Job Description
Hi,
We are having an opening for Manager/ Senior Manager-Audit & Compliance Specialist at our Mumbai location.
Job Summary : The Audit & Compliance Specialist will support the execution of global IT audit and compliance initiatives under the guidance of the Lead Audit & Compliance Specialist. This role is responsible for evidence coordination, audit documentation, remediation tracking, and regulatory readiness across IT Infrastructure, Cloud, and Service Delivery domains. The role will ensure timely closure of audit observations and continuous improvement of the compliance framework in alignment with SOX, GxP, ISO 27001, and other regulatory standards.
Areas Of Responsibility :
Key Responsibilities
1. Audit Support & Execution
- Coordinate with IT domain teams to gather and validate audit evidence.
- Support walkthroughs, gap analysis, and response preparation for internal and external audits.
- Track status of remediation actions and support validation exercises.
2. Documentation & Controls Management
- Maintain audit documentation including SOPs, control checklists, risk registers, and evidence logs.
- Support creation of compliance dashboards and internal audit scorecards.
3. Compliance Monitoring & Reporting
- Conduct periodic self-assessments and spot checks.
- Monitor effectiveness of implemented controls and alert gaps to the lead specialist.
4. Stakeholder Coordination
- Interface with Infra, Cloud, Service Delivery, Cybersecurity, and Business IT teams for audit preparedness.
- Support training logistics and documentation for compliance awareness programs.
5. Improvement Initiatives
- Identify automation opportunities in compliance processes.
- Support tool-based audit management platforms (e.g., Archer, ServiceNow GRC).
6. Specialized Knowledge Requirements
- Understanding of IT general controls, SOX, GxP, ISO 27001
- Familiarity with ITIL processes (Change, Incident, Problem)
- Exposure to audit lifecycle, compliance reporting, and evidence collection
- Knowledge of tools like Excel, SharePoint, ServiceNow GRC preferred
Internal Stakeholders and Nature of Interaction
- Lead Audit & Compliance: Daily coordination, status reviews, remediation validation
- Infra, Cloud, App & Service Teams: Evidence submission, control reviews, audit walkthroughs
- PMO & Compliance Team: Coordination on process documentation, control changes, and reporting
External Stakeholders and Nature of Interaction
- Internal/External Auditors: Support during data requests, audit walkthroughs, and clarification rounds
- Consulting Partners: Coordination during control testing or audit co-sourcing
External Interaction %
- ~2025% with external auditors, partners, and advisors
Nature of Communication
- Formal audit evidence, tracker updates, control summaries, dashboards
- Clear, structured communication during walkthroughs and audit Q&A
Role Played in Negotiations
- Supports Lead in framing responses or remediation timelines for audit queries
Key Decision-Making Expected
- Recommend evidence sufficiency, escalate control gaps, prioritize documentation readiness
Extent and Nature of Innovation Required
- Moderate: Suggest improvements in evidence workflows, adopt templates for reusability
- Use dashboards to simplify control visibility and audit traceability
Job Requirements
Educational Qualification:
- Masters, Bachelors degree in IT, Computer Science, or related field
Certifications:
- CISA or CRISC (preferred but not mandatory for entry level)
- ITIL Foundation / GRC platform exposure is a plus
Experience:
- 5-12 years of experience in IT audit, controls, or compliance roles
- Exposure to pharma or highly regulated industries is desirable
Skills:
- Detail-oriented with good documentation practices
- Strong Excel/SharePoint skills; familiarity with audit tools
- Ability to handle multiple tasks and communicate with cross-functional teams
Job Classification
Industry: Pharmaceutical & Life Sciences
Functional Area / Department: IT & Information Security
Role Category: IT Infrastructure Services
Role: IT Audit
Employement Type: Full time
Contact Details:
Company: Sun Pharma
Location(s): Mumbai
Keyskills:
IT Audit
It Compliance
IT Risk Management
IT Risk
ITIL Certified
Cisa
Crisc