Join our dynamic Assurance ITDA team as a Deputy Manager, where you will be instrumental in building robust relationships with internal teams and clients. Your focus will be on delivering exceptional quality outcomes and consistently exceeding client expectations. This role offers an exciting opportunity to contribute to functional excellence and drive innovation within a leading firm.

This position is based in Mumbai and is part of Deloitte Touche Tohmatsu India LLP.

As a Deputy Manager in the ITDA team, you will cultivate strong professional relationships, both internally and with clients, ensuring the delivery of high-quality results. You will be responsible for managing and executing IT audits, including reviews of IT General Controls (ITGC) in areas like Change Management and Access Management, as well as IT Application Controls (ITAC). Your work will involve SOC 1 and SOC 2 reviews, assessing control designs and operating effectiveness across various business processes. You will also leverage your understanding of ERP systems and emerging technologies to address client needs.

This role requires a proactive approach to risk management, compliance reporting, and understanding regulatory landscapes. You will stay abreast of new technological risks such as Cloud, RPA, and AI/ML, integrating this knowledge into your audit strategies.

We are seeking a Deputy Manager with 3 to 5 years of relevant experience in IT audits and control frameworks. Essential expertise includes ITGC (Change Management/Access Management), ITAC, and SOC 1/SOC 2 reviews. A strong understanding of control frameworks like ICFR, SSAE, ISO 27001, ISAE 3402, and ISAE 3000 is required.

Proficiency in ERP-based control testing (SAP, Oracle, Navision) and cloud security (AWS, Azure) is crucial. You should possess a solid grasp of business process controls (P2P, O2C, R2R) and their mapping to ERP systems. Experience in reviewing control design and operating effectiveness, along with exposure to risk management, compliance, and regulatory requirements, is vital. Familiarity with emerging technologies and their associated risks, such as Cloud, RPA, and AI/ML, is also expected. Preferred certifications include CISA, CISSP, ISO 27001, ISO 42001, or CCSK.