Associate Manager Internal Audit-IT

Job Summary:
We are looking for an experienced IT Audit Specialist with a proven track record in Big 4 consulting firms (Deloitte, PwC, EY, or KPMG). The ideal candidate must hold a valid CISA or CISSP certification and demonstrate deep expertise in IT general controls (ITGC), risk management, cybersecurity, and compliance. This role is focused solely on IT audits and advisory, not statutory or financial audits.

Key Responsibilities:
Lead and perform IT audits, including ITGC testing, automated controls reviews, and application audits across various environments.

Evaluate cybersecurity controls, risk mitigation practices, and IT governance processes.

Conduct assessments for SOX IT compliance, SOC 1/SOC 2, GDPR, and other regulatory frameworks.

Work closely with internal stakeholders and client teams to identify control weaknesses and recommend remediation strategies.

Participate in risk assessments, control design evaluations, and implementation of industry best practices.

Document findings, prepare reports, and present results to senior leadership or client executives.

Stay updated on emerging IT risks, technologies, and industry regulations to enhance audit effectiveness.

Required Qualifications:
6+ years of IT audit experience with exclusive background in Big 4 firms (Deloitte, PwC, EY, KPMG).

Professional certification: CISA (required); CISSP or other security certifications are a plus.

Strong knowledge of ITGCs, application controls, and security frameworks (COBIT, NIST, ISO 27001).

Experience in ERP systems audits (e.g., SAP, Oracle) and cloud environment assessments (AWS, Azure, GCP).

Strong analytical, documentation, and communication skills.

Ability to manage multiple projects and meet tight deadlines in a client-facing environment.

Preferred Skills:
Experience with SOC 1/SOC 2 reporting, vulnerability assessments, or data privacy audits.

Familiarity with tools like Archer, ServiceNow GRC, or audit analytics platforms.

Exposure to IT risk advisory or cybersecurity transformation projects.