| Job Description: | 9 years of experience with 8 years in Audit / Compliance Key Responsibilities: 1. Recommend effective controls to mitigate technology risks which includes IT General Controls (ITGC) IT application Controls (ITAC) IT Infrastructure controls and IT dependent controls (ITD). 2. Prioritize controls and assist in Audit Planning 3. Review the workproducts of compliance reviews enterprise security audits( both application and infrastructure) including - IT General application and cyber security controls to ensure effective delivery of functional processes within operations to mitigate risks. - Technology risk management processes application development and deployment processes database management vendor management etc. 4. Review and participate in preparing audit planning memo and Risk Control Matrix (RCM) manage discussion with stakeholders. 5. Apply guidance from enterprise policies and procedures and control testing industry best practices in workpaper documentation and effective challenge 6. Lead walkthroughs with control owners/1st LOD testers to obtain a sufficient understanding of the design effectiveness and operating effectiveness of the control. 7. Responsible to identify control gaps through control testing and review ; communicate findings and control redesign recommendations to Management/Clients. 8. Provide technical expertise and recommendation to the business in areas such as software/application development data management cybersecurity on controls risk. 9. Review audit reports ensure highly quality of control testing deliverables review dashboards for accuracy prior to client meetings 10. This role is responsible for establishing processes to validate the effectiveness and drive improvements wherever required Experience and Skills: 1. Mentoring the team to conduct IT audits that includes conducting and leading IT audits performing risk assessments and compliance reviews with a focus on IT controls. 2. A solid understanding of information technology systems infrastructure and security is crucial. This includes knowledge of network architecture operating systems databases cloud computing cybersecurity principles and IT governance frameworks (e.g. COBIT ITIL). Familiarity with relevant regulations and standards (e.g. SOX PCI DSS GDPR) is also important. 3. Coordinating and prioritizing audit activities and managing multiple projects simultaneously. Strong leadership team management and project management skills are necessary to effectively guide and supervise team members set priorities allocate resources and ensure timely delivery of audit engagements. 4. Experience in performing risk assessments identifying IT risks and developing risk mitigation strategies is essential. The IT Audit Manager should have a solid understanding of risk management principles and be able to apply them to IT audit processes effectively. 5. The IT Audit Manager should be well-versed in compliance requirements such as SOX PCI DSS GDPR and others depending on the industry. They should have experience evaluating IT controls against these requirements and providing guidance for compliance improvement. 6. Excellent communication skills are necessary to effectively communicate complex technical concepts to non-technical stakeholders including senior management and executives. The IT Audit Manager should be able to articulate audit findings risks and recommendations clearly and concisely in both written reports and verbal presentations. 7. Strong analytical and critical-thinking abilities are essential for analyzing complex IT systems identifying control weaknesses and assessing potential risks. The IT Audit Manager should be skilled in using data analysis techniques and tools to draw insights from large volumes of IT data. 8. Keeping up-to-date with emerging technologies industry trends and regulatory changes is crucial for an IT Audit Manager. 9. Strong collaboration interpersonal and relationship-building skills are necessary to work effectively with these diverse groups foster cooperation and promote a positive audit culture within the organization. 10. As a trusted advisor the IT Audit Manager must maintain the highest standards of professional ethics and integrity. They should adhere to auditing standards and confidentiality requirements handle sensitive information with care and maintain impartiality and objectivity throughout the audit process. 11. Act as a change catalyst implement process and control changes in a seamless manner The following skills will be an added advantage 1. Completion of certifications such as CISA or CISSP will be an added advantage. 2. Experience in project management role and team management 3. Experience in handling issues and escalations Preferred Qualification CISA CISSP ISO 27001 Cloud and CyberSecurity certification Shift timings: 5pm to 2.30am IST 100% RTO |
Job Description: 9 years of experience with 8 years in Audit / Compliance Key Responsibilities: 1. Recommend effective controls to mitigate technology risks which includes IT General Controls (ITGC) IT application Controls (ITAC) IT Infrastructure controls and IT dependent controls (ITD). 2. Pri...
