Hiring For ITGC, TPRM, 2+ years experience

WNS Holdings; Gurugram District; On-site; INR 1,200,000 - 2,100,000; Full time

Job summary

WNS Holdings is seeking professionals with strong IT general controls know-how to assess and enhance risk management. The role involves understanding IT risk methodologies, guiding TPRM lifecycles, and reviewing SOC 1/SOC 2 and ISO 27001 frameworks. You will interview stakeholders, prepare artifacts, and conduct design and operating effectiveness tests.

Ideal candidates hold CISSP/CISA/CRISC/CISM or ISO27001 expertise, with the ability to travel domestically and internationally as required.

Qualifications

• Must have strong audit documentation skills including preparing and presenting audit/review reports
• Must have strong delivery orientation with excellent communication and presentation skills
• Strong team player who thrives when working in fast-paced, high energy and project-oriented environment and is accustomed to driving outcomes in matrix organization structures
• Action and results-oriented, self-driven person with a high energy level, analytical and structured, quality-focused and adaptable
• Flexible and capable of domestic and international travel

Responsibilities

• Experience in IT general controls (incl Change Management, User Access Management, IT Operations, Backup & Recovery, System Development Life Cycle, etc) , Third Party Risk Management, Information Security, or Internal Audit
• Understanding of IT Risk Assessment methodologies and ability to comprehend the existing IT Security Systems
• Strong understanding of TPRM lifecycle management, SOC 1/SOC 2 reports, ISO 27001 certifications and security assessment
• Interview client stakeholders, conducts walkthrough meetings & develop assessment artifacts.
• Ability to independently perform the Test of Design & Test of Operating Effectiveness for IT General Controls and provide quality deliverables within defined timelines.
• Hands-on experience in major frameworks & standards such as NIST, DORA, SOX, COBIT, ISO:27001, SSAE18, ISAE 3402, etc.

Skills

IT General Controls

IT Risk Assessment

TPRM / Third Party Risk

Information Security

Security Standards

SOC 1/SOC 2 Reporting

Education

CISA

CRISC

CISSP

CISM

ISO 27001 Lead Expert

Certified Third Party Risk Professional

Job description

Role & responsibilities

• Experience in IT general controls (incl Change Management, User Access Management, IT Operations, Backup & Recovery, System Development Life Cycle, etc) , Third Party Risk Management, Information Security, or Internal Audit
• Understanding of IT Risk Assessment methodologies& ability to comprehend the existing IT Security Systems
• Strong understanding of TPRM lifecycle management, SOC 1/SOC 2 reports, ISO 27001 certifications and security assessment
• Interview client stakeholders, conducts walkthrough meetings & develop assessment artifacts.
• Ability to independently perform the Test of Design & Test of Operating Effectiveness for IT General Controls and provide quality deliverables within defined timelines.
• Hands-on experience in major frameworks & standards such as NIST, DORA, SOX, COBIT, ISO:27001, SSAE18, ISAE 3402, etc.

Preferred candidate profile

Minimum qualifications

CISA, CRISC, CISSP, CISM, Certified ISO 27001 Expert, or Certified Third Party Risk Professional

Experience: 2+ years

Other Skills

• Must have strong audit documentation skills including preparing and presenting audit/review reports
• Must have strong delivery orientation with excellent communication and presentation skills
• Strong team player who thrives when working in fast-paced, high energy and project-oriented environment and is accustomed to driving outcomes in matrix organization structures
• Action and results-oriented, self-driven person with a high energy level, analytical and structured, quality-focused and adaptable
• Flexible and capable of domestic and international travel