Executive

This role is ideal for employees looking to build a career in IT audit, risk management, compliance, and information security. The successful candidate will support IT audit engagements under the guidance of senior team members, gaining exposure to IT General Controls (ITGCs), SOX compliance, application controls, and information security reviews.

• Assist in evaluating IT risks from a SOX and internal control perspective
• Support Design and Operating Effectiveness (DO/EO) testing of IT General Controls (ITGCs)
• Assist in testing application controls and basic automated/configuration controls
• Support reviews of SOC 1 / SOC 2 reports and related IT controls
• Collect, validate, and organize audit evidences to ensure completeness and accuracy
• Assist in documenting audit work papers clearly and precisely
• Support audits related to:
  • User Access Management
  • Change Management
  • Backup & Recovery
  • IT Operations
• Gain exposure to SAP Security reviews, including:
  • Role maintenance
  • Segregation of Duties (SoD) concepts
• Communicate audit queries to clients and track responses
• Learn and comply with internal audit methodologies, tools, and quality standards

• Basic understanding of:
  • Information Systems
  • IT controls and ITGC concepts
  • Cybersecurity fundamentals
• Familiarity with:
  • Operating systems (Windows / Unix basics)
  • Databases and applications (conceptual understanding)
• Awareness of tools such as Excel, ACL, or basic SQL concepts is a plus
• Strong analytical and problem-solving skills
• Good written and verbal communication skills
• Willingness to learn audit standards, regulations, and client environments

Preferred Certifications (Not Mandatory):

• CISA (pursuing)
• ISO 27001 (awareness or foundation level)

• Any basic cybersecurity or IT risk certification

  Behavioral Competencies:

• High attention to detail
• Strong ethical mindset and confidentiality awareness
• Eagerness to learn and adapt
• Ability to work in a team environment
• Professional attitude and client-focused approach