IT Audit

2 weeks ago


Bengaluru, India Corporation Service Company Full time

Role: IT Audit & Risk Analyst

Location: Bangalore

Schedule: 4PM IST – 1AM IST ( +/- 1 hour based on the Day light savings time)

Working model: Hybrid

Introduction :

The IT - Auditor and Risk Analyst is a highly respected, influential, and in-demand role within the business. The position is responsible for supporting the security direction of the business and elevating the company’s security posture across multiple jurisdictions. The IT Auditor Risk Analyst is expected to support the security strategy of the business within new and existing information system capabilities. Consequently, the position requires both an understanding of legacy systems, as well as new technologies and regulatory requirements. The IT Auditor Risk Analyst is also responsible for leading internal audit efforts and coordinating with audit partners. 

The ideal candidate is technical and possesses at least five-eight years relevant experience in security, compliance, risk management, or audit. In addition, the candidate should have a strong background in application development and configuration specifically around GRC tools. The role oversees the business’ adherence to security requirements and obligations mandated by standards, regulations and regulating bodies such as the Sarbanes-Oxley Act (SOX), General Data Protection Regulation (GDPR), Federal Financial Institutions Examination Council (FFIEC), and International Organization for Standardization (ISO), AIFMD, PSD2, EBA, ESMA, MAS, CSSF, CIMA, CBI. In tandem with security leadership, the IT Auditor Risk Analyst consistently assesses, audits, and validates the assurance of the security program. As a primary point of contact for internal and external auditors, the IT Auditor Risk Analyst monitors progress and enforces resolution of outstanding issues that may lead to non-compliance or security threats to the business. As a key member of the information security team, the IT Auditor Risk Analyst must focus on strong risk management and corporate resiliency, and not be driven solely by compliance

  Your role :

Partner with global teams across Business Operations, Application, Compliance, IT and Legal to manage technology risks and regulatory compliance. Deliver assigned internal, external and jurisdictional audits per a published audit plan. Implement and support GRC technologies and tools within the Enterprise Technology Function. Draft and publish policies, standards, guidelines and procedures related to security and IT compliance. Improve compliance of IT processes and identify opportunities for technology compliance control automation. Execute end to end compliance initiatives in accordance with the compliance roadmap. Design high-quality test plans and direct technology control test activities. Build and maintain controls that map to compliance requirements, provide implementation recommendations and monitor evidence. Continuously improve the technology control framework in alignment with industry trends Contribute to coordination with jurisdictional inspectors and audit partners. Keep up to date with external technology and compliance regulations, data privacy and security best practices. Define and publish quantitative and qualitative technology compliance metrics and metrics to assess the success of the security program. Identify strengths and weaknesses in IT technology operations and projects as they relate to privacy, security, business resiliency and regulatory compliance. Document, formulate and enforce areas of security improvement that balance risk with business operations and do not diminish efficiencies or innovation. Work in tandem with GRC and business leadership to perform ongoing security program assessments and audits and create annual strategic technology and budgetary directives. Analyse findings, and document, recommend and report program gaps to security leadership.

What technical skills, experience, and qualifications do you need?

At least 5-8 years’ relevant experience in IT audit, risk management and/or cybersecurity as a practitioner Bachelor’s degree in computer science, information assurance, MIS or related field, or equivalent industry experience. Strong business acumen and security technology skills for well-rounded proficiency, as well as proven ability to align with security practices and compliance responsibilities.  Exceptional written and verbal communication skills, and proven ability to translate security and risk to all levels of the business. IT Developer expertise to configure and administer GRC tools may be a plus. Knowledge of global technology laws and regulations, including but not limited to PCI, SOX, FFIEC, ISO, GDPR, AIFMD, PSD2, EBA, ESMA, MAS, CSSF, CIMA, CBI, DORA. Understanding of audit standards and practices, and control frameworks (ISO, NIST, COSO, COBIT, . Understanding of security concepts of threat categories (such as malware, phishing attacks, Defense-in Depth, MITRE ATT&CK framework). Understanding of technology policies, standards, and guidelines. Experience with regulations and regulatory expectations regarding technology in the region of your accountability. Capacity to understand legacy and progressive technology and security controls along with respective risk. Working knowledge of technologies such as cloud computing, DevOps and application security. Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively.

