INSenior AssociateITRARC GRC AITHAdvisoryNoida

JOB DESCRIPTION

ITGCAudits IT Internal AuditsITControls TestingIT SOXTesting IT Application Controls ERP(SAP Oracle etc.)ControlReviews IT ComplianceAssessments(ISO 27001 NISTetc.)

Position title:

SeniorAssociateITGCGRCAdvisory

Experience:

3-7years

Location:

G. Noida/ Bhuvaneshwar/ Kolkata

Department:

Risk Consulting- GRC

Purpose of the Job/Role

PerformITGCAudits IT Internal AuditsITControls TestingIT SOX Testing IT Application Controls ERP (SAP Oracle etc.) Control Reviews IT Compliance Assessments (ISO 27001 NIST HIPPA HITRUST etc.)

Roles and Responsibilities:

• Prior experience working in an IT Internal Audit Team orconsulting company specializing in conducting IT Audits IT Internal Audits ERP (SAP Oracle etc.) ReviewsITGCIT Application Controls Reviews.

• Strong understanding of IT General Controlsdomainssuch as ChangeManagement UserAccess Management IT Operations Back and Recovery Management BCP/ DRetc

• Strong understanding of IT Application controls (Input/ Output ControlsProcessing ControlsInterface controls) specificallyw.r.t.ERPapplications such as SAP Oracle etc.

• Understanding of IT SOX Control Testing InternalFinancialControls (IFC)Testing

• Understanding of the third-party risk management reviews

• Understanding of IT Risk Management frameworks such as NIST ISO 27001 HIPPA HITRUST etc.

• Should understand completeauditlifecycle fromauditscoping toprojectdeliverables

• Ability to leada team of 2-3 Specialist/ Associates and independently carry outIT Audits/Assessmentsincluding:

• Understanding the clients IT environment

• Audit scopingconsideringcritical systems and processes

• Finalising Risk & Control Matrix Data Requirements

• Interview client stakeholders(mid-management level)

• Conduct walkthrough meetings

• Carry out test of design and operating efficiency of IT controls

• Obtain relevant artefacts andidentifyexceptions

• Discussion on observations/ issuesidentified

• Drafting audit reports(Observation Risk ImplicationIdentifyActionOwner Timelines for closure)and presenting to key stakeholders

• Strong knowledgeand experienceof MS Office Tools (Excel WordPowerpoint) DataAnalytics Tool

• Excellentcommunication &presentation skills and ability to effectively communicateobservations/ issuesat senior management levels

Education:

• Minimum Qualification: BE/ BTech/ CA (Intermediate)

• Postgraduatesin any stream would be preferred (not mandatory)

• Prior Big 4 experience consulting company internal auditdepartmentwould be an added advantage

• Experience inIT Risk Assurancefor varied industry segments preferred

• Excellent communication skills - both written and oral

Certifications:

• CIA/CISA/CISMwill be added advantage