Get alerts for new jobs matching your selected skills, preferred locations, and experience range.
10 - 12 years
16 - 20 Lacs
Bengaluru
Work from Office
We are looking for a skilled Senior Manager TPRM with 10 to 12 years of experience to join our team in Bengaluru. The ideal candidate will have a strong background in information security, risk management, and controls concepts. ### Roles and Responsibility Provide guidance and share knowledge with team members on complex, judgmental, and specialized issues. Brief the engagement team on client's environment and industry trends, maintaining relationships with client management to manage expectations of service. Demonstrate a thorough understanding of complex information systems and apply it to client situations, using extensive knowledge of the client's business/industry to identify technological developments and evaluate impacts on the client's business. Manage client engagements, determining and deploying the right team with adequate skill sets for executing engagements and periodically reviewing status updates. Contribute to thought leadership documents and develop new methodologies, facilitating discussions/knowledge sharing with key client personnel. Plan and schedule client engagements, staying abreast of current business and economic developments and new pronouncements/standards relevant to the client's business. Identify buyers, influencers, and stakeholders in existing client engagements and build strong relationships. Display teamwork, integrity, and leadership, working with team members to set goals and responsibilities for specific engagements and fostering teamwork and innovation. Drive performance management for self and team, managing the performance management process for direct reportees as per organizational policies. Train and mentor project resources, participating in organization-wide people initiatives. ### Job Requirements Strong knowledge of information security concepts, risk, and controls is required. Knowledge of standards such as ISO 27001/2, ISO 22301, ISO 27018, PCI – DSS, HITRUST, etc., and regulations like FISMA, HIPAA, Reg SCI, MAS, etc. Good knowledge of TCP/IP, OSI layer, networking, and security concepts, along with sound familiarity with OWASP and Secure SDLC standards/frameworks. Experience in LAN/WAN architectures and reviews, cryptography, physical and environmental security, asset security, and identity and access management. CISSP, CISA, CISM, CEH, ISO 27001 Lead Auditor and Lead Implementer certifications are preferred. A BE/BTech degree with a sound industry experience of 10 to 12 years is required.
Posted 1 month ago
1 - 2 years
9 - 13 Lacs
Noida
Work from Office
We are looking for a highly skilled and experienced Senior Consultant to join our team in Bengaluru. The ideal candidate will have 1-2 years of experience in internal controls and Internal Audit, with a strong background in IT Risk Assurance framework, Control frameworks such as COSO, internal control principles, and related regulations including SOX and J-SOX. ### Roles and Responsibility Participate in IT Risk and Assurance engagements to ensure compliance with regulatory standards. Collaborate effectively as a team member, sharing responsibility, providing support, maintaining communication, and updating senior team members on progress. Prepare reports and schedules for clients and stakeholders. Develop and maintain productive working relationships with client personnel to understand their needs and provide solutions. Manage reporting on assurance findings and ensure control owners take remediation action as required. Identify, lead, and manage the continuous improvement of Internal Controls through implementation of continuous control monitoring and automation. ### Job Requirements Preferably bachelor’s degree in Finance/Accounting, Electronics, Electronics & Telecommunications, Comp. Science)/MBA/M.Sc./CA. Minimum of 1-2 years of experience in internal controls and Internal Audit. Experience in enterprise risk services with specific focus on IT and related industry standards. Strong understanding of risk management systems and processes, including SDLC and CM. Ability to build relationships with key stakeholders across different levels of seniority. Strong written and verbal communication skills, with proficiency in data analysis tools like MS Excel, MS Access, MS SQL Server, ACL, Monarch, etc. Preferred Certifications: CISA.
Posted 1 month ago
4 - 6 years
12 - 16 Lacs
Bengaluru
Work from Office
We are looking for a highly skilled and experienced Senior Consultant to join our team in Technology, Media & Entertainment (TME) Assurance division based in Bangalore. The ideal candidate will have 4-6 years of relevant experience. ### Roles and Responsibility Conduct IT SOX - SOX 404 testing and evaluate IT general controls. Test IT application controls and information produced by the entity (IPE). Evaluate SOC 1 and SOC 2 audit reports and perform server and database testing. Provide assurance services across multiple client departments while following commercial and legal requirements. Deliver insightful and practical solutions to complex problems with a practical approach. Collaborate with market-leading entrepreneurs, game-changers, disruptors, and visionaries. ### Job Requirements CISA, CA, BE/ B.Tech,, or MSC in Computer Science, M.C.A qualification. Possess strong knowledge of IT risk management, auditing, and technology risk management. Demonstrate excellent communication and problem-solving skills. Ability to work collaboratively with cross-functional teams is essential. Exhibit strong analytical and critical thinking skills. Experience with GRC tools and technologies is beneficial.