Additional Qualifications

Prior experience conducting internal and/or external audits.  Prior hands-on experience working with any GRC systems like Diligent, MetricStream, Logic gate, One trust, Archer etc. Demonstrated problem-solving capabilities, and ability to manage complex local and international security requirements. Self-motivated, directed, and well-organized, with the vision to position controls in anticipation of threats.  Highly trustworthy; be an Individual contributor and Team player who leads by example.

Certification Requirements

Holds or is working towards one or more security, audit or risk industry certifications preferred such as: CISSP, CISM, CRISC, CISA, CIA, CIPP, CIPT, CIPM, CERA, CRM, GRCP, GRCA or ISO 27001 LA. Any Certifications in IT Programming like .net, Java, Python, SQL, APIs etc is a good to have.

  • Bengaluru, India EOS IT Solutions Full time

    **WHO WE ARE**: EOS IT Solutions is a Global Technology and Logistics company, providing Collaboration and Business IT Support services to some of the world’s largest industry leaders, delivering forward-thinking solutions based on multi-domain architecture. Customer satisfaction and commitment to superior quality of service are our top business...

  • Call Audit

    2 months ago


    JP Nagar, Bengaluru, Karnataka, India PRODAT IT SOLUTIONS (INDIA) PVT. LTD Full time

    **Requirements and Skills**: - 0-3 years of experience in customer services International / domestic Voice Process. - Should have the analyzing skills to provide the necessary feedback. - Need to be able to audit the calls, identify the right opportunity areas and provide feedback. **Responsibilities**: - Analyzing and sharing feedback of calls made by...


  • Bengaluru, India IT Full time

    Job Overview :We are looking for an experienced IT Security Analyst with a strong background in vendor risk assessments, gap assessments, and information security audits. The ideal candidate will have at least 4 years of IT security experience and possess excellent communication skills. This role requires a proactive approach to identifying and mitigating...


  • Bengaluru, India IT Full time

    Job Overview :We are looking for an experienced IT Security Analyst with a strong background in vendor risk assessments, gap assessments, and information security audits. The ideal candidate will have at least 4 years of IT security experience and possess excellent communication skills. This role requires a proactive approach to identifying and mitigating...

  • Data Security Analyst

    1 month ago


    Bengaluru, India IT Full time

    Job Title : Data Security Specialist- .Experience Required : - 4+ years of experience in Data Security.Job Description : We are seeking a skilled Data Security Specialist with expertise in implementing and maintaining data security solutions. The ideal candidate will have hands-on experience with Varonis, Microsoft Data Loss Prevention (DLP), Insider Risk...

  • Data Security Analyst

    2 weeks ago


    Bengaluru, India IT Full time

    Job Title : Data Security Specialist- .Experience Required : - 4+ years of experience in Data Security.Job Description : We are seeking a skilled Data Security Specialist with expertise in implementing and maintaining data security solutions. The ideal candidate will have hands-on experience with Varonis, Microsoft Data Loss Prevention (DLP), Insider Risk...

  • Accounts Assistant

    1 month ago


    Bengaluru, Karnataka, India Princeton IT America Full time

    Qualification: CA inter Experience: 2 to 3 years. Requirement: - Should have a working knowledge or excel/word. - Accounting knowledge with regard to AP,AR, GL and FA. - Should have working knowledge of preparing schedules for audit. - Should handle audit queries on schedules provided. - Month end closing activities like provisions, depreciation run...

  • Pharmacist

    2 weeks ago


    Bengaluru, India Greenwave IT Full time

    Roles & Responsibilities of a Pharmacist: - Dispense medicines - Inventory management - Vendor ordering management - Receiving medicines from the suppliers - GRN/Invoice entry - Answering the customer queries - Stock Audit/verification - A minimum of 1 year of work commitment is desired. Immediate joiners are only required. **Salary**: ₹10,000.00 -...

  • Accounts Assistant

    6 days ago


    Bengaluru, Karnataka, India Princeton IT America Full time

    **JD**: Requirement: - Should have a working knowledge or excel/word. - Accounting knowledge with regard to AP,AR, GL and FA. - Should have working knowledge of preparing schedules for audit. - Should handle audit queries on schedules provided. - Month end closing activities like provisions, depreciation run etc. Below are the skillsets to be considered. -...


