Senior Consultant - IT General Controls - Risk Advisory

Sr Consultant- ITGC, RA

IT General Controls:

Requirement:

1. Good communication skills.

2. Experience on IT General Controls (ITGC) testing.

3. Strong understanding of IT General Controls domains such as:

a. Change Management

b. Access to Programs and Data

i. Logical Access Management

ii. Antivirus Management

iii. Database Security

iv. Segregation of duties

v. Physical Security

vi. Data Leakage Prevention

vii. Remote Access

viii. Privilege Access Management

ix. Policies & Procedures

x. Third Party Access

xi. Application security

xii. Operating system security

xiii. Network / connection security

xiv. IT Operations

xv. Back Up and Recovery Management

xvi. Incident Management

xvii. Physical and Environmental Security

c. Computer Operations:

i. Batch processing

ii. Incident Handling

iii. Capacity & Availability Management

iv. Backups and Disaster Recovery

v. Patch Management

vi. Antivirus Management

vii. Batch Monitoring

viii. System Development

4. Worked on maintaining and achieving SOX compliance.

5. Experience on checking Design Effectiveness (DE) and Operational Effectiveness (OE) for a control.

6. Experience in validating the completeness and accuracy of samples/ population.

7. Experience in writing policies and procedures.

8. Good communication skills.

9. Good team player.

10. Good presentation skills and senior stakeholder management.

IT Risk Assessment:

Requirement:

1. Experience in conducting IT risk assessments.

2. Sound understanding of ISO 27001, NIST, PCI, Data Privacy, and Cloud Security.

3. Knowledge on application infrastructure architecture.

4. Knowledge on SaaS application architecture.

5. Knowledge on database and middleware communication.

6. Knowledge on API security.

7. Good communication skills.

8. Good team player.

9. Good presentation skills and senior stakeholder management.

10. Certifications - CISA, CISSP, CCNP, CCSP, CISM, CRISC etc

Qualification:

1. 2 to 6 years of experience.

2. BE, B.Tech, M.Tech, MCA, MBA graduates.

3. Experience in IT Risk Advisory/ Assurance for varied industry segments preferred.

4. Excellent communication skills, both written and oral.