IT Audit Intern

Function: Internal Audit
Role: IT Audit Intern
Location: Corporate Office
Internship Duration: 3 to 6 months
Eligibility: Final-year / pre-final-year students or recent graduates

About the Role

We are looking for a motivated and analytical IT Audit Intern to work with our Internal Audit team. The intern will gain practical exposure to technology audits covering IT general controls, cybersecurity, applications, infrastructure, cloud environments, data analytics, and technology governance.

The internship will provide an opportunity to understand how technology risks and controls are assessed in a large enterprise environment and to participate in audit activities including process understanding, data analysis, control testing, evidence review, identification of control gaps, and preparation of audit documentation.

Our internal audit methodology emphasizes understanding processes and controls, gathering and evaluating evidence, risk analysis, and assessing control efficiency and effectiveness. The team's current technology audit coverage also includes areas such as access management, authentication and security settings, change management, logging and monitoring, interfaces and integrations, backup/DR, third-party risk, and infrastructure security.

Key Responsibilities

The intern will support the IT Audit team in:

• Understanding business processes, IT applications, infrastructure, and associated technology risks.
• Assisting in IT General Controls (ITGC) testing, including:
• User access management and privileged access
• Authentication and security configurations
• Change and release management
• IT operations
• Backup, recovery and disaster recovery
• Logging and monitoring
• Supporting reviews of cybersecurity controls, including network security, endpoint security, vulnerability management, remote access/VPN, identity and access management, and security monitoring.
• Assisting with audits of ERP and business applications, including access controls, roles and privileges, segregation of duties, configurations, interfaces, and audit trails.
• Reviewing policies, procedures, system configurations, reports, logs and other audit evidence.
• Performing data analysis and population-based testing using Microsoft Excel and other analytical tools.
• Identifying exceptions, unusual trends and potential control weaknesses from large datasets.
• Supporting walkthrough discussions with IT and business stakeholders.
• Documenting audit procedures performed, evidence reviewed, test results and conclusions in audit workpapers.
• Performing research on emerging technology risks and good practices.
• Assisting the team in preparing audit observations, presentations and management reports.
• Following up on implementation of agreed audit recommendations.

This aligns with the organization's documented audit approach of gathering information on processes, policies, procedures and controls; obtaining sufficient audit evidence; verifying samples; and conducting risk analysis to assess control efficiency and effectiveness.

Preferred Academic Background

Students pursuing or recently completing:

• B.E./B.Tech in Computer Science, Information Technology, Cybersecurity or related disciplines
• BCA / MCA
• B.Sc./M.Sc. Computer Science / IT / Cybersecurity
• Other technology-focused programs with a demonstrated interest in IT audit, cybersecurity, risk or data analytics

Candidates pursuing relevant professional qualifications or certifications such as CISA, ISO 27001, CEH, Security+, AWS/Azure fundamentals, or similar certifications would have an advantage, but these are not mandatory