- Escalate significant or high-risk findings and perform follow-up validation of corrective actions and remediation
- Participate in post-audit discussions, reporting, and continuous improvement of audit processes and documentation
- Maintain auditor independence, confidentiality, and professional integrity throughout all engagements
- Conduct onsite fieldwork and official business trips as required for audit engagements across different client locations
Requirements
- Bachelor's degree in Information Technology, Computer Science, Information Systems, Engineering, or a related field
- At least 5 years of relevant experience in IT Audit, IT Compliance, QA, or related functions
- Strong experience in IT Audit and/or Compliance, including audit planning, execution, documentation, and reporting
- Experience in ISO implementation, audit, or certification
- Working knowledge of IT General Controls (ITGC) and application controls
- Familiarity with IT infrastructure, operating systems, networks, databases, APIs, cloud environments, and security controls
- Strong analytical, investigative, and root cause analysis skills
- Excellent written and verbal English communication skills, with the ability to communicate effectively with both technical and non-technical audiences
- High level of integrity, discretion, and attention to detail when handling confidential information and sensitive systems