Capital Float - IT Audit Specialist/Manager

(S)he incumbent should be able to work on audit missions that may be needed in the company. (S)he should be conceptually sound in Information Security, Risk Management, IT Audits and take the lead on all these fronts to even grow a team of associates to assist in the various audits.

Educational Requirements - 

- Graduate or above

- Lead auditor certified ISO 27001

- Lead auditor certified on ISO 9001 and 20252 will be an added advantage

Skills required :

1. Technical: Hands-on experience of IT Audit, information security and risk management. Skills in software development and project management (preferably following AGILE methodologies XP, SCRUM, Lean Development). Working experience in Object Oriented languages (Java, C# or dot Net, C++)

2. Functional: Exposure to Lending Banking Products

3. Behavioural: Result Oriented, People Development, Change leadership, Team Leadership

Responsibilities - 

- Help implement and sustain certifications including but not restricted to ISO 27001,and 9001

- Create awareness on the International standards for information security i.e. ISO 27001, quality ISO 9001, GDPR

- Build a strong team of internal auditors to audit the processes with respect to above standards on a periodic basis.

- Assists audit management in preparation & execution of the audit plan

- Responsible for getting VAPT done through an external vendor for all locations globally. Timely closure of all VAPT findings by coordinating with Vendor and internal stakeholders

- Recommend ways and means to improve the organizations compliance to standards and hence demonstrate continual improvement

- Maintaining and controlling the ISO documentation

- Prepares Audit work program and understands the specific risks to be evaluated.

- Performs evaluation of internal controls, testing of processes

- Performs reviews of major financial and operational processes

- Perform detailed testing of information system integrity and transaction accuracy.

- Perform tests on the effectiveness of the Internal control environment within SG.

- Maintains clear work papers and audit trail of the work done in the appropriate tool

- Write formal & clear reports to communicate audit results to management

Personal Success Characteristics - 

- Lead auditor for ISO 27001 and GDPR. Additional exposure to ISO 20252 and ISO 9001 will be preferred

- Good English verbal and written communication skills.

- Knowledge of MS Word, Excel and PowerPoint

- Knowledge and experience in basic understanding of Network and Windows Operating systems

- Candidate should be familiar with VLAN and Firewall security

- Knowledge and experience of managing VAPT for organization

- Candidate should be familiar with review of logs, Systems, Network etc.

- Good time management skills, Stakeholder management

- Strong analytical mind and an eye for detail