IT Risk Management/IT Audit Professional - Consulting Firm

Engagement Management:

- Understand the process workflow related to work requests from initiation through completion, understand how workflow is managed within the firm's workflow management tool, understand optimal and required manner in which to document results of work performed.

- Perform IT related controls testing and evaluation for Information Systems.

- Prepare test procedures based on control requirements and documentation of test results based on testing performed.

- Report control deficiencies identified, to team Senior/Manager.

Practice Development:

- Development and deployment of company's methodologies (related to risk assessment and prioritization, risk responses, and risk management capability assessments), supporting tools and other materials.

Extensive experience required in:

1. IT General Controls across platforms (Application, OS, DB) for following areas:

- Change Management

- User Access Management

- Backup and Recovery Management

- Batch Job Management

- Problem/Incident Management

2. Business Process cycles (Purchase to Payable; Revenue & Receivables; Inventory; Payroll; Treasury)

3. Hands on experience in working or auditing SAP BASIS and business cycles or Oracle Apps.

4. Generally accepted audit standards, and Corporate Internal Audit standards

5. Experience with SOX, Internal Audit and SSAE 16 (At least 1 of 3)

6. Working knowledge of:

- System architecture, business processes and system risks, Operating system and database platforms (such as Windows, Unix, OS400, Mainframe, SQL, Oracle, DB2 etc)

- Good understanding of industry standards and frameworks such as ISO/IEC 27001, COBIT, ITIL, COSO etc.