Sr. Manager- II - IT SC

ICICI Prudential Life Insurance; Mumbai; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

A financial services provider in Mumbai is looking for an IT Auditor. The role involves coordinating with business and IT to assess and evaluate Information Technology General Controls, preparing reports on control adequacy, and leading ISO, SOX, and ICoFR audits. Candidates should have a technical degree and strong knowledge of IT security practices. The ideal applicant will excel in collaborating with stakeholders and managing compliance evaluations, with room for professional growth in a dynamic environment.

Qualifications

• Proven abilities in risk assessment and control evaluation.
• Holding or pursuing certifications like CA, CPA or CIA is preferred.
• Ability to understand complex technologies and business processes.

Responsibilities

• Coordinate assessments to evaluate IT General Controls effectiveness.
• Prepare and report on the adequacy of controls evaluated.
• Lead audit planning, fieldwork, and documentation.
• Prepare reports based on adequacy and effectiveness of controls.
• Track and monitor open issues and follow-up on remediation.
• Interact with external auditors and support their initiatives from an IT audit standpoint.
• Lead ISO, SOX and ICoFR audit planning, fieldwork, and reporting.
• Assist during SOX control testing processes with IT owners.
• Evaluate compliance with company policies and regulatory standards.
• Build relationships with internal stakeholders at various management levels.

Skills

Knowledge of SDLC (Software Development Life Cycle)

Demonstrated in-depth knowledge of Information Security

Strong understanding of ISO, SOX and IT frameworks

Audit testing

Education

BE / B.Tech Computer Science / MBA – Systems

MBA – Systems

CA/CPA/CIA certification desired

Tools

ISO Standards

SOX Compliance

ISO / SOX frameworks

Job description

• Coordinate withbusiness and IT process owners to initiate, scope, plan, and conduct periodic controls assessments to identify areas of risk by evaluating the design and operating effectiveness of Information Technology General Controls (ITGC) over applications, operating systems, and databases as well as the network infrastructure including cybersecurity controls
• Planning, testing, documentation and reporting
• Communicate issues to process owners, ensuring their understanding of associated risks and the actions needed to remediate those risks
• Prepare reports based on the adequacy and effectiveness of controls evaluated/tested
• Track and Monitor open issues and conduct follow-up to evaluate the adequacy of remediation efforts
• Communicate with external auditors and support their initiatives effectively from an IT audit standpoint.
• Lead ISO, SOX and ICoFR audit planning, fieldwork (testing and documentation), and reporting
• Interact with the IT application owner and provide assistance as needed during the SOX control testing processes, including attending walkthrough meetings and performing testing on their behalf
• Aware about IT Controls and related compliances
• Evaluate compliance with Company policies and procedures and regulatory standards
• Build collaborative working relationships with internal stakeholders (appropriate levels of management

Education

BE / B.Tech Computer Science / MBA – Systems

Competencies (Knowledge & Skills)

• Knowledge of SDLC (Software Development Life Cycle)
• Certification of CA, CPA or CIA (or actively working towards) or other similar certifications would be an added advantage.
• Demonstrated in-depth knowledge of concepts, best practices and controls in a breadth of Information Security areas/domains. These include governance & risk management, access control, cybersecurity, physical security, security architecture and design, business continuity/disaster recovery, network security, application & operations security and compliance/incident management.
• Demonstrated ability to understand complex technologies, business processes, regulations and emerging risks.
• Strong understanding of ISO, SOX and IT frameworks including COSO and COBIT.