Black Box

End-to-end digital infrastructure and IT services

IT Internal Auditor

Internal Audit & ControlsConfirmed live in the last 24 hours

Full-timeBengaluru, Karnataka, IndiaNo salary listedIn-person

About the Job

Requirements

A bachelor's degree in Information Systems, Computer Science, Accounting, or a related field is required.
Four to six years of experience in IT audit, IT risk, information security, or a related internal audit function is required.
A solid understanding of IT general controls, application controls, and IT risk frameworks such as COBIT and NIST Cybersecurity Framework is required.
Knowledge of internal audit requirements under ISO 27001, ISO 9001, ISO 20000, ISO 42001, and ISO 14001, including experience supporting certification or surveillance audits against these standards, is required.
Experience auditing technical controls within SAP ECC, S/4HANA, and Fiori environments is required, including segregation of duties, authorization and role design, basis security, RFC and interface controls, change transport management, and SAP GRC.
Exposure to privacy regulations such as GDPR and CCPA and to data governance practices is required.
Experience auditing cloud environments such as AWS, Azure, or GCP, and enterprise systems such as ERP systems, databases, and networks is required.
Experience testing controls over cybersecurity tools and platforms is required, including SIEM platforms such as CrowdStrike Falcon Next-Gen, vulnerability management tools such as Tenable, Nessus, Kali, or Burp Suite, and endpoint detection and response tools such as CrowdStrike or Microsoft Defender.
Familiarity with auditing AI and machine learning systems and governance controls, including model risk, data lineage, and bias or explainability, and experience using AI-enabled tools for audit testing and analytics, is required.
Strong analytical, written, and verbal communication skills are required, including the ability to translate technical findings for non-technical stakeholders.
The ability to manage multiple audit engagements independently and meet deadlines is required.
Mastery of Excel spreadsheet dashboards, task creation, pivot tables, and presentations of audit status and final reports is required.

Responsibilities

Plan and execute annual IT internal audits covering infrastructure, applications, cybersecurity, cloud environments, and third-party vendors.
Evaluate IT general controls, including access management, change management, backup and recovery, and physical and environmental security.
Assess IT application controls and data integrity across key business systems, including ERP, financial systems, and customer platforms, covering input, processing, output, and interface controls.
Review cybersecurity posture, including vulnerability management, incident response, and network security controls.
Participate in audits of the system development lifecycle and new technology implementations.
Identify control gaps, document findings, and assess associated business risk.
Prepare clear, well-supported audit workpapers and reports for management and the Audit Committee.
Track remediation of prior audit findings and validate closure.
Stay current on emerging IT risks, regulatory changes, and industry frameworks, including COBIT, NIST, ISO 27001, ISO 9001, and ISO 20000.
Collaborate with IT, Security, and business unit leaders to strengthen the control environment.

Desired Qualifications

Experience or exposure to data analytics tools such as SQL, ACL, or Power BI for audit testing.
Familiarity with DevOps and agile environments and continuous auditing techniques.
Prior experience at a Big Four or public accounting firm, or in a regulated industry such as financial services, healthcare, or technology.
One or more professional certifications such as CISA, CISSP, CRISC, or CIA.

Job Overview

Blackbox is seeking a detail-oriented IT Internal Auditor to evaluate the design and operating effectiveness of information technology controls across the organization. This role assesses IT general controls, application controls, cybersecurity practices, data governance, and system implementations to ensure alignment with regulatory requirements, industry standards, and internal policies. The successful candidate will work closely with IT, Security, and business stakeholders to identify risks, recommend improvements, and support the organization's broader risk management and compliance objectives across the year.

Key Responsibilities

Plan and execute IT internal audits covering infrastructure, applications, cybersecurity, cloud environments, and third-party vendors annually.
Evaluate IT general controls (ITGCs) including access management, change management, backup/recovery, and physical/environmental security
Assess IT application controls (ITAC) and data integrity across key business systems (ERP, financial systems, customer platforms), including input, processing, output, and interface controls
Review cybersecurity posture, including vulnerability management, incident response, and network security controls
Participate in audits of system development lifecycle (SDLC) and new technology implementations
Identify control gaps, document findings, and assess associated business risk
Prepare clear, well-supported audit workpapers and reports for management and the Audit Committee
Track remediation of prior audit findings and validate closure
Stay current on emerging IT risks, regulatory changes, and industry frameworks (COBIT, NIST, ISO 27001, 9001, 20000)
Collaborate with IT, Security, and business unit leaders to strengthen the control environment

Required Qualifications & Skills

Bachelor’s degree in information systems, Computer Science, Accounting, or a related field
4-6 years of experience in IT audit, IT risk, information security, or a related internal audit function
Solid understanding of IT general controls, application controls, and IT risk frameworks (COBIT, NIST CSF)
Knowledge of internal audit requirements under ISO 27001 (information security management), ISO 9001 (quality management), ISO 20000 (IT service management), ISO 42001 (AI), ISO 14001 (environmental management) including experience supporting certification or surveillance audits against these standards
Experience auditing technical controls within SAP environments (SAP ECC, S/4HANA, and Fiori), including segregation of duties (SoD), authorization/role design, basis security, RFC/interface controls, change transport management, and SAP GRC
Exposure to privacy regulations (GDPR, CCPA) and data governance practices
Experience auditing cloud environments (AWS, Azure, or GCP) and enterprise systems (ERP, databases, networks)
Experience testing controls over cybersecurity tools and platforms, such as SIEM ( CrowdStrike Falcon Next-Gen), vulnerability management (Tenable/Nessus/Kali/Burp Suite), and endpoint detection & response (CrowdStrike, Microsoft Defender)
Familiarity with auditing AI/ML systems and governance controls (model risk, data lineage, bias/explainability), and experience using AI-enabled tools for audit testing and analytics
Strong analytical, written, and verbal communication skills, with the ability to translate technical findings for non-technical stakeholders
Ability to manage multiple audit engagements independently and meet deadlines
Mastery in excel sheets dashboard creation , task creation , pivot tables and presentations of Audit status and final reports .

Preferred Experience (Not Required)

Experience/exposure with data analytics tools (SQL, ACL, Power BI) for audit testing
Familiarity with DevOps/agile environments and continuous auditing techniques
Prior experience at a Big 4 or public accounting firm, or in a regulated industry (financial services, healthcare, technology)

Preferred Certifications

Any one or more professional certification such as CISA, CISSP, CRISC, or CIA

Location

Bangalore, Karnataka, INDIA

About the Company

Black Box

End-to-end digital infrastructure and IT services

Black Box provides digital infrastructure solutions for large enterprises and public-sector clients, designing, integrating, and managing IT environments. It offers services and products across networking, data centers, cybersecurity, unified communications, and digital workplace, along with consulting, project management, and managed services to design, deploy, and operate systems. The company differentiates itself as a vendor-agnostic integrator with a global delivery footprint, offering end-to-end capabilities from initial design to ongoing support. Its goal is to help organizations build scalable, reliable digital infrastructure across distributed locations to support modern operations.

Company size: Not listed
Company stage: IPO
Headquarters: Plano, TX
Founded: 1976

Recently Posted Jobs

Explore more opportunities at Black Box

See more jobs