Roles and Responsibilities:

• Strong understanding of IT General Controls domains such as Change Management ,User Access Management, IT Operations, Back and Recovery Management etc
• Strong understanding of the third-party risk management
• Implementation and assessment knowledge of various industry standards, frameworks, and compliances such as ISO 27001, HIPAA, HITRUST, NIST etc
• Understanding of the IT Risk Assessment methodologies and ability to comprehend and apply the knowledge during IT assessment lifecycle
• Interview client stakeholders and conducts walkthrough meetings and develop assessment artifacts
• Should understand complete assessment lifecycle from assessment scoping to project deliverables
• Manage execution of assigned IT assessments, supervision of the work performed by the team members during the different phases of the audit ensuring ongoing compliance to methodology and quality standards
• Collaboration with the different stakeholders on the complex assessment issues to develop possible recommendations
• Monitor progress, manage risk, and verify key stakeholders are kept informed about progress and expected outcomes
• Presents findings and proposes recommendations that deal with root cause of issues and impact to the organization
• Manages the approved budget and resources for the assigned audit; assigns and reviews the work done by all team members
• Coaches team members and colleagues in the best use of company & teams methodologies and tools
• Demonstrates excellent people management capabilities and is able to think out of the box
• Great communication skills and the ability to break down and explain complex data security problems
• Excellent presentation skills and ability to effectively communicate proposals and point of view at senior management levels

Education:

• Minimum Qualification: BE/ BTech
• Postgraduates in any stream would be preferred (not mandatory)
• Prior Big 4 experience would be an added advantage
• Experience in IT Risk Advisory/ Assurance for varied industry segments preferred
• Excellent communication skills - both written and oral

Certifications:

CIA/CISA/CISM will be added advantage