Senior IT Audit

Аналитика рынка

Стек

Откликнуться

Загрузите резюме — мы свяжем вас с работодателем напрямую через нашу базу.

Описание

Key Responsibilities Perform risk-based IT audits covering IT governance, cybersecurity, IT operations, applications, infrastructure, and regulatory compliance. Support the development of the IT Audit Universe , risk assessment, annual audit plan, and audit programs. Conduct end-to-end audit activities including planning, fieldwork, documentation, reporting, and follow-up. Review IT General Controls (ITGC) including access management, change management, IT operations, asset management, backup/DR, BCP, cybersecurity, vulnerability management, and physical/environmental controls. Perform audits of SAP/Oracle ERP, applications, databases, networks, Active Directory, Windows/Linux, cloud, virtualization, and data center environments . Identify control weaknesses and technology risks, assess business impact and root causes, and provide practical recommendations. Prepare audit reports and presentations and communicate findings with IT, Business Units, Risk, Compliance, and other stakeholders. Monitor corrective action plans and follow up on outstanding audit issues. Support data analytics, audit process improvement, special audits, and other assignments as required. Qualifications Bachelor’s or Master’s degree in IT, Computer Science, Information Systems, Accounting, or related fields . 3–5 years of experience in IT Audit, IT Risk, Technology Risk, IT Governance, IT Compliance, or related areas. Good knowledge of ITGC, cybersecurity, IT governance, technology risk, and internal controls . Experience with SAP and/or Oracle ERP and knowledge of IT infrastructure, applications, databases, networks, and cloud environments. Knowledge of COBIT, ISO 27001, NIST, or other relevant IT governance and cybersecurity frameworks. Strong analytical, problem-solving, report-writing, presentation, and stakeholder management skills. Good command of written and spoken English. Professional certifications such as CISA, CIA, CISSP, or CRISC would be an advantage.

Контакты работодателя (email/phone/telegram) скрыты из публичного превью — отправьте резюме, чтобы мы связали вас напрямую.