IT Auditor - Investment Bank

We are hiring for IT Audit - Top Global Investment Bank - Mumbai

Position Purpose :

Under general supervision, conducts and participates in financial accounting control examination, review and testing. Plays a critical role within the Bank, ensuring a solid internal controls framework is designed and operating effectively to meet various schedules. Accounting department's work is leveraged by external auditors on an annual basis as they conduct the FDICIA audit.

Responsibilities:

- Examine internal IT controls, evaluate the design and operational effectiveness, determine exposure to risk and develop remediation strategies.

- Conduct efficient and effective IT audit procedures.

- Communicate complex technical issues in simplified terms to the relevant staff.

- Perform regular audit testing and provide recommendations.

- Review, evaluate and test application controls.

- Provide recommendations and guidance on identified security and control risks.

- Develop a strong understanding of business and system processes.

- Prepare risk assessment matrix identifying key risks and controls in the audit area.

- Perform walk through along with the process owners and prepare process flowcharts

- Test the existing controls in place, Conclude on the adequacy, effectiveness and efficiency of key controls tested and recommend action plan to address the risks where controls are weak

- Adhere to auditing standards established by the company's audit department.

- Communicate audit findings and recommendations to Audit Manager.

- Ensure that previous audit recommendations are addressed and implemented.

- Ability to work under pressure in a fast-paced environment.

- Strong attention to detail with an analytical mind and outstanding problem-solving skills.

Technical & Behavioral Competencies

- Experience in IT Audit domain

- Having knowledge of COSO

- Past experience in SOX 404

Specific Qualifications (if required):

- B.E/M.E/B Tech/M Tech/BCA/MCA

- Good to have CISA certification or CISSP.