Senior IT Auditor

Location: Bengaluru

Our Company

Changing the world through digital experiences is what Adobe's all about. We give everyone—from emerging artists to global brands—everything they need to design and deliver exceptional digital experiences! We're passionate about empowering people to create beautiful and powerful images, videos, and apps, and transform how companies interact with customers across every screen.

We're on a mission to hire the very best and are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We realize that new ideas can come from everywhere in the organization, and we know the next big idea could be yours!

Our Company

Changing the world through digital experiences is what Adobe's all about. We give everyone—from emerging artists to global brands—everything they need to build and deliver outstanding digital experiences. We're passionate about empowering people to compose beautiful and powerful images, videos, and apps, and transform how companies interact with customers across every screen.

We're on a mission to hire the very best. We are committed to building outstanding employee experiences where everyone is respected and has equal opportunity. We believe new ideas can come from anywhere in the organization, and the next big idea could be yours!

The Opportunity

Adobe's Risk Advisory and Assurance Service (RAAS) function formally Global Audit is seeking an experienced Information Security professional. The candidate must have a good insight and understanding of the Technology and Cyber Security risks in line with regulatory and other compliance requirements. This position will be based in Adobe's Bangalore Office reporting to the Senior Manager, Risk Advisory & Assurance Services.

What you'll Do

Conduct Info Sec risk assessments activities via close collaboration with Cloud Technology, Engineering, and other Business Units
Support the delivery and scaling of the SOX program. Hands on with building and testing of IT General Controls (ITGC) & IT App Business controls
Plan and carry out technology operations audits, system implementation & integration reviews, M&A compliance efforts, and relevant advisory initiatives with full involvement in planning, fieldwork & reporting.
Plan and implement business transformations, new system rollouts, and acquisitions' compliance activities. Support technology assurance and advisory reviews to address major enterprise technology risks. This includes assessing the adequacy, build, and operational efficiency of technology and internal controls.
Perform Information Security related assessments to cover domains like User Access management, Network, OS & Application Security, Encryption, Backup Management, Disaster Recovery, Training & Awareness, etc.
Leverage data analytics, automation & artificial intelligence to support risk assessment, planning, audit procedures, continuous monitoring, and present visualization to support the results.
Research and stay current on new mentorship/publications/standards and emerging technologies applicable to the Info Sec function.
Ensure accurate identification and disposition of internal control issues and perform quarterly follow-up on required management actions.
Prepare accurate, logical, and detailed audit work papers and reports. Ensure overall quality and consistency of audit work. Follow department and professional standards for audits.
Support and prepare quarterly Audit Committee meetings/presentations/newsletters and other supporting documentation; prepare other CAE/CIO meeting presentations, as needed.

What you need to succeed

Education:

B.E./B.Tech/MBA in Information Technology, Information Systems, or similar.
CISA, CISSP, CIA, CPA or similar certification preferred.

Knowledge &

Experience:

Minimum 7-9 years of Info Sec audit experience with an accounting firm or large global public company internal audit.
Strong Experience in one or more of the following IT audit areas: ITGCs, SAP/ ERP audit, process controls, security, system implementations & integrations, e-commerce, microservices, data analytics, cloud computing (AWS, Azure) or similar.
Knowledge of common IT…