IT Auditor (ITGC & ITAC)

Job Title: IT Auditor (ITGC & ITAC)

Location: Gurgaon

Experience: 3+ Years

Employment Type: Full-time

Role Overview

We are looking for an IT Auditor with experience in IT General Controls (ITGC) and IT Application Controls (ITAC) to support IT audit engagements and risk assessments. The candidate will work closely with internal teams and clients to evaluate IT control environments, identify risks, and ensure compliance with relevant standards and regulatory requirements.

Key Responsibilities

• Perform IT General Controls (ITGC) testing including access management, change management, and IT operations controls.
• Conduct IT Application Controls (ITAC) reviews across key business applications.
• Evaluate the design and operating effectiveness of IT controls across systems and processes.
• Support IT audit engagements, including planning, fieldwork, and reporting.
• Identify control gaps, risks, and remediation opportunities.
• Prepare audit documentation, working papers, and audit reports.
• Coordinate with business and IT stakeholders to obtain evidence and clarify audit findings.
• Assist in SOX compliance reviews and IT risk assessments where applicable.
• Stay updated with industry standards, frameworks, and regulatory requirements.

Required Skills

• 3+ years of experience in IT Audit, ITGC, and ITAC testing.
• Strong understanding of IT control frameworks such as COBIT, SOX, and ISO standards.
• Experience reviewing ERP systems such as SAP, Oracle, or other enterprise applications.
• Knowledge of user access management, change management, and system operations controls.
• Strong analytical, documentation, and reporting skills.
• Ability to communicate effectively with technical and non-technical stakeholders.

Preferred Qualifications

• Bachelors degree in Information Technology, Computer Science, or related field.
• Professional certifications such as CISA, CIA, or ISO 27001 Lead Auditor (preferred).
• Experience working in consulting firms, internal audit teams, or risk advisory roles.

Key Competencies

• IT Audit & Risk Assessment
• ITGC & ITAC Testing
• Compliance & Control Evaluation
• Stakeholder Communication
• Audit Documentation & Reporting