Posted 1 month ago
5 - 10 years
13 - 17 Lacs
Bengaluru
Work from Office
We are looking for a highly skilled and experienced Chartered Accountant (CA) or Master’s degree in management, Information Systems/Technology, Computer Science, Business Analytics, Cybersecurity, or a related discipline with 5 to 10 years of experience to join our team as a Senior Manager in Risk Consulting - Protect Tech. The ideal candidate will have a passion for technology and an ardent desire to work in risk management. ### Roles and Responsibility Consistently deliver quality client services, driving high-quality work products within expected timeframes and on budget. Foster relationships with client personnel to analyze, evaluate, and enhance information systems, developing and improving security at procedural and technology levels. Use knowledge of the current IT environment and industry trends to identify engagement and client service issues, communicating this information to the engagement team and client management through written correspondence and verbal presentations. Demonstrate deep technical capabilities and professional knowledge, quickly assimilating new knowledge. Identify strategic, IT, and business risks, control gaps, weaknesses, and areas of improvement. Design IT Risk Controls frameworks and RACMs, and implement IT general controls, application controls, and business process controls. Conduct IT internal control reviews and review SOC1 or SOC2 reports. Perform IT Risk and Controls assessment with exposure to technologies such as SAP, Oracle, Workday, MS Dynamics, or emerging technologies like Cloud, RPA, AI/ML. Possess knowledge of IT risk, information security, or cyber security frameworks such as COSO, COBIT, ISO, NIST, etc. Understand IT regulatory compliances such as IT SOX, GDPR, ISO, PCI DSS, etc. Have strong exposure working in client-facing roles and collaborating with cross-functional teams including internal audits, IT security, and business stakeholders to assess control effectiveness and facilitate remediation activities. Exhibit excellent communication, documentation, and report writing skills. Relevant industry certifications such as CISA, CISM, CISSP, CRISC, CCSK, ISO 27001 are a plus. ### Job Requirements A Chartered Accountant (CA) or Master’s degree in management, Information Systems/Technology, Computer Science, Business Analytics, Cybersecurity, or a related discipline is required. Minimum 5 years of experience in risks & controls, preferably in a Big 4 or professional firm. Passion for technology and a desire to work in risk management. Strong understanding of IT risk, information security, or cyber security frameworks such as COSO, COBIT, ISO, NIST, etc. Experience in conducting IT internal control reviews and reviewing SOC1 or SOC2 reports. Excellent communication, documentation, and report writing skills are essential. Good to have relevant industry certifications such as CISA, CISM, CISSP, CRISC, CCSK, ISO 27001.
Posted 1 month ago
6 - 9 years
6 - 10 Lacs
Bengaluru
Work from Office
We are looking for a highly skilled and experienced Manager to lead our team in the IT Risk Assurance domain. The ideal candidate will have between 6 to 9 years of experience. ### Roles and Responsibility Participate in risk assurance engagements, including financial audit and IT integration. Manage financial aspects of engagements by organizing staffing, tracking fees, and communicating issues to project leaders. Engage in business development initiatives to drive growth and expansion. Build strong internal relationships within EY Advisory Services and with other services across the organization. Develop people through effective supervision, coaching, and mentoring staff. Conduct performance reviews and contribute to performance feedback for staff. Contribute to people-related initiatives including recruiting, retaining, and training IT Risk and Assurance professionals. Maintain an educational program to continually develop personal skills of all staff. Understand and follow workplace policies and procedures. ### Job Requirements Preferably hold a B.E/B.Tech (Electronics, Electronics & Telecommunications, Comp. Science)/MBA/M.Sc./CA degree. Possess knowledge and experience in areas such as financial audit, IT integration, service organization controls reporting, SOC1, SOC2, and SOC3 reporting. Demonstrate expertise in IT governance and risk management frameworks like COSO, enterprise risk services, and IT risk management frameworks. Exhibit proficiency in project risk management, understanding of IT systems development life cycle, and experience in developing technical skills specific to solutions like SAP, Oracle, or CRM. Proven business process/analysis skills are required, along with familiarity with auditing standards and guidelines. Strong academic record, including a degree, is essential; relevant professional qualifications such as CISA, CA, or CIA are also expected.
