Senior IT Auditor
Core
Conduct IT and data privacy audits, perform security testing, and assess GRC frameworks to identify risks and control gaps across IT systems and business operations.
Role type
Senior IT Auditor (Risk & Compliance)
Builds
Audit reports, risk registers, and control recommendations for IT governance and compliance.
Domain
IT Audit, Cybersecurity, GRC, Financial Services/Manufacturing
Deliverable
dashboards & analysis
Required skills
IT audit, risk management, cybersecurity, compliance, penetration testing, vulnerability scanning, access management, encryption, SDLC, social engineering assessments, phishing simulations, process improvement, system upgrade, advisory services, data analysis
Preferred skills
Experience in Audit and Accounting firms, manufacturing or financial services industry, experience auditing systems and applications
Technologies
None explicitly listed
Responsibilities
Conduct scheduled and ad-hoc IT and data privacy audits; Review penetration testing, vulnerability scanning, and security audits; Prepare audit working papers and reports; Test IT applications, infrastructure, and data privacy controls; Collaborate with business units to integrate efficiency improvements; Identify and document process gaps or control weaknesses; Monitor and report changes in IT risk profiles; Conduct special reviews, spot checks, or investigations; Provide constructive feedback during audits; Follow up on implementation of recommendations; Participate in IT projects and product development to identify risks; Assess GRC frameworks and ensure alignment with standards; Maintain understanding of IT policies and data privacy protocols; Conduct social engineering assessments and phishing simulations; Participate in process improvement and system upgrade efforts; Provide advisory services to Risk management & Compliance functions; Report risk positions to the Head of IT Audit; Interpret and analyze reports/data to identify risk exposure
Seniority
Senior, 5-10 years experience