Senior IT Internal Auditor

About the role

The Senior IT Internal Auditor will lead audit engagements across the organization, assessing the effectiveness of IT controls, risk management practices, and governance frameworks. This role ensures compliance with internal policies, regulatory requirements, and industry standards while providing actionable recommendations to improve security and operational resilience.

Key responsibilities

• Plan, execute and lead IT audit engagements according to the approved audit plan.
• Develop audit scopes, programs and testing procedures for ITGCs, application controls and system configurations.
• Assess user access management, data integrity, cybersecurity controls and overall IT risk impact on business operations.
• Evaluate compliance with standards such as ISO 27001, COBIT and NIST.
• Review ERP systems (Oracle, SAP) for control effectiveness and risk exposure.
• Prepare comprehensive audit reports with findings and recommendations and present them to senior management.
• Monitor remediation actions and ensure timely closure of audit findings.
• Perform data analysis using tools like ACL, IDEA and advanced Excel.
• Provide advisory support on IT projects, system implementations and control enhancements.

Required profile

• 4–7 years of experience in IT auditing or IT risk management.
• Strong background in IT general controls, application controls and security assessments.
• Experience auditing ERP environments such as Oracle and SAP.
• Bachelor’s degree in Information Technology, Computer Science or a related field.
• Professional certifications preferred: CISA (highly preferred), CIA, CRISC or CISSP.

Required skills

• IT audit frameworks: COBIT, ISO 27001, NIST.
• ERP system controls: Oracle, SAP.
• Data‑analysis tools: ACL, IDEA, advanced Excel.
• Cloud platforms: Oracle Cloud, AWS, Azure.
• Cybersecurity controls and risk assessment methodologies.