ABOUT THE JOB
Essential Job Functions
To perform this job successfully, an individual must be able to perform each essential function satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.
Provide high quality client service, working directly with onshore and/or client teams to understand and evaluate client’s IT environment and controls.
Manage and perform the efficient execution of controls testing related to Information Technology General Controls (ITGC), Application Controls, and IT security controls.
Designs, prepares and/or review internal and client audit reports.
Provides effective leadership to employees and/or teams through providing direction, training, communicating performance expectations and providing feedback and performance.
Provide insight in maintaining risk, threat and controls inventory as aligned with globally accepted standards or frameworks.
Execute IT infrastructure configuration reviews based on best practices and accepted benchmarks.
Oversee the validation of risk assessments, process and technology control designs, control gap identification, test scripts and evidence and identification of compensating controls.
Provide insight into implementing Information Security Standards and Guidelines (e.g., IT Policies and Procedures, Security Incident Plan, Response Playbook, Configuration Benchmarks) as aligned with best practices, regulatory, and client requirements.
Provide support in rolling out IT Security Projects and IT Operational directives of the firm.
WHAT WE'RE LOOKING FOR
Minimum Requirements/Education
Relevant degree preferred, not required.
At least 8 to 15 years of experience related to audits/reviews of IT General Controls across different platforms (Application, Operating System, Database) related to the following:
User Access Management
Backup and Recovery Management
Batch Job Management
Problem/ Incident Management
System development/acquisition, migration, and implementation.
IT Applications/Automated Controls related to business process such Procure to Pay, Order to Cash, Inventory, Payroll, Treasury, Record to Report, etc.
System-Generated Report/ Information Produced by Entity (IPE) testing.
With exposure leading any of engagements related to IT SOX, IT Internal Audit, Service Organization Controls (SOX), Information Security Review, and/or Cloud Security review/testing.
Certifications like CISA, CISM, CRISC is a plus but not required.
With reasonable experience and knowledge of IT General Controls, Cyber security, Security and Audit Frameworks (ISO27001, NIST 800-53), project management and IT risk management.
With a qualitative trait of being accountable, proactive problem solving, and proven ability to adapt and learn in an innovative environment.
Excellent project management, teamwork, and client service skills.
Excellent presentation, written and oral communication skills.
Technical and Other Skills
Ability to effectively work and collaborate on a work from home environment.
Intermediate knowledge of Microsoft Office (Required)
Leads and manages client engagements, oversees audit execution, and provides overall direction.
Working knowledge of IT Infrastructure technologies (Network, Server, Email), IT Security (EDR, Encryption, Network Security, Vulnerability and Patch Management).
Ability to effectively present information and respond to questions that is understood by stakeholders (Required)
Strong time management and organizational skills (Required)
Attention to detail and accuracy (Required)
PERKS & BENEFITS
Perks and benefits would include:
Remote setup
Company-provided equipment for seamless experience
Quarterly team activities to stay connected and engaged
