ITGC Audit Manager – Internal Audit Group

Location: Gurugram, Haryana

Work Mode: Hybrid (On-site 3 days/week)

About American Express

At American Express, we empower businesses with world-class products and services to help them grow. When you join Team Amex, you become part of a global, diverse, and inclusive community dedicated to delivering unparalleled customer experiences with integrity.

We recognize and reward contributions, leadership, and impact, ensuring every colleague has the opportunity to thrive and succeed in a supportive, flexible, and growth-oriented environment.

About the Internal Audit Group (IAG)

American Express’ Internal Audit Group (IAG) is a global team of 300+ professionals across nine countries, dedicated to providing independent, objective, and risk-based assurance and advisory services.

Our vision is to be a world-class internal audit function, focusing on:
✅ Data-driven & technology-enabled assurance
✅ Delivering forward-looking risk insights
✅ Preparing colleagues to become enterprise leaders

Our Data-Driven Continuous Auditing approach has led to patent-pending technology assets, enhancing our audit processes with advanced analytics and automation.

Role Overview: ITGC Audit Manager

We are seeking a highly skilled ITGC Audit Manager to be part of our Resource Centre of Excellence (RCoE) in India.

This role will focus on Technology Audit, ensuring compliance with Information Technology General Controls (ITGC) across enterprise systems, cybersecurity, and IT risk management functions.

The ideal candidate will have strong expertise in IT auditing, risk management, and governance, along with experience in data-driven auditing approaches.

Key Responsibilities

Technology Audits & Risk Assessments:

Lead and execute ITGC audits, covering areas such as application development, enterprise architecture, technology resilience, API management, and IT asset management.
Assess technology risk management frameworks, ensuring alignment with industry standards (FFIEC IT Handbooks, NIST CSF).
Evaluate cybersecurity risks, information security controls, and IT compliance frameworks.
Ensure effective audit execution in conformance with professional standards, budgets, and timelines.

Data-Driven Audit & Analytics:

Utilize data analytics and visualization tools (Tableau, Alteryx, Power BI) to enhance audit processes.
Develop key risk indicators (KRIs) and key performance indicators (KPIs) for risk monitoring.
Perform trend analysis on IT risks and generate insights for proactive risk mitigation.

Audit Execution & Reporting:

Prepare and present audit findings to senior leadership, articulating potential impact and risk implications.
Validate that management’s remediation actions are effective in addressing audit findings.
Maintain audit proficiency through ongoing professional development, including data literacy skills.

Stakeholder Management & Leadership:

Lead and mentor junior auditors, fostering a collaborative learning environment.
Engage with global audit teams across regions (US, EMEA, LACC), ensuring seamless coordination.
Work closely with risk management teams and business units to identify emerging risks.

Required Qualifications & Skills

Education & Experience:

7+ years of experience in IT auditing, information security, technology risk management, or related domains.
Bachelor’s degree in Information Systems, Computer Science, Accounting, Finance, Business, or related fields.
Experience in evaluating IT and IS controls in large global enterprises.

Technical & Risk Management Skills:

Expertise in ITGC audits, cybersecurity frameworks, enterprise IT governance, and regulatory compliance.
Strong knowledge of industry regulations (FFIEC IT Handbooks, NIST CSF, ISO 27001, COBIT, etc.).
Experience with risk management tools (GRC platforms, control frameworks, compliance tools).
Hands-on experience in data analytics tools (Tableau, Alteryx, SQL, Python, Power BI) is a plus.

Certifications (Preferred but Not Mandatory):

CISA (Certified Information Systems Auditor)
CIA (Certified Internal Auditor)
CISSP (Certified Information Systems Security Professional)
CCSP, CEH, or other cybersecurity certifications

Behavioral & Leadership Skills:

Strong written and verbal communication skills, with the ability to present insights to senior management.
Ability to work independently and collaboratively in a fast-paced environment.
Mentorship and leadership experience in managing audit teams.
Ability to resolve complex risk issues and drive innovative audit solutions.

Why Join American Express?

We support our colleagues with comprehensive benefits and career development programs.

Benefits & Perks:

✅ Competitive base salary with bonus incentives
✅ Financial well-being programs and retirement support
✅ Comprehensive health insurance (medical, dental, vision, life, and disability)
✅ Flexible work models (hybrid, onsite, or virtual, based on business needs)
✅ Paid parental leave and family-friendly policies
✅ On-site wellness centers (staffed with medical professionals, depending on location)
✅ Confidential mental health support through the Healthy Minds program
✅ Career development, training, and upskilling opportunities

Equal Opportunity Employer

American Express is an equal opportunity employer and makes employment decisions without regard to race, gender, religion, sexual orientation, disability, veteran status, or any other legally protected status.

Employment is subject to successful background verification, in compliance with applicable laws and regulations.