  • Bengaluru, Karnataka, India Prodat IT Solutions Full time

    Job Description - Preparing excel working papers Import TB on CCH Disclosures as per standard Adjustments posting Accruals Deferred Income & Accrued Income Knowledge on Audit Import and export of TB and adjustments to and from Pro audit GL review up to some extent Sound knowledge of accountsMust Have Experience in : UK Personal and Year End Accounts


  • Bengaluru, Karnataka, India Prodat IT Solutions Full time

    Job Description - Preparing excel working papers Import TB on CCH Disclosures as per standard Adjustments posting Accruals Deferred Income & Accrued Income Knowledge on Audit Import and export of TB and adjustments to and from Pro audit GL review up to some extent Sound knowledge of accountsMust Have Experience in : UK AccountsOnly Immediate Joiners Apply.


  • Bengaluru, Karnataka, India Prodat IT Solutions Full time

    Job Description - Preparing excel working papers Import TB on CCH Disclosures as per standard Adjustments posting Accruals Deferred Income & Accrued Income Knowledge on Audit Import and export of TB and adjustments to and from Pro audit GL review up to some extent Sound knowledge of accountsMust Have Experience in : UK Personal and Year End Accounts Only...


  • Bengaluru, India IT Full time

    Title : BeyondTrust Integration Specialist. Job Description : We are seeking a highly skilled BeyondTrust Integration Specialist to join our team and take charge of our Privileged Access Management (PAM) initiatives. As a BeyondTrust expert, you will play a critical role in designing, implementing, and supporting our PAM solutions, ensuring the security and...

  • Palo Alto Architect

    2 weeks ago


    Bengaluru, India IT Full time

    Job Summary :- 10+years experience.Network Security Design and Implementation :- Design and implement network security solutions using Palo Alto Networks technologies, including firewalls, VPNs, and endpoint protection.- Develop and maintain security architecture diagrams and documentation.- Ensure the scalability, robustness, and reliability of security...

  • Palo Alto Architect

    2 weeks ago


    Bengaluru, India IT Full time

    Job Summary :- 10+years experience.Network Security Design and Implementation :- Design and implement network security solutions using Palo Alto Networks technologies, including firewalls, VPNs, and endpoint protection.- Develop and maintain security architecture diagrams and documentation.- Ensure the scalability, robustness, and reliability of security...


  • Bengaluru, India IT Staffing Full time

    **Key Responsibility**: - Managing the entire payroll process. - Ensuring new joiners are effectively inducted (induction process) - Managing On-boarding formalities and documentation - Managing employee records as per SOP requirements - Managing the employee helpdesk by reverting within TAT to queries - Ensuring that all HR processes are compliant with...


  • Bengaluru, India Quess IT Staffing Full time

    **About Us** “Magna Infotech, now Quess IT Staffing, is India’s largest IT staffing company with over 20 years of experience in staffing IT professionals in 300+ companies across levels and skillsets. Our 10,000+ associates deployed in 80+ cities and towns are proficient in over 500 technological skills. Our associates help enable cutting edge solutions...

  • PAM Specialist

    4 weeks ago


    Bengaluru, India IT Full time

    Job Title : Senior Privileged Access Management (PAM) Specialist BeyondTrust- .Experience Level:- Senior (6+ years).Job Summary : We are looking for an experienced Senior Privileged Access Management (PAM) Specialist with a strong background in BeyondTrust solutions. The ideal candidate will be responsible for onboarding applications to the PAM framework,...

  • PAM Specialist

    2 weeks ago


    Bengaluru, India IT Full time

    Job Title : Senior Privileged Access Management (PAM) Specialist BeyondTrust- .Experience Level:- Senior (6+ years).Job Summary : We are looking for an experienced Senior Privileged Access Management (PAM) Specialist with a strong background in BeyondTrust solutions. The ideal candidate will be responsible for onboarding applications to the PAM framework,...

  • IAM Specialist

    4 weeks ago


    Bengaluru, India IT Full time

    Job Title: Mid-Level Identity and Access Management (IAM) Specialist- .Experience Level:- Mid-Level (5+ years).Job Summary : We are seeking a highly skilled and motivated Mid-Level Identity and Access Management (IAM) Specialist to join our team. The ideal candidate will have extensive experience in Ping Identity products, including Ping Access, Ping...