ITGC Specialist Manager

Job Description – IT Risk Specialist (Manager)

The Manager is responsible for leading complex IT risk and controls engagements, driving client relationships, and ensuring high-quality delivery across ITGC, IT Infra and ITAC domains. This role involves strategic oversight, risk-based decision-making, and accountability for engagement quality, commercial outcomes, and team development.

Reports to: Associate Director / Director

Leads: Assistant Managers, Consultants, and Associates

Works with: Client leadership, audit teams, and cross-functional stakeholders

• Lead multiple large and complex ITGC, IT Infra and ITAC engagements across industries
• Own end-to-end engagement delivery including strategy, planning, execution oversight, review, and reporting
• Drive risk-based scoping, resource planning, and engagement strategy
• Provide oversight and final sign-off on control testing, RCMs, and audit documentation
• Exercise strong professional judgment in evaluating control design, execution, and deficiencies
• Challenge client control environments and provide value-added insights beyond compliance
• Manage client relationships and act as a primary point of contact for senior stakeholders
• Drive engagement profitability, including budgeting, pricing support, cost management, and scope control
• Lead escalation management, issue resolution, and audit committee-level discussions where required
• Develop and mentor team members, build capability pipelines, and ensure team performance
• Drive practice development through innovation, automation, and scaling of audit methodologies
• Contribute to business development through proposal support, client pitches, and opportunity identification

• B-Tech / BE / BCA / MCA / MBA / MCom (IT/Systems) or CA, both with CISA / CISSP / ISO 27001 LA certification
• 8–10 years of relevant IT audit/advisory experience with proven leadership responsibilities
• Strong expertise across ITGC domains, IT Infra controls and ITAC testing
• Deep understanding of ERP environments (SAP (preferred)/ Oracle / MS Dynamics) including configurations and integrations
• Ability to evaluate and challenge audit evidence, including system logs, configurations, and reports
• Strong stakeholder management with exposure to CXO-level interactions
• Experience managing multiple teams (at least 3-4 years team management experience) and large-scale engagements
• Exposure to SOC 1 / SOC 2 and regulatory engagements preferred

• Segregation of Duties (SoD) design and risk mitigation
• Privileged access management and emergency access controls
• System integrations, interfaces, and data flows
• System implementations, data migration, and transformation projects
• Use of analytics and automation in audit testing

1. Core Technical Skills:

• IT General Controls (ITGC), general
• IT General Controls (ITGC), SAP
• IT Infra Controls
• IT Application Controls (ITAC)
• SOX / ICFR / Internal Audit frameworks

1. Leadership & Commercial Skills:

• Client relationship management
• Team leadership and talent development
• Engagement economics and profitability management
• Business development and stakeholder influence

1. Preferred / Differentiating Skills:

• SOC 1 / SOC 2
• Audit analytics and automation tools
• ERP specialization (SAP/Oracle/MS Dynamics)

• ERP Systems: SAP (ECC/S4HANA), Oracle EBS, MS Dynamics
• Data analysis: Advanced Excel and analytics tools
• Workflow tools: ServiceNow, JIRA or equivalent
• AI tools: MS co-pilot

• Strong executive presence and stakeholder management
• Ability to influence, negotiate, and manage conflicts
• High ownership and accountability for results
• Ability to operate in ambiguity and drive decisions
• Continuous improvement mindset and innovation focus

Opportunity to lead strategic engagements, interact with CXO-level stakeholders, and contribute to business growth and practice transformation initiatives including automation and advanced analytics.