INAssociate 2ITGCRC GRC AITHAdvisoryNoida

JOB DESCRIPTION

ITGCAudits IT Internal AuditsITControls TestingIT SOX Testing IT Application Controls ERP (SAP Oracle etc.) Control Reviews IT Compliance Assessments (ISO 27001 NIST etc.)

Position title:

AssociateITGCGRCAdvisory

Experience:

2-4years

Location:

G. Noida/ Bhuvaneshwar/ Kolkata

Department:

Risk Consulting - GRC

Purpose of the Job/Role

PerformITGCAudits IT Internal AuditsITControls TestingIT SOX Testing IT Application Controls ERP (SAP Oracle etc.) Control Reviews IT Compliance Assessments (COBITISO 27001 NIST etc.)

Roles and Responsibilities:

• Prior experience working in an IT Internal Audit Team or consulting company specializing in conducting IT Audits IT Internal Audits ERP (SAP Oracle etc.) Reviews ITGC IT Application Controls Reviews.

• Strong understanding of IT General Controls domains such as Change Management User Access Management IT Operations Back and Recovery Management BCP/ DRetc

• Strong understanding of IT Application controls (Input/ Output Controls Processing Controls Interface controls) specificallyw.r.t.ERP applications such as SAP Oracle etc.

• Understanding of IT SOX Control Testing Internal Financial Controls (IFC) Testing

• Understanding of the third-party risk management reviews

• Understanding of IT Risk Management frameworks such asCOBITNIST ISO 27001 etc.

• Should understand completeauditlifecycle fromauditscoping toprojectdeliverables

• Ability tocarry out IT Audits/Assessments(with minimum supervision)including:

• Understanding the clients IT environment

• Audit scoping considering critical systems and processes

• Finalising Risk & Control Matrix Data Requirements

• Interview client stakeholders (mid-management level)

• Conduct walkthrough meetings

• Carry out test of design and operating efficiency of IT controls

• Obtain relevant artefacts and identify exceptions

• Discussion on observations/ issues identified

• Drafting audit reports (Observation Risk Implication Identify Action Owner Timelines for closure) and presenting to key stakeholders

• Strong knowledge and experience of MS Office Tools (Excel WordPowerPoint) Data Analytics Tool

• Excellentcommunication andpresentation skills and ability to effectively communicateobservations/ issuesat senior management levels

Education:

• Minimum Qualification: BE/ BTech/ CA (Intermediate)

• Postgraduates in any stream would be preferred (not mandatory)

• Prior Big 4 experience consulting company internal audit departmentwould be an added advantage

• Experience inIT Risk Assurancefor varied industry segments preferred

• Excellent communication skills - both written and oral

Certifications:

• CIA/CISA/CISM will be added advantage