Manager IT - Audit & Compliance Specialist

Hi,

We are having an opening for Manager / Senior Manager-Audit & Compliance Specialist at our Mumbai location.

Job Summary : The Audit & Compliance Specialist will support the execution of global IT audit and compliance initiatives under the guidance of the Lead Audit & Compliance Specialist. This role is responsible for evidence coordination, audit documentation, remediation tracking, and regulatory readiness across IT Infrastructure, Cloud, and Service Delivery domains. The role will ensure timely closure of audit observations and continuous improvement of the compliance framework in alignment with SOX, GxP, ISO 27001, and other regulatory standards.

Areas Of Responsibility :

Key Responsibilities

1. Audit Support & Execution

Coordinate with IT domain teams to gather and validate audit evidence.

Support walkthroughs, gap analysis, and response preparation for internal and external audits.

Track status of remediation actions and support validation exercises.

2. Documentation & Controls Management

Maintain audit documentation including SOPs, control checklists, risk registers, and evidence logs.

Support creation of compliance dashboards and internal audit scorecards.

3. Compliance Monitoring & Reporting

Conduct periodic self-assessments and spot checks.

Monitor effectiveness of implemented controls and alert gaps to the lead specialist.

4. Stakeholder Coordination

Interface with Infra, Cloud, Service Delivery, Cybersecurity, and Business IT teams for audit preparedness.

Support training logistics and documentation for compliance awareness programs.

5. Improvement Initiatives

Identify automation opportunities in compliance processes.

Support tool-based audit management platforms (e.g., Archer, ServiceNow GRC).

6. Specialized Knowledge Requirements

Understanding of IT general controls, SOX, GxP, ISO 27001

Familiarity with ITIL processes (Change, Incident, Problem)

Exposure to audit lifecycle, compliance reporting, and evidence collection

Knowledge of tools like Excel, SharePoint, ServiceNow GRC preferred

Internal Stakeholders and Nature of Interaction

Lead Audit & Compliance : Daily coordination, status reviews, remediation validation

Infra, Cloud, App & Service Teams : Evidence submission, control reviews, audit walkthroughs

PMO & Compliance Team : Coordination on process documentation, control changes, and reporting

External Stakeholders and Nature of Interaction

Internal / External Auditors : Support during data requests, audit walkthroughs, and clarification rounds

Consulting Partners : Coordination during control testing or audit co-sourcing

External Interaction %

~2025% with external auditors, partners, and advisors

Nature of Communication

Formal audit evidence, tracker updates, control summaries, dashboards

Clear, structured communication during walkthroughs and audit Q&A

Role Played in Negotiations

Supports Lead in framing responses or remediation timelines for audit queries

Key Decision-Making Expected

Recommend evidence sufficiency, escalate control gaps, prioritize documentation readiness

Extent and Nature of Innovation Required

Moderate : Suggest improvements in evidence workflows, adopt templates for reusability

Use dashboards to simplify control visibility and audit traceability

Job Requirements

Educational Qualification :

Masters, Bachelors degree in IT, Computer Science, or related field

Certifications :

CISA or CRISC (preferred but not mandatory for entry level)

ITIL Foundation / GRC platform exposure is a plus

Experience :

5-12 years of experience in IT audit, controls, or compliance roles

Exposure to pharma or highly regulated industries is desirable

Skills :

Detail-oriented with good documentation practices

Strong Excel / SharePoint skills; familiarity with audit tools

Ability to handle multiple tasks and communicate with cross-functional teams