Roles & Responsibilities
Perform controls (On-prem & Cloud) including assessment of Control design Adequacy & Control Operating effectiveness
Demonstrable knowledge on different audit regimes such as SOx 404, SOC2, SSAE18, ISO 27001 etc
Establishing and operating processes and procedures for control testing.
Excellent executional skills with respect to control testing
Reporting and tracking on prem and cloud control gaps as well as ineffective or inadequate controls
Identify opportunities and recommendations to improve the design and implementation of controls
Support control owners in the design and maintenance of controls and documentation
Undertaking such other tasks and responsibilities as assigned by Manager
Keep yourself up-to date with latest IS regulations and standards
Qualified to degree level, preferably in a business, IT or security related subject
3-5 yrs.
Skill Proficiency
Basics of IT Auditing and IT Risk concepts Advance
Testing of ITGC Controls (TOD &TOE) Intermediate
Knowledge of Sox, SOC & other IT and Privacy related standards Intermediate
Understanding of Active Directory, Privileged Access Management Controls. Intermediate
Understanding of RCMs and Audit Documentations Intermediate
Cloud Security & Cloud Control Testing Basic
Knowledge of Risk management tools, methodologies and practices Basic
Experience in testing OS and DB controls Basic
Knowledge of SIEM, PAM & Discovery Tools. Basic
Verbal communication skills Advance
Written communication skills Advance
Managing Stakeholders Intermediate
Critical Thinking Intermediate
Adapting to Change Intermediate
Relationship Building Intermediate
to be accomplished by recruiter