ABOUT THE JOB
Essential Job Functions
To perform this job successfully, an individual must be able to perform each essential function satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.
Provide high quality client service, working directly with onshore and/or client teams to understand and evaluate client’s IT environment and controls.
Manage and perform the efficient execution of controls testing related to Information Technology General Controls (ITGC), Application Controls, and IT security controls.
Designs, prepares and/or review internal and client audit reports.
Provides effective leadership to employees and/or teams through providing direction, training, communicating performance expectations and providing feedback and performance.
Provide insight in maintaining risk, threat and controls inventory as aligned with globally accepted standards or frameworks.
Execute IT infrastructure configuration reviews based on best practices and accepted benchmarks.
Oversee the validation of risk assessments, process and technology control designs, control gap identification, test scripts and evidence and identification of compensating controls.
Provide insight in implementing Information Security Standards and Guidelines (e.g., IT Policies and Procedures, Security Incident Plan, Response Playbook, Configuration Benchmarks) as aligned with best practices, regulatory, and client requirements.
Provide support in rolling out IT Security Projects and IT Operational directives of the firm.
WHAT WE'RE LOOKING FOR
Minimum Requirements/Education
At least 7 to 8 years of experience in audits/reviews of IT General Controls across various platforms (Application, Operating System, Database), with exposure to areas such as:
User Access Management
Backup and Recovery Management
Batch Job Management
Problem/Incident Management
System Development/Acquisition, Migration, and Implementation
IT Applications/Automated Controls related to business processes such as Procure to Pay, Order to Cash, Inventory, Payroll, Treasury, Record to Report, etc.
System-Generated Report/Information Produced by Entity (IPE) testing
Exposure to engagements related to IT SOX, IT Internal Audit, Service Organization Controls (SOC), Information Security Reviews, and/or Cloud Security Reviews/Testing.
Certifications like CISA, CISM, and CRISC is a plus but not required.
With reasonable experience and knowledge of IT General Controls, Cyber security, Security and Audit Frameworks (ISO27001, NIST 800-53), project management and IT risk management.
A proactive problem solver with the ability to adapt and learn in a fast-paced, innovative environment.
Strong project management, teamwork, and client service skills.
Excellent written and oral communication skills, with the ability to present complex information clearly to stakeholders.
PERKS & BENEFITS
Perks and benefits would include:
Remote setup
Company-provided equipment for seamless experience
Quarterly team activities to stay connected and engaged
