Job Description

This role is for one of our clients

Company name: CP HR Services
Industry: Finance
Seniority level: Mid-Senior level

Min Experience: 2 years
JobType: full-time
We are looking for a proactive

IT Auditor

to join our Risk & Compliance team and take ownership of reviewing and strengthening IT General Controls (ITGC) across critical systems supporting financial reporting. This role will involve working closely with external auditors, technology leaders, and subject matter experts (SMEs) to assess risks, validate controls, and ensure compliance with global protection standards and regulatory frameworks.

What You'll Do

Lead ITGC Reviews

- Perform end-to-end audits covering user access, change management, system operations, and segregation of duties.

Assess Critical Assets

- Review applications (SaaS, in-house, EUC, ETL), databases (Oracle, SQL, SAP, DB2), and servers (Windows, Linux, Unix) for compliance with internal and regulatory standards.

Evaluate Security Controls

- Test password policies, privileged access management, shared accounts, encryption, and environment controls.

Audit Change & System Management

- Examine change logging, approvals, deployment tool configurations, incident/error management, and ticketing processes.

Stakeholder Collaboration

- Partner with SMEs, platform leads, and external auditors for walkthroughs, sampling, and evidence validation.

Reporting & Insights

- Document findings, prepare audit reports, and communicate risks and remediation requirements to senior stakeholders.

Knowledge Sharing

- Contribute to internal training, testing support, and continuous improvement initiatives in audit practices.

What We're Looking For

Experience:

2-4 years in IT audit, IT governance, or risk management (Big 4 or financial services background preferred).

Knowledge Base:

Strong understanding of ITGC frameworks and Financial Reporting Control Frameworks (FRCF).
Familiarity with regulatory compliance requirements and IT governance models (e.g., COBIT, SOX).
Exposure to audit methodologies and risk assessment techniques.

Technical Skills:

Hands-on experience with applications, databases (Oracle, SQL, SAP, DB2), and server operating systems (Windows/Linux/Unix).
Understanding of access provisioning, privileged account management, and change control processes.

Soft Skills:

Excellent communication and report-writing skills.
Strong analytical mindset and attention to detail.
Ability to influence and collaborate across cross-functional teams.

Core Competencies

IT Audit & Risk Management
IT General Controls (ITGC) Testing
Financial Reporting Systems Compliance
Stakeholder Engagement & Reporting