INManagerIT General ControlsITRAAdvisory Gurgaon

JOB DESCRIPTION

ITGC Reviews IT Internal Audits Controls Testing Compliance Reviews ISO 27001 Reviews HIPAA/HITRUSTReviews

Position title:

Manager

Experience:

7years

Location:

Gurgaon

Department:

Risk Consulting

Purpose of the Job/Role

Perform IT Assessment Reviews whichincludesIT General Controls Internal Audits Controls Testing Compliance Reviews (such as ISO 27001 HIPAA HITRUST etc.)

The person we are looking for:

Responsibilities

• Strong understanding of IT General Controlsdomainssuch as ChangeManagement UserAccess Management IT Operations Back and Recovery Managementetc

• Strong understanding of the third-party risk management

• Implementation and assessment knowledge of various industry standards frameworks and compliances such asISO 27001HIPAA HITRUST NISTetc

• Understanding of the IT Risk Assessment methodologiesand ability tocomprehendand apply the knowledge during IT assessment lifecycle

• Interview client stakeholders andconducts walkthrough meetings and develop assessment artifacts

• Should understand complete assessment lifecyclefrom assessment scoping toprojectdeliverables

• Manage execution of assignedITassessments supervision of the work performed by the team members during thedifferent phasesof the audit ensuring ongoing compliance tomethodologyand quality standards

• Collaboration with the different stakeholders on the complex assessment issues to developpossible recommendations

• Monitor progress manageriskand verify key stakeholders are kept informed about progress and expected outcomes

• Presents findings and proposes recommendations that deal with root cause of issues and impact to the organization

• Manages the approved budget and resources for the assigned audit; assigns and reviews the work done by all team members

• Coaches team members and colleagues in the best use of company &teamsmethodologies and tools

• Demonstrates excellent people management capabilities andis able tothink out of the box

• Great communicationskills and the ability to break down and explain complex data security problems

• Excellent presentation skills and ability to effectively communicate proposals and point of view at senior management levels

Education:

• Minimum Qualification: BE/ BTech

• Postgraduatesin any stream would be preferred (not mandatory)

• Prior Big 4 experience would be an added advantage

• Experience inIT Risk Advisory/ Assurancefor varied industry segments preferred

• Excellent communication skills - both written and oral

Certifications:

• CIA/CISA/CISMwill be added advantage