IT Auditor

Job Summary Act as Senior IT Audit Lead responsible for executing IT audit engagements and focusing on ITGC and ISO 27001 compliance. Key Responsibilities Perform assessment of ITGC and ISO 27001 Annex A controls across access management, change management, IT operations, asset management, vendor risk, and business continuity. Support SOX and ISO 27001 audits, including control design, operating effectiveness testing, evidence validation, and audit reporting. Review compliance against information security policies, ISMS processes, and risk treatment plans. Identify gaps in ISMS implementation, control effectiveness, and compliance adherence; recommend remediation. Assist internal and external audits including ISO 27001 certification and surveillance audits. Prepare audit documentation including control matrices aligned to SOX and ISO 27001 frameworks. Track remediation and validate closure in line with audit and compliance timelines. Engage with stakeholders across IT, Cybersecurity, Engineering, Operations, and compliance teams. Coordinate with offshore teams (if applicable) for audit support and documentation. Provide audit and compliance updates to leadership and customer stakeholders. Experience & Skills Strong experience in IT Audit, ITGC, SOX compliance, ISO 27001 (ISMS). Hands‑on experience in ISO 27001 implementation, audit, or ISMS governance. Strong understanding of ISO 27001 Annex A controls, including: Access Control, Cryptography, Asset Management, Operations Security, Supplier Security, Incident Management, Business Continuity. Experience in control design and operating effectiveness testing across SOX and ISO 27001. Ability to assess ISMS maturity, risk treatment plans, and policy compliance. Strong experience in audit documentation, workpapers, and governance reporting. Experience working with external auditors for SOX and ISO audits. Strong stakeholder management skills with client IT, cybersecurity, audit teams, and leadership. Knowledge of compliance frameworks such as COBIT and NISTCSF. Tools & Frameworks Audit / GRC tools: ServiceNow GRC, Archer, AuditBoard. Compliance frameworks: SOX IT Controls, ISO 27001 (ISMS), COBIT, NISTCSF. ISMS governance areas: ISMS implementation & audit readiness; risk assessment & treatment planning; policy & procedure compliance; internal audit / certification support; continuous compliance monitoring. ITGC areas: Access Management; Change Management; IT Operations; Backup & Recovery; Incident Management. Enterprise technology areas: ERP / business applications; infrastructure (OS/DB/Network); cloud (Azure / AWS); IAM & security platforms. Salary Range $160,000–$180,000 a year. Employee Benefits Summary Discretionary annual incentive. Comprehensive medical coverage: medical, health, dental, vision, disability planning, and insurance; pet insurance plans. Family support: maternal and parental leaves. Insurance options: auto and home insurance, identity theft protection. Convenience & professional growth: commuter benefits; certification and training reimbursement. Time off: vacation, time off, sick leave, and holidays. Legal & financial assistance: legal assistance; 401(k) plan; performance bonus; college fund; student loan refinancing. Qualifications Bachelor of Computer Science. #J-18808-Ljbffr Tata Consultancy Services