Specialist II - Controls, Compliance & Risk (IT)

TransUnion; Pune District; Hybrid; INR 1,200,000 - 2,200,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

TransUnion in Pune seeks a motivated associate to join the Global Finance Controls, Compliance and Risk team. The role leads IT SOX and IFC/ICOFR testing, assesses IT general controls, and communicates findings with cross-functional teams and external auditors.

Ideal candidates hold a Bachelor’s degree in CS or MIS and 3–5 years in IT audit or information security, with COSO/COBIT understanding and familiarity with tools like IAM or Splunk.

Qualifications

• Bachelor’s degree in CS or MIS.
• 3–5 years IT audit or information security experience.
• Strong knowledge of SOX and IFC/ICOFR frameworks.

Responsibilities

• Support SOX/IFC ITGC audit planning and system/scope.
• Perform testing and documentation of controls.
• Build collaborative relationships with IT, process owners and external auditors.
• Report findings and remediation tracking with stakeholders.
• Assist with risk assessment and communication of issues.

Skills

SOX

ITGC

Risk assessment

Cross-functional collaboration

Education

Bachelor's degree in Computer Science or MIS

Tools

IAM

Splunk

BMC Remedy

Job description

TransUnion's Job Applicant Privacy Notice Team Overview We are seeking a highly motivated and skilled associate to join our Global Finance Controls, Compliance and Risk team. The role will be responsible for leading and performing IT Sarbanes Oxley (SOX) compliance program testing and Internal Financial Controls (IFC/ICOFR) requirements under The Companies Act, 2013, which includes obtaining an understanding of the general IT environment, evaluating the design and operating effectiveness of the IT general controls (ITGC) and identifying exceptions and supporting communication and remediation planning. The successful candidate will manage testing of the IT SOX and IFC program, while developing relationships with cross-functional teams and external auditors. This is an opportunity to support TransUnion’s SOX/IFC ITGC compliance program and financial reporting control framework in cooperation with the team including Specialist IIIs, Manager and key stakeholders. This position will report to the Specialist IIIs and Manager <strong>Controls, Compliance & Risk</strong>.

At TransUnion, we strive to build an environment where our people are in the driver’s seat of their professional development, while having access to help along the way from colleagues and mentors. We encourage everyone to pursue passions and take ownership of their careers. Our people have the opportunity to learn new things and be a leader every day. We have a welcoming and energetic environment that values passion towards collaboration and innovation. We embrace a culture of diversity of thought and strive for continuous improvement and learning. Come be a part of our team – you’ll work with great people, pioneering products and cutting-edge technology. This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

Role Overview And Core Responsibilities

The Specialist II – Controls, Compliance & Risk (IT) will support SOX/IFC ITGC audit planning and system/application scoping, fieldwork (testing and documentation), and reporting for domestic and international locations.

Ability to build collaborative working relationships with the IT department, business process owners/control owners, other cross-functional teams (US and International), and external auditors to provide ongoing support in assessing whether controls are designed and operating effectively, understanding associated risks and root causes, and tracking actions needed to remediate controls (as necessary).

Demonstrate ability to participate in and conduct walkthrough meetings, with guidance as needed, to gain an understanding of systems landscape and architecture, information/data flows, underlying IT risks, and controls in place, including the ability to understand and articulate IT risks and the objectives and purpose of the work being performed.

Demonstrate working knowledge of IT risk concepts, best practices and controls in a breadth of Information Security areas/domains including governance and risk management, access controls, cybersecurity, physical security, security architecture and design, network security, application and operations security.

Demonstrate ability to understand a range of technologies, business processes, and relevant emerging risks including a strong technical IT audit background with practical knowledge of a wide variety of technologies including server infrastructure and operating systems, network and web infrastructures, and database architecture.

Demonstrate specific understanding of ITGCs including logical access, change management, program development, and IT dependent controls (i.e. key reports and automated controls).

Project management skills, including ability to handle multiple priorities and deadlines as well as prioritizing tasks, anticipating and recognizing problems, and escalating issues appropriately.

Ability to leverage critical thinking skills to problem-solve, analyze risks (paying close attention to detail), and determine solutions.

Ability to work as a team as well as independently.

Ability to adapt to agile/dynamic environment leveraging technologies including artificial intelligence (AI). Strong written and oral communication and interpersonal skills, positive attitude, and an eagerness to learn.

Required Knowledge And Experiences

Bachelor’s degree in Computer Science, Management Information Systems (or related field).

3-5 years of experience in an IT Audit, IT Assessor, or Information Security role (experience in a public accounting is strongly preferred).

Strong understanding of SOX, Internal Financial Controls (IFC/ICOFR) under the Indian Companies Act, 2013, and IT control frameworks including COSO and COBIT.

Preferred Skills

• Industry certification such as CISSP, CISA (or equivalent certification) strongly preferred.
• Experience supporting multinational compliance programs involving both U.S. SOX and India IFC/ICOFR requirements preferred.
• Ability to run audit related reports within workflow systems (e.g. IAM and security logging tools such as BMC Remedy, IDMart and Splunk) is a plus.

TransUnion Overview

At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our Workforce for Good, which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver’s seat of their professional development— while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that’s why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence. Be a part of our Workforce for Good – you’ll work with great people, pioneering products and cutting-edge technology.

TransUnion is a global information and insights company with over 12,000 associates operating in more than 30 countries. We make trust possible by ensuring each person is reliably represented in the marketplace. We do this with a Tru™ picture of each person: an actionable view of consumers, stewarded with care. Through our acquisitions and technology investments we have developed innovative solutions that extend beyond our strong foundation in core credit into areas such as marketing, fraud, risk and advanced analytics. As a result, consumers and businesses can transact with confidence and achieve great things. We call this Information for Good® — and it leads to economic opportunity, great experiences and personal empowerment for millions of people around the world.