FS TR- ITC – Tech Risk

Key Responsibilities:

• Participate in IT Risk and Assurance engagements, collaborating effectively with team members.

• Support the preparation of reports and schedules for clients and stakeholders.

• Develop and maintain productive working relationships with client personnel.

• Manage reporting on assurance findings and ensure control owners take necessary remediation actions.

• Lead the continuous improvement of internal controls through monitoring and automation.

• Review evidence of compliance with established standards.

• Ensure adherence to compliance controls in areas like change management, system access, network security, and system development.

• Stay informed about regulatory standards, upstream risk, and industry best practices.

• Understand control frameworks such as COSO and related regulations including SOX and J-SOX.

• Conduct operational audits, including SDLC, cybersecurity, data privacy, and network security audits.

• Utilize data analysis tools such as Tableau, Power BI, and Python.

• Conduct performance reviews and provide feedback for staff.

• Adhere to the organization's Code of Conduct, setting standards for behavior and decision-making.

Skills and Attributes for Success:

• Experience in application controls and information security.

• Understanding of risk management systems and processes.

• Ability to build relationships with stakeholders across various levels of seniority.

• Strong written and verbal communication skills.

Qualifications:

• Bachelor’s degree in Finance, Accounting, Electronics, Telecommunications, Computer Science, MBA, M.Sc., or CA.

• 1-2 years of experience in internal controls and internal audit.

• Familiarity with IT risk assurance frameworks and industry standards.

• Knowledge of control frameworks like COSO, SOX, and J-SOX.

• Experience with various operating systems, databases, and security tools (e.g., UNIX, Linux, Windows).

• Familiarity with IT analysis and operations methods, including SDLC and change management.

• Knowledge of security and risk standards such as ISO 27001-2, PCI DSS, NIST, and ITIL.

• Experience with security testing methods and controls testing.

• Proficiency in data analysis tools, including MS Excel, MS Access, SQL Server, ACL, and Monarch.

• Preferred certification: CISA.

4o mini