IT Risk & Cybersecurity Professional - CISA

About Us

S K R and Company LLP is an integrated consulting practice based in Chennai, serving multinational corporations, domestic businesses, and cross-border clients across assurance, tax, technology risk, compliance, transformation, and managed services. Every engagement is led by a partner holding the relevant credential, not handed between generalists and outside specialists.

The role

We are expanding our IT Risk & Cybersecurity practice and are looking for two CISA-qualified professionals to work on IT General Controls testing, ICFR-IT, and SOC 1/SOC 2 attestation engagements. Prior hands-on exposure to ITGC or SOC audits is strongly preferred.

What you will do

• Perform IT General Controls testing covering access management, change management, and IT operations controls
• Support SOC 1 and SOC 2 Type I and Type II examinations under SSAE 18 / AT-C 105 and 205, including system description evaluation and control matrix testing
• Contribute to ICFR-IT testing and the IT controls component of SOX 404 integrated audits for US-listed and SEC-registrant clients
• Identify and document CUECs and CSOCs, and evaluate control design and operating effectiveness
• Work directly with engagement partners across client industries, including technology and SaaS service organisations

What we are looking for

• CISA certification (mandatory)
• Prior experience in ITGC testing, SOC 1/SOC 2 examinations, or information systems audit
• Familiarity with SSAE 18, AT-C 105/205, or ISO 27001 is an advantage
• Strong documentation skills and attention to control-level detail
• Ability to work directly with clients during fieldwork

Location: Chennai