Posted 1 month ago
3 - 7 years
5 - 8 Lacs
Bengaluru
Work from Office
About the Role: As a Risk & Control Assurance Analyst, you will: Support the assurance of robust risk and control measures by aiding in the development and implementation of strategies compliant with SOX requirements and industry best practices Contribute to a team specializing in controls assurance. Depending on your experience and skills, your role might focus on assessing and monitoring IT system controls in alignment with established standards or ensuring regulatory compliance in our business operations and helping to streamline processes. As we expand our risk and control practices beyond SOX, you'll have the opportunity to broaden your expertise and take on new challenges in different areas. Collaborate with international teams and cross-functional partners to align risk management practices and controls initiatives Utilize data analytics and automation tools to enhance our team's capabilities and support the organization's control improvement by driving automation and streamlining control processes Promote initiatives to increase awareness and understanding of internal controls and SOX requirements throughout the organization About You: 3 or more years of relevant work experience, or equivalent combination of education and experience, preferably within a regulated industry Familiarity with control assurance principles in technology and/or business processes Relevant professional certifications such as CISA, CIA, CISSP or others is a plus Experience with data analytics and automation tools is a plus Problem-solving abilities, adaptability, a learning mindset, and a team-player attitude Excellent communication skills, with the ability to work effectively with international teams.
Posted 1 month ago
3 - 8 years
5 - 10 Lacs
Pune
Work from Office
CyberSecurity FTE - IntraEdge Job Description About the Role Intraedge is seeking an experienced Cybersecurity Automation Engineer for its financial domain client . This role is focused on cyber data analytics and automation , playing a pivotal part in protecting enterprise data, infrastructure, and customer trust in a cloud-first , consumer-centric operating model. The ideal candidate will bring deep technical expertise in automation, SIEM/SOAR, data pipelines, and AI/ML integration , working cross-functionally with IT Architecture, Engineering, DevOps, Security Operations, and business leadership. Key Responsibilities * Lead the design and implementation of modern cybersecurity architectures , automation tools, and scalable analytics solutions. * Develop, deploy, and maintain automation strategies to streamline security operations and response workflows. * Build advanced Splunk dashboards, queries, and visualizations to support threat detection and forensic investigations. * Lead implementation and optimization of SIEM platforms (e.g., Splunk) to enhance threat detection and alert fidelity. * Build and maintain SOAR playbooks to automate incident response actions and remediation processes. * Continuously improve and expand SOAR integrations across security and IT tools. * Design, train, and deploy AI/ML models for threat prediction, anomaly detection, and behavioral analytics. * Integrate ML insights into SIEM/SOAR pipelines to augment analyst decision-making. * Design, build, and maintain scalable ETL pipelines for security data ingestion, enrichment, and retention. * Ensure data integrity, quality, and consistency across diverse data sources and pipelines. * Optimize data workflows for performance, reliability, and scalability in cloud and hybrid environments. * Lead in-depth analysis of complex incidents , correlating logs and threat intelligence to determine root cause and impact. * Stay informed of emerging cybersecurity technologies, automation tools, and threat trends to drive innovation. Required Qualifications * 4 + years of experience in cybersecurity engineering , with deep expertise in Splunk, SIEM, SOAR, ML , and automated data pipelines . * 3+ years of experience with security automation platforms (SOAR) such as Splunk SOAR, XSOAR, Swimlane , etc. * 3+ years of experience in cyber data engineering or analytics , including log processing and data pipeline architecture. * Strong proficiency in Python, PowerShell , and API integrations . * Proven experience with GitLab , automation platform deployment, and pipeline troubleshooting. * Hands-on experience with ETL tools , relational and columnar databases , and data visualization tools such as Power BI . * Solid understanding of SIEM design, normalization, and correlation strategies. * Excellent debugging, problem-solving, and communication skills. * Bachelors degree in Computer Science , Engineering , Cybersecurity , or equivalent technical field (or 10+ years of experience). Preferred Qualifications * Hands-on experience with cloud environments such as AWS , Azure , or GCP . * Strong knowledge of cloud-native security technologies , serverless architecture, and containerized data flows. * Cybersecurity certifications such as CISSP , CISM , CISA , or equivalent. * Experience working in Agile or DevSecOps environments with CI/CD pipelines. * Familiarity with corporate change management practices and IT governance frameworks. Why Join This Engagement? * Contribute to a high-visibility cybersecurity automation program for a major financial services institution. * Work on cutting-edge security use cases , including AI/ML-driven detection and real-time response automation . * Collaborate with enterprise security and cloud leaders to deliver resilient and intelligent cyber defense capabilities. Job Requirements
