IT Audit & Compliance Analyst
We are looking for a detail-oriented and proactive IT Audit & Compliance Analyst to join our team. The ideal candidate will have hands-on experience in IT General Controls (ITGC), IT Application Controls (ITAC), and SOC 2 audit / compliance processes. You will be responsible for conducting control assessments, identifying risks, and supporting external / internal audits to ensure our systems meet regulatory and organizational compliance standards.
Key Responsibilities :
- Perform ITGC and ITAC assessments including access controls, change management, backup, and recovery. - Conduct SOC 2 Type I & Type II readiness assessments and audits. - Assist in scoping, planning, and executing IT compliance audits and reviews. - Work with cross-functional teams to perform control walkthroughs and test design and operating effectiveness. - Identify control gaps and recommend remediation actions. - Coordinate with internal stakeholders and external auditors for evidence collection and process clarifications. - Maintain audit documentation and support reporting for regulatory or client requirements. - Ensure compliance with applicable frameworks such as SOC 2, SOX, ISO 27001, etc. - Support continuous improvement initiatives in risk and compliance processes.
Primary Skills :
Strong knowledge of ITGC and ITAC testing - Hands-on experience with SOC 2 audits (Type I and II) - Familiarity with Trust Services Criteria and audit lifecycle - Understanding of risk and control frameworks - Good knowledge of access controls, change management, and IT operations - Proficiency in audit documentation and reporting - Knowledge of GRC tools like Archer, AuditBoard, ServiceNow (preferred) - Strong communication and documentation skillsEducational Qualifications :
Bachelor's degree in Information Technology, Computer Science, or a related field - Preferred : Certification like CISA, ISO 27001 LA, or similar (not mandatory but a plus)