Sr. Analyst - IT Infrastructure Audit

Overview

Plan and implement internal technology and infrastructure audit projects to evaluate internal controls across the organization, ensuring efficiency, alignment with industry protocols, and compliance with regulatory requirements.

What you'll do

• Conduct technology infrastructure and integrated audits, acting as both a team member and audit lead as appropriate.
• Plan audit scope, draft risk and control matrices, and define test procedures for technology and cybersecurity audits.
• Evaluate the adequacy and efficiency of technology controls across all risk areas through continuous auditing and monitoring.
• Manage multiple concurrent audit projects, balancing priorities to deliver results on time.
• Document findings and issues, ensuring alignment with corporate policies, procedures, and regulatory standards.
• Communicate technical findings clearly to both technical and non-technical audiences.
• Participate in operational, regulatory, and project audits to identify and assess key IT risks and controls.

What you'll need

• 3 to 6 years of risk-focused technology internal audit or related experience (e.g., cybersecurity and infrastructure audits).
• Experience auditing IT processes and governance, and IT infrastructure (networks, databases, operating systems, server configuration, virtualization platforms, container technologies such as Docker and Kubernetes, logging and monitoring, IaC, and cloud-native services).
• Experience auditing data centers and Cloud environments (AWS and Azure).
• Solid understanding of technology risk management principles and standards such as COBIT.
• Ability to write audit reports independently with minimal direction.
• Experience with audit tools such as TeamMate.
• Strong team player with excellent interpersonal, project management, and communication skills.
• Bachelor's degree in Information Systems, Cybersecurity, Computer Science, or a related field.

Nice to have

• Professional auditing certifications such as CISA (Certified Information Systems Auditor) or CISSP (Certified Information Systems Security Professional).
• Experience working with global teams.
• Proficiency in English with a strong customer service mindset.

Details

• Location: Bangalore technology center, India (Karnataka).
• Work closely with Nasdaq teams in other countries.