Posted 1 month ago
5 - 10 years
7 - 12 Lacs
Hyderabad
Work from Office
A career with us is a journey, not a destination. This could be the next best step in your technical career. Join us. As a Lead Architect at JPMorgan Chase within the Consumer & Community Banking, you are an integral part of a team that works to develop high-quality architecture solutions for various software applications on modern cloud-based technologies. As a core technical contributor, you are responsible for conducting critical architecture solutions across multiple technical areas within various business functions in support of project goals. As a Security Architect, you will lead your team in designing solutions for Cyber, Security, Fraud, and Risk domains. Youll need to understand business goals and requirements to align program and roadmap strategies. Frequent interaction with business and technology stakeholders is essential to ensure alignment and shared understanding of roadmaps. Your role involves defining solutions that utilize Digital-wide or Enterprise-wide assets, incorporating both existing and new technologies. Youll drive proof-of-concepts and pilot implementations to gain insights and make informed decisions. Effective communication across the organization is crucial, requiring you to build professional relationships and convey your domain expertise, vision, and recommendations to senior management. Your solutions will impact both internal and external users, with a focus on external user experience. Youll support architecture deliverables and processes, developing a technology roadmap informed by Business and Technology strategies and industry trends. Youll also influence Annual and Quarterly Roadmap planning. Job responsibilities Develop, communicate, and manage the Technology Roadmap Stay informed on security standards, authentication protocols, and products Lead Special Initiatives as directed by Senior Management Engages technical teams and business stakeholders to discuss and propose technical approaches to meet current and future needs Defines the technical target state of their product and drives achievement of the strategy Participates in architecture governance bodies Evaluates recommendations and provides feedback on new technologies Executes creative software solutions, design, development, and technical troubleshooting with the ability to think beyond routine or conventional approaches to build solutions or break down technical problems Develops secure and high-quality production code, and reviews and debugs code written by others Identifies opportunities to eliminate or automate remediation of recurring issues to improve overall operational stability of software applications and systems Leads evaluation sessions with external vendors, startups, and internal teams to drive outcomes-oriented probing of architectural designs, technical credentials, and applicability for use within existing systems and information Required qualifications, capabilities, and skills Formal training or certification on software engineering concepts and 5+ years of applied experience Minimum of multiple past experiences in leading a team to architecture implementation of program, platform, and/or domain changes into production Ability to personally architect and drive adoption of solutions and platforms into production Ability to work independently across multiple initiatives simultaneously Ability to work with multiple design and delivery partners including vendors Strong written and verbal communication skills especially in communicating and influencing senior Business and Technology management Strong understanding of project management methodologies and tools including experience with agile delivery Strong skills in internet technology, information architecture, system design and practical cloud native experience Ability to evaluate current and emerging technologies to recommend the best solutions for the future state architecture Experience in risk based authentication and step up protective measures Experience in application security, e.g. OAuth, OIDC, FIDO, multi-factor authentication, TLS, securing hybrid native and web apps in mobile platforms Preferred qualifications, capabilities, and skills Fundamental experience in defensive security constructs, including digital signatures, digital certificates, PKI, firewalls Experience with open standards Familiarity with rooting or jail-breaking iOS and Android devices to discover mobile application vulnerabilities Understanding of information security and risk management challenges, issues mitigations and remediation. Strong knowledge of OWASP top 10 security issues for web/ mobile. Remediation patterns. Solid understanding of Data Security and Network Security with a focus on OSI reference model Layer 2- Layer 7. Experience with secure coding practices, threat modeling, and vulnerability assessment. Experience with Zero Trust Model, privileged session management, and cloud security Solid understanding of current web and web application servers. Certifications with CISSP, CISA, and CISM is a strong plus.
