IT Audit Executive
About the role
The IT Audit Executive will be responsible for planning and performing IT audits for clients, focusing on IT General Controls, application controls, and system security configurations. Key duties include reviewing system access controls, backup processes, and change management practices, supporting IT risk assessments and policy reviews, coordinating with external audit teams, maintaining ISMS compliance, and assisting in internal ISMS audits. The role requires strong documentation, coordination, and analytical skills, as well as proficiency in MS Excel, Word, and email communication tools. The position is with Kreston Sri Lanka, a member firm of Kreston Global UK and a correspondent firm of Grant Thornton International, located in Colombo 07.
Must have
- 1–2 years of experience in ISMS, IT audit, or compliance roles.
- Degree in Information Technology, Information Systems, Cybersecurity, or related discipline.
- Familiarity with IT General Controls (ITGC), application controls.
- Good documentation, coordination, and analytical skills with the ability to produce clear audit reports.
- Proficiency in MS Excel, Word, and email communication tools.
Nice to have
- Knowledge of ISO 27001 controls and risk assessment methodologies will be an added advantage.
- Financial literacy and understanding of business processes will be considered a plus.
Technologies
- Cybersecurity
- Excel
- ISO 27001
Highlights
Applicants should send their CV to cv@kreston.lk, mentioning the job title in the subject line. Knowledge of ISO 27001 controls and risk assessment methodologies, as well as financial literacy and understanding of business processes, will be considered an advantage.