Specialist II Audit And Advisory IT And Cybersecurity Audit

TransUnion; Bengaluru; Hybrid; INR 2,500,000 - 4,000,000; Full time

Job summary

TransUnion is seeking a Specialist II, Audit and Advisory in Bengaluru to plan and execute IT and cybersecurity audits, assess controls across on-prem and cloud, and communicate risks to stakeholders. The role requires 3–7 years in IT Audit or IT Security, with professional certifications such as CISA/CISSP.

You will engage global stakeholders, work in a hybrid setup, and contribute to continuous improvement initiatives within GAA GCC IT & Cybersecurity.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• 3-7 years of experience in IT Audit, IT Risk, IT Assurance, or Information Security, including at least 2 years with a public accounting or professional services firm.
• Strong understanding of IT and cybersecurity frameworks, including NIST, CIS Controls, ISO 27001, and COBIT.
• Knowledge of information security domains: governance and risk management, access management, cloud security, network security, security architecture, application security, incident management, and business continuity/disaster recovery.
• Experience assessing IT and cybersecurity controls across on-premises and cloud environments, with understanding of infrastructure, operating systems, databases, networking and vulnerability management.
• Familiarity with security and governance tools such as Splunk, SailPoint IIQ, BMC Remedy, and audit management tools such as Optro (AuditBoard).
• Strong analytical, risk assessment, problem-solving, and communication skills with the ability to engage both technical and non-technical stakeholders.
• Self-motivated and adaptable, with ability to manage multiple priorities, work independently, and respond to changing business needs.
• Professional certification such as CISA or CISSP required.

Responsibilities

• Support planning and execution of IT and cybersecurity audits, advisory reviews, and risk assessments.
• Evaluate design and operating effectiveness of IT and cybersecurity controls across applications, infrastructure, databases, networks, and cloud environments.
• Assess IT General Controls (ITGCs), cybersecurity controls, and technology governance processes.
• Evaluate cybersecurity, access management, cloud security, incident management, business continuity, disaster recovery, and system implementations.
• Perform control testing, analyze results, and document audit conclusions.
• Prepare audit reports and communicate risks, control gaps, and remediation recommendations to stakeholders.
• Communicate observations, control weaknesses, and risks to stakeholders in a clear, professional manner.
• Where appropriate, lead portions of engagements and facilitate remediation discussions.
• Track remediation activities for open findings and validate corrective actions.
• Stay informed of emerging threats and leading practices; contribute to continuous improvement.
• Build relationships with global stakeholders while preserving audit independence.
• Participate in departmental initiatives and knowledge-sharing activities.

Skills

IT Audit

IT Risk

IT Assurance

Information Security

NIST

CIS Controls

ISO 27001

COBIT

Governance

Access Management

Cloud Security

Network Security

Security Architecture

Incident Management

Business Continuity

Disaster Recovery

Splunk

SailPoint IIQ

BMC Remedy

Optro/AuditBoard

CISA

CISSP

Stakeholder Engagement

Communication

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

Splunk

SailPoint IIQ

BMC Remedy

Optro AuditBoard

Job description

Job Description

TransUnion's Job Applicant Privacy Notice

Team Overview

The Global Audit & Advisory (GAA) function is an independent and objective assurance and advisory organization that helps strengthen governance, risk management, and internal controls across the enterprise. The India Global Capability Center (GCC) serves as a strategic extension of the global GAA organization, providing audit and advisory support across the United States, United Kingdom, APAC, Africa, and Global business functions.
The IT & Cybersecurity team within GAA GCC partners with global stakeholders to assess technology and cybersecurity risks, evaluate the effectiveness of controls, and provide insights that support business resiliency and regulatory compliance. The team executes audits and advisory engagements covering cybersecurity, cloud technologies, infrastructure, identity and access management, vulnerability management, SDLC, data protection, disaster recovery, and emerging technology initiatives.
This role offers exposure to a broad range of technologies, cybersecurity domains, cloud platforms, and business initiatives, providing significant opportunities for professional growth and global stakeholder engagement.This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

Role Overview And Core Responsibilities

• Support the planning and execution of IT and cybersecurity audits, advisory reviews, and risk assessments.
• Evaluate the design and operating effectiveness of IT and cybersecurity controls across applications, infrastructure, databases, networks, and cloud environments.
• Evaluate the design and operating effectiveness of IT General Controls (ITGCs), cybersecurity controls, and technology governance processes.
• Assess key areas including cybersecurity, access management, cloud security, incident management, business continuity, disaster recovery, and system implementations.
• Perform control testing, analyze results, and document audit conclusions and observations.
• Prepare audit reports and communicate risks, control gaps, and remediation recommendations to stakeholders.
• Communicate observations, control weaknesses, and associated risks to stakeholders in a clear and professional manner.
• Where appropriate, lead portions of engagements and facilitate discussions regarding remediation actions and risk mitigation strategies.
• Track and monitor remediation activities for open audit findings and validate the implementation of corrective actions.
• Stay informed of emerging cybersecurity threats, industry trends, and leading practices, while contributing to departmental initiatives and continuous improvement efforts.
• Build and maintain effective relationships with global stakeholders while preserving audit independence
• Participate in departmental initiatives, special projects, knowledge-sharing activities, and continuous improvement efforts that support GAA objectives and strategic priorities

Required Knowledge And Experiences

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• 3-7 years of experience in IT Audit, IT Risk, IT Assurance, or Information Security, including at least 2 years with a public accounting or professional services firm.
• Strong understanding of IT and cybersecurity frameworks, including NIST, CIS Controls, ISO 27001, and COBIT.
• Knowledge of key information security domains, including governance and risk management, access management, cloud security, network security, security architecture, application security, incident management, and business continuity/disaster recovery.
• Experience assessing IT and cybersecurity controls across on-premises and cloud environments, with a solid understanding of infrastructure, operating systems, databases, networking and vulnerability management.
• Familiarity with security and governance tools such as Splunk, SailPoint IIQ, BMC Remedy, and audit management tools such as Optro (formerly AuditBoard).
• Strong analytical, risk assessment, problem-solving, and communication skills, with the ability to effectively engage both technical and non-technical stakeholders.
• Self-motivated and adaptable, with the ability to manage multiple priorities, work independently, and respond effectively to changing business needs.
• Professional certification such as CISA or CISSP required.

TransUnion Overview

At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our Workforce for Good, which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver’s seat of their professional development while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that’s why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence.

Be a part of our Workforce for Good you’ll work with great people, pioneering products and cutting-edge technology.

TransUnion Job Title

Specialist II, Audit and Advisory