Senior Technology Internal Auditor

Overview

Join Intuit’s Internal Audit department as a Senior Technology Internal Auditor within our Center of Excellence (CoE). Internal Audit is part of Intuit’s Finance organization, which plays a critical role in accelerating growth, enabling operational excellence at scale, and creating sustainable value across Intuit's evolving platform.

Join Intuit’s Internal Audit department as a Senior Technology Internal Auditor within our Center of Excellence (CoE). Internal Audit is part of Intuit’s Finance organization, which plays a critical role in accelerating growth, enabling operational excellence at scale, and creating sustainable value across Intuit's evolving platform. The Internal Audit team aims to provide independent assurance that Intuit’s risk management, governance and internal control processes are operating effectively.

We are a small team that is looking to expaånd and bring on motivated professionals in this field. We don’t think of ourselves as a typical audit function - we are obsessively focused on risks to the organizations which reflects in the type of projects we support and execute. As an individual contributor, you will support and execute technology-focused assurance and advisory audits, with a strong emphasis on cybersecurity and privacy.

You will report to the CoE Senior Manager based in Bangalore and collaborate with global partners across Engineering, IT, Security, Privacy and other functions in this fast-paced, evolving environment based in global locations (e.g., US, India, Israel, etc.).

• Play a key role in the first-ever Security audit function within Internal Audit in Bangalore, India, developing foundational processes and methodologies.
• Assess security-related risks aligning with organizational priorities and industry best practices.
• Support and execute risk-based IT and cybersecurity audit plans, including scoping, testing, and reporting of various security domains, including vulnerability management, access control, incident response, data security, and cloud security, with minimal supervision.
• Leverage your understanding of leading industry regulations and standards, including NIST, ISO 27001, SOC 2, and PCI DSS to deliver robust cybersecurity and privacy audits.
• Partner with Security and Privacy teams to understand Intuit’s risk profile and apply this understanding during audit execution.
• Work cross-functionally with engineering and security teams to identify, test, and evaluate IT and security controls for compliance with information security and privacy requirements.
• Assist in evaluating audit findings, documenting risk implications, performing an initial root cause assessment, and tracking remediation actions.
• Draft clear and well-supported audit documentation and reports, ensuring accuracy, consistency, and alignment with Internal Audit standards.
• Build ongoing relationships with business partners and key stakeholders across the engineering and security organizations to support a strong risk and control mindset.
• Collaborate with Internal Audit team members and co-sourcing partners to ensure timely, high-quality, consistent audit execution.
• Contribute to continuous improvement efforts, including the use of automation and new audit techniques.
• Contribute to department-wide initiatives, including process improvements and adoption of new guidance and methodologies.
• Develop deep institutional knowledge of Intuit’s products, systems, and processes, and stay current with industry trends, emerging risks, and regulatory requirements.

• Bachelor’s or Master’s degree in a relevant discipline (e.g., Computer Science, Information Systems) or equivalent discipline
• 4+ years of relevant experience in Internal Audit, Technology Audit, Big 4 Public Accounting, or industry roles with a technology risk focus
• Experience performing technology audits using frameworks such as NIST, COBIT, ISO, or similar
• Demonstrated knowledge of technology risks, including cybersecurity, privacy, engineering controls and AI/ML risks
• Understanding of cloud computing environments, including experience or familiarity with auditing controls in an AWS (Amazon Web Services) or GCP…