Testing & reporting on the Internal Controls over Financial Reporting (ICoFR) in compliance with the Sarbanes-Oxley Act (SOX).
Participating in process/ controls walkthroughs in collaboration with the control owners, 2nd line teams & Target’s external auditors, documenting the process/ control design evaluation & developing detailed test procedures.
Performing Design & Operating effectiveness testing for assigned IT General Controls (ITGC) areas like Identity Access management, Change management, Backup & Recovery, Incident & Problem Management, Batch Job Processing, SDLC, Business Continuity & Disaster Recovery.
Performing design & operating effectiveness testing of IT Application Controls (ITAC) including Scenario-based testing, Source code and interface control reviews, Review of IPE (Information Produced by the Entity), Key report validation across enterprise applications.
Performing internal audits covering IT infrastructure and information security in line with Internal Audit policies and standards and developing a strong understanding of the organization’s risk management framework, information security policies, and control procedures.
Communicating any findings noted during the testing and working with the internal audit auditors, 2nd line team, control owners & external auditors to assess the impact of the findings.
Maintaining high-quality audit execution, including timely delivery and adherence to documentation and quality standards.
Identifying opportunities to enhance audit efficiency through data analytics and automation.
Contributing to the optimization of controls testing processes for enhancing efficiency and transparency.
Taking ownership of professional development through proactive learning, stretch assignments, and cross-functional exposure.
Job duties may change at any time due to business needs.
About You.
Bachelor’s/ Master’s (3 or 4 years) in Computer Science, Information Technology, or a related field.
2–4 years of experience in internal or external audit with a high focus on SOX compliance
Strong hands-on experience in auditing IT General Controls (ITGC)
Experience of handling IT Application Controls (ITAC) (preferred).
Experience with SAP IT controls, including SAP security design, baseline controls, and leading practices (preferred).
Good understanding of IT risk management frameworks and standards such as SOX, COBIT, SSAE 18 / ISAE 3402.
Working knowledge of security controls across applications, operating systems, and databases.
Experience with enterprise systems and ERP platforms.
Strong analytical thinking and problem-solving skills, with the ability to work independently and drive outcomes.
Demonstrates initiative, ownership, and a high level of professionalism in a fast-paced environment.
Preferences
CISA, CISSP, CISM, ITIL, CIA, CCNA, CCSK, ISO27001 Lead Auditor
Big 4 Consulting experience
Retail Industry experience.