Assistant Manager

Role Overview:

Senior ITGC Consultant / ITGC Lead

Key Responsibilities:

• Lead and managed

  ITGC engagements for

  SOC 1 (Type I & II)

  and

  SOC 2 (Type I & II)

  audits from planning to final reporting.
• Conduct

  IT risk assessments

  , evaluate the control environment, and design appropriate ITGC and automated control testing strategies.
• Serve as the primary client contact, handling stakeholder communication, status updates, and issue resolution.
• Oversee the

  execution and documentation

  of ITGC controls, including access controls, change management, operations, and logical security.
• Review and validate control evidence, assess the design and operating effectiveness of controls, and identify any deficiencies.
• Lead walkthroughs and meetings with

  process owners and external auditors

  .
• Supervise and mentor junior staff, providing training and performance feedback.
• Work closely with internal business units and third-party service providers to ensure control coverage and compliance.
• Prepare high-quality reports and presentations summarizing findings, risks, and remediation recommendations.
• Stay up to date with evolving

  regulatory, compliance, and cybersecurity

  trends, especially related to SOC, ISO 27001, NIST, and similar frameworks.

Required Qualifications:

• Bachelor’s degree in

  information systems, Computer Science, Accounting, or related field.

• Master’s degree in a related discipline (e.g., MBA, MIS, MAcc)

  preferred.

• 5+ years of hands-on experience

  in ITGC and risk advisory services.
• Strong background in managing or leading

  SOC 1 and SOC 2 engagements.

• Familiarity with control frameworks like

  COSO, COBIT, NIST, ISO 27001.

• Proven ability to lead engagements and deliver results under tight timelines.
• Excellent verbal and written communication skills.
• Strong understanding of IT infrastructure components such as networks, databases, OS, and cloud environments.
• Demonstrated ability to analyse and improve internal controls and processes.