IN_Associate_ITGC_RC - GRC AITH_Advisory_Noida

JOB DESCRIPTION 

ITGC Audits, IT Internal Audits, IT Controls Testing, IT SOX Testing, IT Application Controls, ERP (SAP, Oracle etc.) Control Reviews, IT Compliance Assessments (ISO 27001, NIST etc.) 

Position title: 

Senior Associate_ITGC_GRC_Advisory 

Experience: 

3-7 years 

Location:  

G. Noida/ Bhuvaneshwar/ Kolkata 

Department: 

Risk Consulting - GRC 

Purpose of the Job /Role 

Perform ITGC Audits, IT Internal Audits, IT Controls Testing, IT SOX Testing, IT Application Controls, ERP (SAP, Oracle etc.) Control Reviews, IT Compliance Assessments (ISO 27001, NIST, HIPPA, HITRUST etc.) 

Roles and Responsibilities: 

• Prior experience working in an IT Internal Audit Team or consulting company specializing in conducting IT Audits, IT Internal Audits, ERP (SAP, Oracle etc.) Reviews, ITGC, IT Application Controls Reviews. 

• Strong understanding of IT General Controls domains such as Change Management, User Access Management, IT Operations, Back and Recovery Management, BCP/ DR etc 

• Strong understanding of IT Application controls (Input/ Output Controls, Processing Controls, Interface controls) specifically w.r.t. ERP applications such as SAP, Oracle etc. 

• Understanding of IT SOX Control Testing, Internal Financial Controls (IFC) Testing 

• Understanding of the third-party risk management reviews 

• Understanding of IT Risk Management frameworks such as NIST, ISO 27001, HIPPA, HITRUST etc. 

• Should understand complete audit lifecycle from audit scoping to project deliverables 

• Ability to lead a team of 2-3 Specialist/ Associates and independently carry out IT Audits/Assessments including: 

• Understanding the client’s IT environment 

• Audit scoping considering critical systems and processes 

• Finalising Risk & Control Matrix, Data Requirements 

• Interview client stakeholders (mid-management level) 

• Conduct walkthrough meetings 

• Carry out test of design and operating efficiency of IT controls 

• Obtain relevant artefacts and identify exceptions 

• Discussion on observations/ issues identified 

• Drafting audit reports (Observation, Risk, Implication, Identify Action Owner, Timelines for closure) and presenting to key stakeholders 

• Strong knowledge and experience of MS Office Tools (Excel, Word, Powerpoint), Data Analytics Tool 

• Excellent communication & presentation skills and ability to effectively communicate observations/ issues at senior management levels 

Education:  

• Minimum Qualification: BE/ BTech/ CA (Intermediate) 

• Postgraduates in any stream would be preferred (not mandatory) 

• Prior Big 4 experience, consulting company, internal audit department would be an added advantage 

• Experience in IT Risk Assurance for varied industry segments preferred 

• Excellent communication skills - both written and oral 

Certifications: 

• CIA/CISA/CISM will be added advantage