ITGC Audit Specialist

IT Audit & Compliance Analyst

We are looking for a detail-oriented and proactive IT Audit & Compliance Analyst to join our team. The ideal candidate will have hands-on experience in IT General Controls (ITGC), IT Application Controls (ITAC), and SOC 2 audit/compliance processes. You will be responsible for conducting control assessments, identifying risks, and supporting external/internal audits to ensure our systems meet regulatory and organizational compliance standards.

Key Responsibilities:

• Perform ITGC and ITAC assessments including access controls, change management, backup, and recovery.

• Conduct SOC 2 Type I & Type II readiness assessments and audits.

• Assist in scoping, planning, and executing IT compliance audits and reviews.

• Work with cross-functional teams to perform control walkthroughs and test design and operating effectiveness.

• Identify control gaps and recommend remediation actions.

• Coordinate with internal stakeholders and external auditors for evidence collection and process clarifications.

• Maintain audit documentation and support reporting for regulatory or client requirements.

• Ensure compliance with applicable frameworks such as SOC 2, SOX, ISO 27001, etc.

• Support continuous improvement initiatives in risk and compliance processes.

Primary Skills:

• Strong knowledge of ITGC and ITAC testing

• Hands-on experience with SOC 2 audits (Type I and II)

• Familiarity with Trust Services Criteria and audit lifecycle

• Understanding of risk and control frameworks

• Good knowledge of access controls, change management, and IT operations

• Proficiency in audit documentation and reporting

• Knowledge of GRC tools like Archer, AuditBoard, ServiceNow (preferred)

• Strong communication and documentation skills

Educational Qualifications:

• Bachelor's degree in Information Technology, Computer Science, or a related field

• Preferred: Certification like CISA, ISO 27001 LA, or similar (not mandatory but a plus)