UNO Minda Ltd.—Senior Deputy Manager - IT

Job description

Description: Job Description Deputy Manager / Manager – IT Audit & Compliance Position Overview We are looking for an experienced IT Audit & Compliance professional to lead and execute IT audits, IT General Controls (ITGC), SOX compliance, IT risk assessments, cybersecurity control assessments, and third-party risk reviews. The role will work closely with IT, Information Security, business stakeholders, internal/external auditors, and senior management to strengthen the organization's technology risk and control environment. Key Responsibilities 1. IT Audit & ITGC - Lead and execute ITGC audits covering Access Management, Change Management, Program Development, and IT Operations. - Conduct business process walkthroughs, identify key risks and controls, and evaluate control design and operating effectiveness. - Develop and review Risk Control Matrices (RCMs) and audit workpapers. - Conduct testing of controls and identify control gaps, observations, and remediation requirements. - Prepare and present audit reports to senior management with actionable recommendations. - Coordinate and manage concurrent internal and external IT audits, ensuring timely submission of audit evidence. 2. SOX & IT Compliance - Lead SOX 404 ITGC compliance activities, including Test of Design (ToD) and Test of Effectiveness (ToE). - Support statutory and regulatory audits by preparing and reviewing critical audit evidence. - Monitor compliance with internal policies, standards, and regulatory requirements. - Evaluate User Access Reviews (UAR), termination controls, change management controls, and management review controls. 3. IT Risk & Cybersecurity - Conduct IT risk assessments covering applications, infrastructure, databases, networks, and information security controls. - Assess cybersecurity controls across areas such as: - Access Management - Secure Configuration - Network Security - Encryption - Vulnerability Management - Business Continuity & Disaster Recovery - Secure Development - Data Security - Conduct application criticality and risk-tier assessments based on business impact, data classification, and data flows. - Support ISO 27001 assessments and information security compliance initiatives. - Review controls for Data at Rest (DAR) and Data in Motion (DIM). 4. Third-Party Risk Management - Lead IT and cybersecurity risk assessments for critical vendors and service providers. - Develop and review third-party risk assessment questionnaires and control checklists. - Evaluate vendor controls, identify gaps, and track remediation actions. - Review SOC reports and assess controls implemented by service organizations. 5. SAP & Technology Controls - Conduct ITGC and application control assessments for SAP ERP / SAP S/4HANA environments. - Assess access, change management, and IT operations controls across enterprise applications. - Partner with IT and application owners to strengthen control effectiveness and audit readiness. 6. Stakeholder & Audit Management - Act as a key point of contact for internal, external, statutory, and regulatory auditors. - Collaborate with CISO, CIO, IT Heads, Application Owners, Business Owners, and Risk & Compliance teams. - Lead audit discussions, walkthroughs, observation meetings, and remediation tracking. - Present audit findings and risk observations to senior stakeholders. - Guide junior team members and manage multiple audit engagements simultaneously. Key Deliverables - Timely completion of ITGC and IT audit engagements. - Effective SOX 404 compliance and control testing. - Strengthened IT risk and cybersecurity control environment. - Timely closure of audit observations and remediation actions. - Improved audit readiness and evidence management. - Effective third-party/vendor risk management. - High-quality audit reports and management presentations. Qualifications - Bachelor's degree in Technology, Computer Science, Information Systems, Engineering, Cybersecurity, or a related discipline. - Relevant professional certifications such as ISO 27001, CISA, CISM, CISSP, CRISC or equivalent will be an advantage. - Strong understanding of IT audit, ITGC, SOX 404, IT risk, cybersecurity, and information security frameworks. Experience - 5–8 years of relevant experience in IT Audit, IT Risk, IT Compliance, IT Assurance, Cybersecurity Controls, or Technology Risk. - Experience in Big 4 / consulting / financial services / manufacturing / automotive / technology environments will be preferred. - Experience in leading audits and managing multiple stakeholders is desirable. Technical Skills - ITGC & SOX 404 - IT Audit & IT Assurance - IT Risk Assessment - Cybersecurity Controls - ISO 27001 - NIST Framework - Third-Party / Vendor Risk Management - SOC 1 / SOC 2 Reviews - Access Management & UAR - Change Management - Business Continuity & Disaster Recovery - SAP / SAP S/4HANA - Risk Control Matrix (RCM) - Control Testing – ToD & ToE - Archer GRC / ServiceNow - Microsoft Excel Key Competencies - Strong analytical and problem-solving skills - Audit planning and execution - Risk-based thinking - Stakeholder management - Strong written and verbal communication - Report writing and presentation skills - Ability to manage multiple audits and priorities - Team leadership and mentoring - Strong attention to detail - Ability to work with senior management and cross-functional teams