Job Description

: Key Responsibility: You will be responsible to perform walkthrough, design/ perform/ review tests of controls and mentor and monitor member of team in the engagement. You can expect to work with client/s personnel directly to execute compliance, financial and operational risk projects. Progress management and team handling exposure will be required for this role. Skills and attributes : At least 8 years of experience in conducting IT general control reviews, application controls testing, key report controls and reviewing SOC reports and auditing key reports for SOX compliance Familiarity with tools and technologies such as Active Directory, UNIX, SQL, Oracle, Mainframes, Cloud, or at least one major ERP such as SAPOracleWorkday Knowledge of cyber security and information security frameworks such as NIST, SANS, CSC Effectively discuss all control weaknesses with Management, propose recommendations for controls and professionally reach agreement in a timely manner as to required actions; within IT audit management and IT clients at all levels. Holds relevant industry certifications such as CISA, CISSP, CISM, CEH, ISO 27001 LA, IA etc. A good understanding of IT data center operations and a variety of technology platforms. Exposure of reviewing ITGC and ITAC over various ERPs Excellent communication, documentation and report writing skills Ability to interact and establish relationships across all levels Experience & Professional Pre-Requisites 8-11+ years of professional experience in areas of risk & compliance (operational risk, SOX compliance, internal audit, IT General controls Review, Cyber security reviews etc.). Professional certification such as CISA or CISM. Exceptionally good MS office skills Relationship building & networking capabilities. Ability to engage in a conversation, demonstrate a solution-oriented approach & work on new business concepts / ideas / delivery models Experience in managing diverse teams - working across departments / time zones & geographies Strong understanding of IT Risk, System infrastructure, Cyber Security and auditing concepts and standards