Audit And Vulnerability Management Analyst II

Bunge; Mohali; On-site; INR 800,000 - 1,300,000; Full time

Job summary

Bunge is seeking a Senior Analyst for BT Compliance and Controls Assurance in Mohali, Punjab. You will manage compliance programs, monitor internal controls, and drive remediation with cross-functional teams across BT and Cybersecurity.

The role requires 7+ years in compliance, SOX knowledge, and experience with GRC tooling like Archer. Strong analytical, communication, and stakeholder management skills are essential.

Qualifications

• 7+ years of experience in compliance and controls assurance
• Extensive knowledge of Sarbanes-Oxley (SOX) compliance
• Experience with IT general controls and cybersecurity controls
• Knowledge of PCI DSS, GDPR or other compliance programs preferred
• Strong understanding of Governance, Risk and Compliance methodologies and automation

Responsibilities

• Partner with key stakeholders to facilitate audits, compliance reviews, and other internal control activities for the BT organization.
• Perform periodic internal control testing procedures and maturity assessments to evaluate operating effectiveness of BT and Cybersecurity controls.
• Identify control gaps and support remediation actions with control owners.
• Implement and perform compliance and controls assurance processes to mitigate risks and ensure regulatory adherence.
• Provide guidance on compliance matters including training and awareness programs.
• Conduct risk assessments, internal audits, and investigations as needed.
• Utilize GRC automation for reporting and monitoring.
• Collaborate with Governance, Risk and Compliance functions across BT and Cybersecurity.

Skills

Internal controls

Auditing

Compliance

GRC tooling

Risk assessment

Communication

Education

Bachelor's degree in computer science or information systems, risk management, accounting, finance, or equivalent

Tools

Archer GRC

Job description

Job Description:

City: Mohali

State: Punjab (IN-PB)

Country: India (IN)

Requisition Number: 45846

Business Title

Senior Analyst, BT Compliance and Controls Assurance

Global Function

Business Technology

Global Department

BT Security & Infrastructure

Role Purpose Statement

The Sr. Analyst, BT (Business Technology) Compliance and Controls Assurance demonstrates a high level of professionalism, prioritizing the effective management of compliance and controls assurance activities. This role will monitor and improve the design adequacy and operating effectiveness of critical BT and Cybersecurity internal controls and related capabilities to ensure adherence to policy, applicable regulatory compliance, and to support the overall effectiveness of the BT organization.

Main Accountabilities

Partner with key stakeholders to facilitate effective audits, compliance reviews, and other internal control-based activities for the Business Technology (BT) organization. Ensure proper engagement, effective root cause analysis, and the development of meaningful and sustainable management action plans.

Implement and perform periodic internal control testing procedures and maturity assessments to evaluate the operating effectiveness of BT and Cybersecurity internal controls and related capabilities.

Define and identify control gaps, provide recommendations for control process improvements, and support control owners’ corrective action plans for remediation.

Implement and perform compliance and controls assurance processes and procedures to mitigate risks and ensure adherence to regulatory requirements.

Provide guidance and support to business units on compliance-related matters, including training and awareness programs.

Conduct risk assessments, internal audits, and investigations to identify and address potential compliance issues.

Effectively utilize process automation and reporting through Bunge’s Governance, Risk and Compliance (GRC) automation.

Actively collaborate and support partner functions across Bunge’s Governance, Risk and Compliance functions, and with stakeholders throughout BT and Cybersecurity.

Knowledge and Skills

Behavior

Use knowledge of Bunge’s business, structure and strategy to develop innovative solutions to improve results or eliminate problems. Build partnerships, appropriately influence to gain commitment, foster talent and coach others to grow in current or future roles.. Drive results through high standards, focus on key priorities, organization, and preparing others for change.

Technical

Recognized as an expert in internal controls, effective demonstration of compliance, and applicable remediation and mitigation techniques within the organization.

Can apply both a measured reactive and a deliberate proactive approach to the assurance and continuous improvement of BT and Cybersecurity internal controls, staying informed of emerging industry trends and techniques and changes in regulations to ensure continuous compliance.

Leverage industry experience and knowledge of applicable best practices (e.g., COBIT, NIST CSF, ISO 27k) frameworks, and guidance to define effective programs, strengthen internal controls, risk-prioritize requisite remediation, and to improve the overall posture of Bunge’s BT and Cybersecurity internal control environment.

Apply expertise to determine root cause, to advise leadership on appropriate remediation methods, and to mitigate or remediate internal controls to an acceptable level of residual risk, across various functional areas of Business Technology and Cybersecurity, including longstanding or unprecedented improvements without a historical precedent.

Ability to work independently and as part of a cross functional team.

Education & Experience

Bachelor's degree in computer science or information systems, risk management, accounting, finance, or equivalent combination of education and work experience.

7+ years of experience in compliance and controls assurance, internal audit, or a related field.

Extensive knowledge of Sarbanes-Oxley compliance required.

Knowledge of Payment Card Industry (PCI) compliance, GDPR (General Data Protection Regulation) compliance or other applicable compliance programs preferred.

Demonstrated experience in the monitoring and improvement of Information Technology general controls, Cybersecurity controls, and/or compliance programs required.

Solid understanding of Governance, Risk and Compliance methodologies and effective automation through GRC tooling. Experience with Archer GRC preferred.

Proven experience implementing Information Technology and Cybersecurity frameworks required. Possible examples include, but not limited to: COBIT, NIST CSF, ISO 27k.

Certifications such as CIA, CISA, CGEIT, CISSP preferred.

Ability to manage and execute numerous parallel activities in a fast-paced, dynamic environment.

Ability to build and maintain constructive and collaborative working relationships with a diverse community throughout the organization.

Ability to effectively communicate in both written and verbal manner to influence both technical and non-technical audiences at all levels of the company including executives.

Excellent analytical and problem-solving skills

Actively shapes our company culture (e.g., supporting employee resource groups, mentoring employees, volunteering, joining cross-functional projects)

Champions our cultural norms (e.g., willing to have cameras when it matters, helping onboard new team members, building relationships, etc.)

Demonstrates a company ownership mindset, thinking beyond boundaries of their own area

Every day our people exemplify these values, which represent Bunge at its core:

• We Are One Team – Collaborative, Respectful, Inclusive
• We Lead The Way – Agile, Empowered, Innovative
• We Do What’s Right – Safety, Sustainability, With Integrity

If this sounds like you, join us! We value and invest in people who believe in our purpose and are excited to live it every day – people who are #ProudtoBeBunge

Requirements: