IT Audit Analyst

Role- IT Audit (SOC1,SOC2 Analyst)

Experience- 3-8yrs

Location- Hyderabad/Chennai

Mode of work - Hybrid

Responsibilities:

• Conduct comprehensive reviews of SOC 2 and HITRUST reports to identify and assess exceptions and anomalies that pose potential risks.

• Perform inherent risk assessments to categorize and prioritize third-party vendors.

• Identify and remediate data quality issues, including incomplete or inaccurate data values.

• Develop and maintain standard operating procedures for risk management processes.

• Review third-party contracts to ensure compliance with data security requirements and regulations.

• Maintain accurate and up-to-date data within the Archer GRC platform.

• Independently analyze program requirements, proposing effective solutions while proactively identifying and mitigating potential impacts and risks.

• Conduct risk assessments, applying established cybersecurity and risk management frameworks and methodologies.

• Develop and implement remediation action plans to address identified vulnerabilities.

Skills and Qualifications:

• Proven experience and demonstrable knowledge of information security and data security best practices.

• Strong analytical and problem-solving skills, including the ability to think critically and creatively.

• Experience with process improvement methodologies and a demonstrated ability to optimize workflows.

• Expertise in Third-Party Risk Management (TPRM) principles and practices.

• Proficiency in Coupa, Oracle, and Archer GRC applications.

• Excellent written and verbal communication skills, with the ability to clearly and effectively communicate complex information to various stakeholders, including senior management.

• Strong work ethic and initiative; ability to work independently and as part of a collaborative team.

• Advanced data analysis and aggregation skills.

has context menu