IT Assurance and Audit Analyst- INTL India

Overview

We are looking for an IT Assurance Support Personnel, in a senior engineer capacity. Perform IT control assessments and audit activities across enterprise platforms such as SAP, Salesforce, Service Now, and other business-critical systems. Validate the design and operating effectiveness of IT controls through manual testing, evidence review, and control walkthroughs. Conduct assessments against established compliance frameworks including PCI-DSS, ISO 27001, and other relevant security and regulatory standards.

Identify control gaps, document findings, and partner with business and technology stakeholders to develop remediation plans. Create, update, and maintain IT policies, procedures, and control documentation as needed to address audit findings and strengthen compliance posture. Manage audit evidence collection and documentation activities, ensuring all evidence is complete, accurate, and audit-ready. Utilize Optro (preferred) or similar GRC platforms such as RSA Archer to manage assessments, track controls, upload evidence, and monitor remediation efforts.

Maintain and update risk registers, documenting identified risks, mitigation activities, control owners, and remediation status. Coordinate with cross-functional teams to drive corrective actions, track progress, and ensure timely closure of audit findings. Leverage technical knowledge of IT systems, security controls, and business applications to effectively evaluate compliance and risk across various technology environments. Support multiple concurrent IT assurance, compliance, and audit initiatives while maintaining strong project organization and stakeholder communication.

Pay Rate: $5.00- $11.00 depending on skills and experience

• Perform IT control assessments and audit activities across enterprise platforms (e.g., SAP, Salesforce, Service Now) and other business-critical systems.
• Validate the design and operating effectiveness of IT controls through manual testing, evidence review, and control walkthroughs.
• Assess compliance against frameworks such as PCI-DSS, ISO 27001, and other relevant standards.
• Identify control gaps, document findings, and partner with business and technology stakeholders to develop remediation plans.
• Create, update, and maintain IT policies, procedures, and control documentation to address audit findings and strengthen compliance posture.
• Manage audit evidence collection and documentation to ensure completeness, accuracy, and audit readiness.
• Utilize Optro or RSA Archer (or similar GRC platforms) to manage assessments, track controls, upload evidence, and monitor remediation efforts.
• Maintain and update risk registers with risk descriptions, mitigations, control owners, and remediation status.
• Coordinate with cross-functional teams to drive corrective actions, track progress, and ensure timely closure of findings.
• Leverage IT systems and security controls knowledge to evaluate compliance and risk across technology environments.
• Support multiple concurrent IT assurance, compliance, and audit initiatives with strong project organization and stakeholder communication.

• IT assurance and general IT audit experience is a plus
• Strong understanding of Governance, Risk, and Compliance (GRC) concepts and processes
• Familiarity with common security, risk, and compliance frameworks (NIST, ISO 27001, CIS Controls, PCI-DSS or other major frameworks)
• Experience supporting audit remediation efforts, corrective action tracking, and issue management
• Ability to develop and manage project plans, including tracking milestones, dependencies, and deliverables
• Strong organizational, documentation, and stakeholder communication skills
• Experience coordinating with business and technology teams to collect evidence and drive remediation activities
• Ability to work U.S. business hours if possible
• Experience with audit platforms such as Archer, Audit Board, Optro, Service Now GRC, or other GRC tools
• Experience with audit process automation and efficiency initiatives
• Familiarity with Service Now, risk registers, and other GRC platforms
• Exposure to cloud security, cybersecurity governance, compliance, or third-party risk…