| Job Description: | 9 years of experience with 8 years in Audit / Compliance Key Responsibilities: 1. Recommend effective controls to mitigate technology risks which includes IT General Controls (ITGC) IT application Controls (ITAC) IT Infrastructure controls and IT dependent controls (ITD). 2. Prioritize controls and assist in Audit Planning 3. Review the workproducts of compliance reviews enterprise security audits( both application and infrastructure) including - IT General application and cyber security controls to ensure effective delivery of functional processes within operations to mitigate risks. - Technology risk management processes application development and deployment processes database management vendor management etc. 4. Review and participate in preparing audit planning memo and Risk Control Matrix (RCM) manage discussion with stakeholders. 5. Apply guidance from enterprise policies and procedures and control testing industry best practices in workpaper documentation and effective challenge 6. Lead walkthroughs with control owners/1st LOD testers to obtain a sufficient understanding of the design effectiveness and operating effectiveness of the control. 7. Responsible to identify control gaps through control testing and review ; communicate findings and control redesign recommendations to Management/Clients. 8. Provide technical expertise and recommendation to the business in areas such as software/application development data management cybersecurity on controls risk. 9. Review audit reports ensure highly quality of control testing deliverables review dashboards for accuracy prior to client meetings 10. This role is responsible for establishing processes to validate the effectiveness and drive improvements wherever required Experience and Skills: 1. Mentoring the team to conduct IT audits that includes conducting and leading IT audits performing risk assessments and compliance reviews with a focus on IT controls. 2. A solid understanding of information technology systems infrastructure and security is crucial. This includes knowledge of network architecture operating systems databases cloud computing cybersecurity principles and IT governance frameworks (e.g. COBIT ITIL). Familiarity with relevant regulations and standards (e.g. SOX PCI DSS GDPR) is also important. 3. Coordinating and prioritizing audit activities and managing multiple projects simultaneously. Strong leadership team management and project management skills are necessary to effectively guide and supervise team members set priorities allocate resources and ensure timely delivery of audit engagements. 4. Experience in performing risk assessments identifying IT risks and developing risk mitigation strategies is essential. The IT Audit Manager should have a solid understanding of risk management principles and be able to apply them to IT audit processes effectively. 5. The IT Audit Manager should be well-versed in compliance requirements such as SOX PCI DSS GDPR and others depending on the industry. They should have experience evaluating IT controls against these requirements and providing guidance for compliance improvement. 6. Excellent communication skills are necessary to effectively communicate complex technical concepts to non-technical stakeholders including senior management and executives. The IT Audit Manager should be able to articulate audit findings risks and recommendations clearly and concisely in both written reports and verbal presentations. 7. Strong analytical and critical-thinking abilities are essential for analyzing complex IT systems identifying control weaknesses and assessing potential risks. The IT Audit Manager should be skilled in using data analysis techniques and tools to draw insights from large volumes of IT data. 8. Keeping up-to-date with emerging technologies industry trends and regulatory changes is crucial for an IT Audit Manager. 9. Strong collaboration interpersonal and relationship-building skills are necessary to work effectively with these diverse groups foster cooperation and promote a positive audit culture within the organization. 10. As a trusted advisor the IT Audit Manager must maintain the highest standards of professional ethics and integrity. They should adhere to auditing standards and confidentiality requirements handle sensitive information with care and maintain impartiality and objectivity throughout the audit process. 11. Act as a change catalyst implement process and control changes in a seamless manner The following skills will be an added advantage 1. Completion of certifications such as CISA or CISSP will be an added advantage. 2. Experience in project management role and team management 3. Experience in handling issues and escalations Preferred Qualification CISA CISSP ISO 27001 Cloud and CyberSecurity certification Shift timings: 5pm to 2.30am IST 100% RTO |
View more
View less