Audit Manager

Job Title: Audit Manager – SOC 2
Experience: 8–10 Years
Position Overview
We are seeking an experienced Audit Manager with strong hands-on expertise in SOC 2 (Type I & Type II) audits and enterprise GRC programs. The ideal candidate will have 8–10 years of experience leading end-to-end SOC 2 audit engagements, performing control walkthroughs, testing, evidence validation, risk assessments, and working closely with internal and external auditors. Experience with NIST CSF and other security frameworks is desirable.
This role involves leading end-to-end audit engagements, evaluating control effectiveness, identifying risks, managing remediation activities, and ensuring alignment with regulatory and industry standards. The Audit Manager will collaborate closely with technical and business teams to drive audit readiness, compliance maturity, and continuous improvement of security controls.
Key Responsibilities
Audit & Assessment Leadership
Lead end-to-end SOC 2 (Type I & Type II) audit engagements including planning, scoping, readiness assessments, control walkthroughs, evidence review, testing, gap analysis, and audit reporting.
Own and execute SOC 2 (Type I & Type II) audits, partnering with internal stakeholders and external auditors to ensure successful audit completion.
Oversee internal IT audits aligned to frameworks such as NIST 800-53, ISO 27001, SOX ITGC, PCI DSS, HIPAA, GDPR, etc.
Develop and maintain audit plans, test scripts, and control evaluation methodologies.
Control Evaluation & Risk Analysis
Assess IT and security controls, identifying control gaps, vulnerabilities, and areas of non-compliance.
Map audit findings to business risks, preparing clear and actionable risk narratives.
Evaluate design and operating effectiveness of technical, operational, and administrative controls.
Governance, Risk & Compliance
Support the development and maintenance of GRC processes, including control management, issue tracking, risk assessments, and policy compliance.
Work closely with teams to validate remediation plans, perform follow-up audits, and ensure timely closure of findings.
Use GRC platforms (ServiceNow GRC, Archer, MetricStream, etc.) for audit workflows, evidence management, and control monitoring.
Stakeholder Engagement & Reporting
Act as a key liaison with IT, Security, Engineering, Legal, and Compliance teams during audits.
Prepare audit reports, executive summaries, dashboards, and presentations for leadership.
Communicate audit results clearly and confidently to technical and non-technical stakeholders.
Provide advisory support to help teams design stronger controls and improve audit readiness.
Required Qualifications
8–10 years of hands-on experience in IT Audit, Cybersecurity Audit, or GRC functions with a strong focus on SOC 2 audits.
Mandatory hands-on experience leading SOC 2 Type I & Type II audits, including readiness assessments, control testing, evidence collection, auditor coordination, remediation tracking, and audit closure. Experience with NIST CSF is an added advantage.
Solid understanding of governance and compliance frameworks such as NIST 800-53, ISO 27001, SOC 2, SOX, COBIT, GDPR, etc.
Proficiency in ITGC audits, security control testing, and evidence validation.
Ability to translate technical findings into meaningful audit observations and business risks.
Experience with GRC tools for managing controls, assessments, and audit workflows.
Preferred Qualifications
Professional certifications such as CISA, CISSP, CRISC, CCSK, ISO 27001 Lead Auditor, or equivalents.
Experience working with external auditors or third-party assessors.
Exposure to regulated industries (Finance, Healthcare, Insurance, Technology, Critical Infrastructure).
Hands-on knowledge of risk management processes, remediation tracking, and control maturity assessments.
Experience designing audit metrics, KRIs, and control performance indicators.
Key Competencies
Strong audit leadership and project management skills.
Excellent understanding of IT risk, cybersecurity controls, and compliance requirements.
Analytical thinker able to assess complex control environments and develop concise findings.
Exceptional communication skills for both technical and executive-level audiences.
High attention to detail, accountability, and ability to manage multiple audits simultaneously.
Continuous improvement mind-set with the ability to drive compliance maturity.Job Title: Audit Manager – SOC 2
Experience: 8–10 Years
Position Overview
We are seeking an experienced Audit Manager with strong hands-on expertise in SOC 2 (Type I & Type II) audits and enterprise GRC programs. The ideal candidate will have 8–10 years of experience leading end-to-end SOC 2 audit engagements, performing control walkthroughs, testing, evidence validation, risk assessments, and working closely with internal and external auditors. Experience with NIST CSF and other security frameworks is desirable.
This role involves leading end-to-end audit engagements, evaluating control effectiveness, identifying risks, managing remediation activities, and ensuring alignment with regulatory and industry standards. The Audit Manager will collaborate closely with technical and business teams to drive audit readiness, compliance maturity, and continuous improvement of security controls.
Key Responsibilities
Audit & Assessment Leadership
Lead end-to-end SOC 2 (Type I & Type II) audit engagements including planning, scoping, readiness assessments, control walkthroughs, evidence review, testing, gap analysis, and audit reporting.
Own and execute SOC 2 (Type I & Type II) audits, partnering with internal stakeholders and external auditors to ensure successful audit completion.
Oversee internal IT audits aligned to frameworks such as NIST 800-53, ISO 27001, SOX ITGC, PCI DSS, HIPAA, GDPR, etc.
Develop and maintain audit plans, test scripts, and control evaluation methodologies.
Control Evaluation & Risk Analysis
Assess IT and security controls, identifying control gaps, vulnerabilities, and areas of non-compliance.
Map audit findings to business risks, preparing clear and actionable risk narratives.
Evaluate design and operating effectiveness of technical, operational, and administrative controls.
Governance, Risk & Compliance
Support the development and maintenance of GRC processes, including control management, issue tracking, risk assessments, and policy compliance.
Work closely with teams to validate remediation plans, perform follow-up audits, and ensure timely closure of findings.
Use GRC platforms (ServiceNow GRC, Archer, MetricStream, etc.) for audit workflows, evidence management, and control monitoring.
Stakeholder Engagement & Reporting
Act as a key liaison with IT, Security, Engineering, Legal, and Compliance teams during audits.
Prepare audit reports, executive summaries, dashboards, and presentations for leadership.
Communicate audit results clearly and confidently to technical and non-technical stakeholders.
Provide advisory support to help teams design stronger controls and improve audit readiness.
Required Qualifications
8–10 years of hands-on experience in IT Audit, Cybersecurity Audit, or GRC functions with a strong focus on SOC 2 audits.
Mandatory hands-on experience leading SOC 2 Type I & Type II audits, including readiness assessments, control testing, evidence collection, auditor coordination, remediation tracking, and audit closure. Experience with NIST CSF is an added advantage.
Solid understanding of governance and compliance frameworks such as NIST 800-53, ISO 27001, SOC 2, SOX, COBIT, GDPR, etc.
Proficiency in ITGC audits, security control testing, and evidence validation.
Ability to translate technical findings into meaningful audit observations and business risks.
Experience with GRC tools for managing controls, assessments, and audit workflows.
Preferred Qualifications
Professional certifications such as CISA, CISSP, CRISC, CCSK, ISO 27001 Lead Auditor, or equivalents.
Experience working with external auditors or third-party assessors.
Exposure to regulated industries (Finance, Healthcare, Insurance, Technology, Critical Infrastructure).
Hands-on knowledge of risk management processes, remediation tracking, and control maturity assessments.
Experience designing audit metrics, KRIs, and control performance indicators.
Key Competencies
Strong audit leadership and project management skills.
Excellent understanding of IT risk, cybersecurity controls, and compliance requirements.
Analytical thinker able to assess complex control environments and develop concise findings.
Exceptional communication skills for both technical and executive-level audiences.

Work arrangement
No