Purpose of the Job / Role :
Perform IT Assessment Reviews which includes IT General Controls, Internal Audits, Controls Testing IFS, Compliance Reviews (such as ISO 27001, HIPAA, HITRUST etc.)
SOX Testing is not required
Roles and Responsibilities :
- Strong understanding of IT General Controls domains such as Change Management User Access Management, IT Operations, Back and Recovery Management etc -
- Strong understanding of the third-party risk management - Implementation and assessment knowledge of various industry standards, frameworks, and compliances such as ISO 27001, HIPAA, HITRUST, ISO 22301, ISO 27701 etc -
- Understanding of the IT Risk Assessment methodologies and ability to comprehend and apply the knowledge during IT assessment lifecycle
- Interview client stakeholders and conducts walkthrough meetings and develop assessment artifacts
- Should understand complete assessment lifecycle from assessment scoping to project deliverables
- Great communication skills and the ability to break down and explain complex data security problems
- Excellent presentation skills and ability to effectively communicate proposals and point of view at senior management levels
Education :
Minimum Qualification : BE / BTechPostgraduates in any stream would be preferredPrior Big 4 experience would be an added advantageExcellent communication skills - both written and oralCertifications : - CIA / CISA / CISM will be added advantage
(ref : iimjobs.com)