A leading insurance company in Mumbai is seeking a candidate for IT audit coordination. The role involves evaluating controls, planning audits, and ensuring compliance with policies and regulations. Candidates should have a BE/B.Tech in Computer Science or an MBA in Systems, along with knowledge of IT controls and relevant certifications. Strong communication skills and the ability to work with stakeholders are essential. This position offers opportunities to engage with external auditors and contribute to risk management practices.
Qualifications
Bachelor's degree in Computer Science or MBA in Systems.
Knowledge of relevant compliance standards and risk management.
Certifications such as CA, CPA, or CIA would be advantageous.
Responsibilities
Coordinate with business and IT process owners to identify areas of risk.
Plan, test, document, and report on controls assessments.
Communicate with external auditors and support IT audit initiatives.
Lead ISO, SOX, and ICoFR audit planning and fieldwork.
Skills
Knowledge of SDLC
Understanding of IT Controls
Knowledge in cybersecurity
Strong understanding of ISO and SOX
Education
BE/B.Tech in Computer Science or MBA in Systems
Tools
ISO standards
COBIT
COSO
Job description
Coordinate withbusiness and IT process owners to initiate, scope, plan, and conduct periodic controls assessments to identify areas of risk by evaluating the design and operating effectiveness of Information Technology General Controls (ITGC) over applications, operating systems, and databases as well as the network infrastructure including cybersecurity controls
Planning, testing, documentation and reporting
Communicate issues to process owners, ensuring their understanding of associated risks and the actions needed to remediate those risks
Prepare reports based on the adequacy and effectiveness of controls evaluated/tested
Track and Monitor open issues and conduct follow-up to evaluate the adequacy of remediation efforts
Communicate with external auditors and support their initiatives effectively from an IT audit standpoint.
Lead ISO, SOX and ICoFR audit planning, fieldwork (testing and documentation), and reporting
Interact with the IT application owner and provide assistance as needed during the SOX control testing processes, including attending walkthrough meetings and performing testing on their behalf
Aware about IT Controls and related compliances
Evaluate compliance with Company policies and procedures and regulatory standards
Build collaborative working relationships with internal stakeholders (appropriate levels of management
Education
BE / B.Tech Computer Science / MBA – Systems
Competencies (Knowledge & Skills)
Knowledge of SDLC (Software Development Life Cycle)
Certification of CA, CPA or CIA (or actively working towards) or other similar certifications would be an added advantage.
Demonstrated in-depth knowledge of concepts, best practices and controls in a breadth of Information Security areas/domains. These include governance & risk management, access control, cybersecurity, physical security, security architecture and design, business continuity/disaster recovery, network security, application & operations security and compliance/incident management.
Demonstrated ability to understand complex technologies, business processes, regulations and emerging risks.
Strong understanding of ISO, SOX and IT frameworks including COSO and COBIT.