IT Audit Executive

Key responsibilities

1. Plan and perform IT audits for clients, covering IT General Controls (ITGC), application controls, and system security configurations.
2. Review system access controls, backup processes, and change management practices to ensure compliance and resilience.
3. Support IT risk assessments and policy reviews, preparing client-specific IS audit reports with clear recommendations.
4. Coordinate with external audit teams to integrate ISMS and IT audit findings into overall assurance reports.
5. Maintain ISMS compliance by conducting reviews, collecting audit evidence, and ensuring alignment with ISO 27001 standards.
6. Assist in internal ISMS audits, support corrective actions, and contribute to continual improvement initiatives.

Requirements

1. 1-2 years of experience in ISMS, IT audit, or compliance roles.
2. Degree in Information Technology, Information Systems, Cybersecurity, or related discipline.
3. Familiarity with IT General Controls (ITGC), application controls.
4. Good documentation, coordination, and analytical skills with the ability to produce clear audit reports.
5. Proficiency in MS Excel, Word, and email communication tools.
6. Knowledge of ISO 27001 controls and risk assessment methodologies will be an added advantage.
7. Financial literacy and understanding of business processes will be considered a plus.

About the company

Kreston Sri Lanka is a member firm of Kreston Global UK and a correspondent firm of Grant Thornton International, one of the five most prestigious global accounting organizations of independent assurance, tax and advisory firms.

When applying

If you are the right candidate, please send your CV while mentioning the name of the job title under the subject line of the email.