Job Title: Senior Consultant - IT Audit

Location: Mumbai - Goregaon East

Qualification:

1. CA Must

2. Should have at least one of the following certifications: CISA/CISM/CISSP/ISO27001 LA/ISO 22301 LA/CBCP

Roles and Responsibilities

- Perform IT Audit reviews in areas if ITGC, SOX, SOC-1 & SOC-2 Audits

- Risk Assessment, identification and Evaluation of Controls, capturing the same in Risk & Control Matrix

- Perform Business process walkthrough and control testing for SOC engagements

- Perform testing of IT security Application controls and Interface controls, ITGC review, Change Management, Access Control, Business Continuity and Disaster recovery,

- Conducting Quality review of the Work performed by the team on control testing

- Reviewing and developing clients custom control catalogues to ensure alignment of test procedures and control language to enhance efficiencies in remote execution of test procedures

- Review the work done by team on SOC1 Testing and documentation- Identify and IT control weaknesses in processes by performing Risk Assessment and document the findings

- Constantly develop strong working relationships with engagement managers and onshore team members.

- Perform Vulnerability Assessment and Penetration testing as per clients requirement using industry standard tools

Qualifications and Skills

Education / Professional Qualification

- Chartered Accountancy

- Should have at least one of the following certifications: CISA/CISM/CISSP/ISO27001 LA/ISO 22301 LA/CBCP, or any other relevant certification

- Prior Experience: 2-4 years of experience in IT Audit, ITGC, SOX, SOC-1, SOC-2, Application Control Review

- Experience or exposure to Big4 accounting firms/consulting firms is advantageous

- Proficiency in IT - Operating Systems, Database and Networking concepts (Windows, Unix, Oracle, MSSQL, DB2)

- Should be able to test basic, and automated ERP ITGC controls (SAP, Oracle, etc.)

- Advance Knowledge of Excel, Visio and collaboration tools

- Ability to adapt to new scope areas and technologies

This job opening was posted long time back. It may not be active. Nor was it removed by the recruiter. Please use your discretion.