Senior Technology Internal Auditor

About the role

Intuit’s Internal Audit department is looking for a Senior Technology Internal Auditor to join its Center of Excellence in Bangalore. The role focuses on technology‑focused assurance and advisory audits, with a strong emphasis on cybersecurity and privacy, and reports to the CoE Senior Manager.

Key responsibilities

• Help build the first Security audit function within Internal Audit in Bangalore, establishing processes and methodologies.
• Assess security‑related risks and align audit work with organizational priorities and industry best practices.
• Execute risk‑based IT and cybersecurity audit plans, including scoping, testing and reporting across domains such as vulnerability management, access control, incident response, data security and cloud security.
• Apply knowledge of regulations and standards (NIST, ISO 27001, SOC 2, PCI DSS) to deliver robust audits.
• Partner with Security and Privacy teams to understand Intuit’s risk profile and incorporate it into audit execution.
• Work with engineering and security teams to evaluate controls for compliance with information security and privacy requirements.
• Document audit findings, perform initial root‑cause analysis and track remediation actions.
• Prepare clear audit documentation and reports that meet Internal Audit standards.
• Build relationships with business partners and stakeholders to promote a strong risk and control mindset.
• Contribute to continuous‑improvement initiatives, including automation and new audit techniques.

Required profile

• Individual contributor with senior‑level experience in technology audit, cybersecurity or privacy.
• Ability to work independently with minimal supervision.
• Strong communication skills to interact with global partners and stakeholders.

Required skills

• Knowledge of NIST framework.
• Familiarity with ISO 27001 standards.
• Understanding of SOC 2 requirements.
• Experience with PCI DSS compliance.
• Vulnerability management.
• Access control mechanisms.
• Incident response processes.
• Data security principles.
• Cloud security concepts.