ITGC Auditor Support

About the Role The ITGC Auditor Support role is responsible for evaluating, testing, and improving IT General Controls across the organization to ensure compliance with IT control requirements and internal policies. It supports audit readiness, risk mitigation, and strengthens control environments across IT systems and processes. What You'll Do

• Audit Execution: Perform IT General Controls (ITGC) audits covering Access Management (user provisioning, de-provisioning, privileged access), Change Management (SDLC controls, emergency changes, approvals), and IT Operations (job monitoring, backups, incident management); conduct walkthroughs and document process flows; execute control testing (design and operating effectiveness).
• Risk & Compliance Assessment: Identify control gaps, weaknesses, and non-compliance issues; map IT controls to frameworks such as SOX, ISO 27001, NIST, COBIT, NIS2 (where applicable); evaluate IT risks and recommend remediation actions.
• Audit Documentation: Prepare clear and concise audit workpapers and evidence; draft audit reports including observations, risk ratings (High / Medium / Low), root cause analysis, remediation recommendations; ensure documentation meets internal and external audit standards.
• Stakeholder Engagement: Collaborate with IT, Security, and business teams; conduct audit meetings and walkthrough sessions with stakeholders; track remediation actions and follow-ups with control owners.
• Continuous Monitoring & Improvement: Support ongoing ITGC monitoring programs; recommend process improvements and automation opportunities. What We're Looking For
• Education: Bachelor’s degree in Information Technology, Computer Science, or related field.
• Experience: 3–8 years of experience in IT audit, IT risk, or IT compliance; hands-on experience in ITGC audits for enterprise systems (SAP, Oracle, Windows/Linux environments).
• Technical understanding: Deep understanding of minimum two technologies from below but not limited to: Windows Servers, SQL, Unix Servers (RHEL, AIX, zLinux, SuSe etc), Oracle, PostgreSQL, Mainframe (zOS), IBMi (AS400), SAP; Azure/AWS; Active Directory; IAM; ServiceNow (technical).
• Key Skills & Competencies: Strong understanding of access controls (RBAC, IAM tools); change management processes; IT operations (backup, scheduling, incident management); GRC tools (ServiceNow GRC, Archer, MetricStream); data analysis tools (Excel, Power BI); ticketing tools (ServiceNow).
• Certifications (Preferred): CISA (Certified Information Systems Auditor); ISO 27001 Lead Auditor.
• Key Deliverables: Risk assessments and remediation tracking logs; audit evidence aligned with compliance requirements. Nice to Have
• CISA (Certified Information Systems Auditor)
• ISO 27001 Lead Auditor