IT Auditor (4+ Years in IT audit + SOX + Cloud platform and infra + internal Audit)

The posting

IT Auditor, GCC – Assurant

The IT Auditor is responsible for evaluating and strengthening Assurant’s IT control and risk environment through the execution of risk-based IT audits and advisory activities. Working as part of the Internal Audit & Advisory Services (IAAS) team, this role partners with business and technology stakeholders to assess risks, evaluate control effectiveness, identify improvement opportunities, and provide objective assurance across the organization.

This role contributes by performing independent audits across technology domains, supporting enterprise risk assessments, and communicating meaningful insights that help management make informed decisions. Through strong analytical skills, stakeholder engagement, and adherence to audit methodology and professional standards, the Sr. IT Auditor I helps protect and enhance Assurant's operational effectiveness and risk management framework.

This role will focus on:

· Risk-Based IT Audits

· IT General Controls (ITGC) Assessment

· Technology Risk Management

· Internal Control Evaluation

· Audit Planning and Execution

· Enterprise Risk Assessment Support

· Audit Reporting and Stakeholder Communication

· Professional Practice and Continuous Improvement Initiatives

This position will be based in Bengaluru, Chennai and Hyderabad, India.

Work Hours – 3:30 PM – 12:30 AM IST

What will be my duties and responsibilities in this job?

IT Audit Planning & Execution

· Participate in risk-based IT audits across business processes, applications, infrastructure, cloud environments, cybersecurity, and technology operations.

· Design and execute audit procedures through all phases of the audit lifecycle, including planning, fieldwork, testing, reporting, and follow-up activities.

· Evaluate the adequacy and effectiveness of internal controls and identify opportunities to strengthen the control environment.

· Develop audit programs and testing strategies aligned with audit objectives, organizational risks, and professional auditing standards.

· Assist in annual risk assessments and audit planning activities across the enterprise.

· Follow up on audit findings and recommendations to evaluate remediation effectiveness.

Risk Assessment & Control Evaluation

· Assess IT risks associated with change management, logical access, information security, system development, data privacy, databases, networks, and IT operations.

· Analyze business processes, technologies, and emerging trends to identify control gaps and operational risks.

· Evaluate compliance with internal policies, industry standards, and regulatory requirements.

· Provide recommendations that balance risk mitigation with business objectives.

Stakeholder Engagement & Communication

· Communicate audit findings, observations, and recommendations through concise written reports and presentations.

· Collaborate with business leaders, technology teams, and audit stakeholders throughout audit engagements.

· Build strong working relationships and establish credibility as an independent and trusted advisor.

· Translate technical audit results into business-focused insights and actionable recommendations.

Professional Practice & Continuous Improvement

· Participate in Internal Audit initiatives, centers of excellence, and methodology enhancement activities.

· Support quality assurance and continuous improvement programs aligned with IIA standards.

· Contribute to departmental knowledge sharing, training, and capability development.

· Assist in developing and maintaining audit methodologies, policies, procedures, and documentation.

· Participate in regulatory and legal information requests, when required.

· Support internal communication and knowledge management activities within SharePoint and other collaboration platforms.

Business Partnership & Development

· Develop a strong understanding of Assurant’s businesses, operating environment, and strategic priorities.

· Stay informed of technology, cybersecurity, regulatory, and industry developments that may impact risk management practices.

· Pursue ongoing professional development and share knowledge and lessons learned with colleagues.

What are the requirements needed for this position?

Education

· Bachelor's degree in Information Technology, Computer Science, Business, Accounting, Finance, Information Systems, Risk Management, or a related discipline.

· Equivalent combination of education and relevant experience may be considered.

Experience: Overall 4+ Years.

· 2-3 years of experience in Internal Audit, External Audit, IT Audit, Technology Risk, Information Security, Compliance, or related technology-focused roles.

· Experience performing audit testing, risk assessments, control evaluations, and audit documentation.

· Experience collecting and analyzing complex information and drawing logical conclusions.

· Experience preparing professional written reports and presenting findings to stakeholders.

· Experience collaborating with cross-functional business and technology teams.

Core Skills & Competencies

· Strong knowledge of risk-based audit methodologies and internal control frameworks (COSO, IIA IPPF, etc.).

· Understanding of IT General Controls (ITGCs), risk assessment techniques, governance frameworks, and audit standards.

· Knowledge of cloud technologies, infrastructure, databases, systems development, networking, cybersecurity, logical access controls, and information security practices.

· Strong analytical and critical-thinking skills with the ability to identify root causes and recommend practical solutions.

· Ability to work independently, navigate ambiguity, and manage multiple priorities.

· Excellent verbal and written communication skills.

· Strong stakeholder management and collaboration capabilities.

· Ability to document work thoroughly and maintain audit evidence in accordance with professional standards.

· Proficiency with Microsoft Office tools, particularly Excel and PowerPoint.

· Experience using data analytics techniques and tools to support audit activities.

Preferred Qualifications

· Professional certifications such as CISA, CISSP, CRISC, CISM, CIA, CPA, or equivalent.

· Experience within the insurance, financial services, banking, or highly regulated industries.

· Experience auditing cloud platforms, cybersecurity controls, privacy controls, and technology governance frameworks.

· Familiarity with enterprise risk management, compliance, and regulatory environments.

· Experience using Power BI, Tableau, or other data visualization and analytics tools.

· Experience creating and maintaining content within SharePoint environments.

· Knowledge of business process improvement methodologies such as Lean or Six Sigma.

· Experience managing project plans, issue logs, risk registers, and remediation activities.

Helping People Thrive in a Connected World Connect with us. Bring us your best work and your brightest ideas. And we’ll bring you a place where you can thrive. Learn more at jobs.assurant.com.

What’s the culture like at Assurant? Our unique culture is a big reason why talented people choose Assurant. Named a Best/Great Place to Work in 14 countries and awarded the Fortune America’s Most Innovative Companies recognition, we bring together top talent around the world. Although we have a wide variety of skills and experiences, we share common characteristics that are uniquely Assurant. A passion for service. An ability to innovate in practical ways. And a willingness to take chances. We call our culture The Assurant Way.

Company Overview Assurant is a leading global business services company that supports, protects, and connects major consumer purchases. A Fortune 500 company with a presence in 21 countries, Assurant supports the advancement of the connected world by partnering with the world’s leading brands to develop innovative solutions and deliver an enhanced customer experience through mobile device solutions, extended service contracts, vehicle protection services, renters insurance, lender-placed insurance products, and other specialty products.

AI and Biometric Usage

Assurant supports the responsible use of Artificial Intelligence (AI), but we want to know the real you. Visit our AI Usage Guidelines page to understand what we expect from applicants regarding their use of AI during the application process. Since we would like to know the real you, we require that all of our virtual interviews be conducted on video.

Employment is contingent upon completion of a required identity verification process, which may include biometric technology, where permitted by applicable law and subject to applicable notice and consent requirements. See our Privacy Notice to learn about Assurant’s privacy practices, including our use of AI-enabled technology, automated decision making, and biometric information.

Job Scam Alert Please be aware that during Assurant's application process, we will never ask for personal information such as your National ID number, bank account details, or passwords. Learn more about what to look out for and how to report a scam here.