IT Audit

Top 5 Skill Set

• Hands-on experience with security technologies
• Hands-on experience with GRC platforms (RSA Archer MetricStream ServiceNow GRC).
• Experience in Information security and business continuity internal audits
• Strong Knowledge in risk management ISO 27001 ISO 22301 PCI DSS HIPAA GDPR SOC 2
• Knowledgeable in security concepts techniques tools methods and practices
• Good technical in cyber security products
• Individually to perform the technical audits.
• Necessary to be proactive/Assertive and manage the portfolio independently.

General description of the role:

• Minimum 8 years of experience in managing security audits such as ISO 27001 HIPAA SOC 1 SOC2 PCIDSS
• Coordinate/Lead the transformation of manual GRC processes into automated workflows using industry-leading GRC platforms (e.g. RSA Archer MetricStream ServiceNow GRC).
• Including preparing control owners for audits interpreting control requirements reviewing control evidence for appropriateness testing control effectiveness presenting control evidence to external auditors and audit planning with external auditors
• In-depth knowledge of security controls interpreting control requirements for SOC 2 ISO or HIPAA PCIDSS audits reviewing control evidence for completeness an accuracy and ensuring evidence provided to auditors satisfies control requirements.
• Ability to of plan and lead meetings with control owners and external auditors.
• Ability to clearly define control requirements to control owners or explaining control evidence to external auditors.
• Supports the Security Audit function by reviewing evidence submissions for accuracy and completeness following up on audit requests and helping to establish a continuous monitoring function.
• Assist in testing and verification of all controls and formulating reports documenting findings.
• Recommends and assists in the definition and implementation of security controls in accordance with enterprise policies standards and procedures.
• Work closely with internal business teams to assist in the identification and assessment of potential security risks and establish risk owners ratings and management action plans.
• Ensure continuity of compliance with ISO27001 and ISO 22301 PCI DSS HIPAA GDPR
• Analyse potential impact of new threats and communicates risks to relevant business units
• Manage security operations analyse security exceptions gather necessary background information document exceptions and ensure that the risk is recognized and managed with compensating controls
• Provide orientation to Business Units on Risk Assessment Business Continuity Plan and Business Impact Analysis
• Facilitate in preparation of Business continuity plan for each project and functions
• Conduct internal ISMS and BCMS audits and identify potential gaps in the system
• Prepare detailed and summary reports of assessments remediation plans as needed and advise internal stakeholders
• Report the audit findings on the potential weakness in the system and areas of improvement