Senior Consultant

Pierag Consulting; Mumbai; On-site; INR 800,000 - 1,200,000; Full time

Job summary

A global consulting firm is seeking a Senior Consultant in Technology Risk to perform IT controls testing for significant audits like SOX and HITRUST. The candidate should have 4-6 years of relevant experience, strong expertise in ITGC and ITACs testing, and proficiency in major operating systems and databases. This role offers the opportunity to work within a dynamic team environment while maintaining high-quality standards in project deliverables. Certifications such as CISA or CISSP are beneficial.

Qualifications

• 4 - 6 years of relevant work experience in IT General Controls testing.
• Proficiency in major operating systems like Windows and Unix/Linux.
• Certifications such as CISA, CISSP, or ISO 27001 preferred.

Responsibilities

• Perform IT controls testing across audits/certifications.
• Conduct IT risk assessments and draft process documentation.
• Lead process walkthroughs and ensure quality standards.

Skills

IT Risk

ITGC and ITACs testing

Testing SOX controls

Data extraction

Microsoft Office Suite

Education

Postgraduate (PG) in IT / Information Security / Systems

Tools

SAP

MS Dynamics 365

MS-SQL

Oracle

Job description

About Us

About Us

Job Description – Technology Risk, Senior Consultant

Pierag is a Global Consulting Firm with a unique business model that blends domestic proficiency with global expertise to serve clients globally. With a team of over 250 highly skilled professionals, we serve prominent clients across the US, India, UK, and Southeast Asia in the field of Assurance, Business Risk, Technology Risk, and Accounting Advisory services.

Pierag Consulting was founded in February 2021 and was formerly known as Pierian – Assurance and Advisory Services.

At Pierag, we don't just offer consultancy; we forge strategic partnerships committed to steering businesses through challenges and towards success. We have our offices in Gurgaon, Jaipur, Chandigarh, Bengaluru and Washington DC.

Our Services Includes

• Assurance
• Business Risk Advisory
• Technology Risk Advisory
• Accounting Advisory

Position Summary

You will be part of a team responsible for performing Information Technology (IT) controls testing across audits / certifications such as SOX, SOC 1, SOC 2, HITRUST CSF. Perform IT risk assessments, drafting process documentations and Data-Flow-Diagrams (DFDs).

Your Key Responsibilities Will Include

• Performing IT General Controls (ITGC) across areas such as:
• Access Management
• Change Management
• Computer Operations: Incident and Problem management, Job scheduling, Data Migration
• Business Continuity and Disaster Recovery
• Business / Application Controls (ITACs) testing
• Lead business / IT process walkthroughs with clients
• Performing Information Provided by Entity (IPE) testing include completeness and accuracy checks
• Drafting process documents and DFDs using MS Visio
• Drafting work papers and test sheets on assigned projects basis testing performed
• Ensuring expected work product quality standards are achieved and maintained
• Support team members across the project team on assigned projects
• Perform regular reviews of project deliverables of team members prior to Manager reviews
• Prepare and present project status updates to clients and Project Manager
• Keep track of project progress and proactively suggest resolution steps and notify stakeholders of any concerns

To Excel In This Role, You Need

• Experience in IT Risk, ITGC and ITACs testing
• Experience in testing / reviewing IT SOX, HITRUST CSF controls and testing / drafting / scoping of SOC 1 / SOC 2 reports
• Ability to work on key operating systems such as Windows, Unix / Linux and databases such as MS-SQL, Oracle and Non-RDBMS
• Good understanding of query languages for data extraction from databases
• Experience with testing ITGC and ITACs in ERP application such as: SAP, NetSuite, MS Dynamics 365 etc
• Good verbal and written / documentation skills
• Proficiency in Microsoft Office Suite of applications

It Will Be Awesome, If You

• Are willing to work in a dynamic environment
• Like working in teams, believe in supporting your team and building strong working relationships
• Like to keep pace with developing technologies
• Are disciplined and committed to delivering assigned tasks within stipulated timelines
• Have an analytical approach to work

You Should Be a

• Postgraduate (PG) (in IT / Information Security / Systems) with Relevant Work Experience. Certifications will be an advantage
• Work Experience: 4 – 6 years
• Postgraduate (PG): MBA / M.Tech / MCA / CA / CPA
• Relevant work experience: Experience in IT General Controls (ITGC) testing, IT Application Controls (ITAC) testing, ERP audits, IT Risk Assessments, IT Internal Audits etc, SOC 1 / SOC 2 Audits, HITRUST Assessments
• Certifications: CISA, CISSP, CISM, PCI DSS, HITRUST CSF, ISO 27001, CEH, Cloud – AWS / GCP / Azure