Posted 1 month ago
6 - 11 years
9 - 14 Lacs
Pune
Work from Office
Coaches Analysts Sr and Analysts II, I of how to monitor complex systems and response to known and emerging threats against the Global Payments network via intrusion detection software Guides on detailed, comprehensive investigation of security issues, i.e. to review security log data, interpret data in support of security event management process from various data feeds and triage on a wide variety of security events. Can provide investigation by himself. Manages incident handling processes which include implementation of containment, protection and remediation activities. Keeps up-to-date knowledge of new and emerging threats that can affect the organizations information assets by analyzing of third party software/solutions, IT configuration changes (including access control requests), and network/system architecture from risk perspective Responsible for the design and configuration of security systems, including proxy, remote access, mail gateway, intrusion prevention, wireless networking, data leak prevention, security information and event management and web application firewalls. Assesses and disseminates threats related to the enterprise in regard to current vulnerability by managing and developing an emerging threat model. Assesses risks based on changes to implementation of ISO(International Organization for Standardization)/BSO(Business Services Online); enhances knowledge of PCI(Payment Card Industry)/Logical Security guidelines and models, HIPPA(health insurance portability and accountability act), PII(Personally Identifiable Information) , and Card personalization. Guides on creating cost effective solutions for system/application development regarding Information Security processes and concepts in applicable systems and software. Performs day-to-day Information Security functions pertaining to computer security software products and processes. Works closely with subject matter experts and management to develop skill set for non-routine work. Enhance understanding of business objectives and helps providing direction based on risk, Corporate Security Policy, and association and regulatory guidelines. Develops long term strategies for conducting system penetration, vulnerability and web application testing, risk assessments, policy creation. What Are We Looking For in This Role? Minimum Qualifications Bachelors Degree Relevant Experience or Degree in: Bachelors degree in Computer Science, Info Security, or related field Typically Minimum 6 Years Relevant Exp Including network operations or engineering or system administration on Unix, Linux, MAC(Message Authentication Code), or Windows; proven experience working with security operations, intrusion detection systems, Security Incident Even Management systems, and anti-virus collection logs; including knowledge of industry standard security compliance programs ((PCI(Payment Card Industry), SOX(Sarbanes-Oxley) , GLBA(Gramm Leach Bliley Act)), etc.). Knowledge of industry standard security compliance programs ((PCI(Payment Card Industry), SOX(Sarbanes-Oxley) , GLBA(Gramm Leach Bliley Act), etc.) What Are Our Desired Skills and Capabilities? Skills / Knowledge - Having wide-ranging experience, uses professional concepts and company objectives to resolve complex issues in creative and effective ways. Some barriers to entry exist at this level (e.g., dept./peer review). Job Complexity - Works on complex issues where analysis of situations or data requires an in-depth evaluation of variable factors. Exercises judgment in selecting methods, techniques and evaluation criteria for obtaining results. Networks with key contacts outside own area of expertise. Supervision - Determines methods and procedures on new assignments and may coordinate activities of other personnel (Team Lead). Risk Assessment - Ability to identify, communicate, and mitigate risk within technical solution designs Industry Knowledge - Continued self-education of new and emerging threats and relevant processes, controls, or technologies to mitigate them. Incident Response - Knowledge and skills to contribute to all phases of Incident Response.
Posted 1 month ago
2 - 5 years
7 - 17 Lacs
Bengaluru
Work from Office
In this role, you will: Participate in less complex development and design of methodologies and standards for review activities companywide in alignment with the risk management framework Ensure effective and appropriate testing, validation, and documentation of review activities for risk programs, risks, and controls according to standards and other applicable policies within Independent Testing Support and implement less complex initiatives with low to moderate risk and exercise independent judgment to guide risk reporting, escalation, and resolution Present recommendations for resolving more complex situations and exercise independent judgment while developing expertise in risk management framework and the risk and control environment Collaborate and consult with colleagues, internal partners and management Required Qualifications: 2+ years of Independent Testing experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education Desired Qualifications: University degree in Business or related discipline 2+ years of relevant experience in risk management (includes compliance, operational risk, issue identification and validation, internal audit, business process management), Technology Audit, Risk and Control Testing Knowledge and understanding of financial services industry: compliance, risk management, or audit operations Expert knowledge levels and understanding of Technology controls Good understanding of Technology domain and Infrastructure Experience in reviewing testing strategies and methodologies; evaluating the adequacy and effectiveness of policies, procedures, processes, initiatives, products, and internal controls; and identifying issues resulting from internal and/or external compliance examinations Experience in testing policy, procedures, control, and business process testing Experience in creating, executing, and documenting compliance, control, and business process testing Intermediate Microsoft Office (Word, Excel, Outlook, and PowerPoint) Ability to take on a high level of responsibility, initiative, and accountability Minimum 2+ years at Big Four/super regional public accounting firm with experience in Technology testing, regulatory, and/or business process, advisory/consulting service. Experience supporting SOX/SOC, Regulatory Exams (Domestic and Intl), Audits, or other technology control related assessments. Strong critical thinking skills with ability to credibly challenge status quo. Strong organization and prioritization skills. Strong relationship management skills: ability to negotiate difficult positions without harming relationships Strong team player and ability to work with minimum guidance Job Expectations: Responsibilities of the Specialist role include, but are not limited to: Completes review/testing activities on an accelerated schedule, raising schedule delays as needed while looking for opportunities to remediate schedule issues. Providing meaningful operational and compliance risks assessments of business processes. Strong analytical skills Supporting efforts to effectively challenge risks in processes and evaluate and/or test controls designed to mitigate those risks. Executing substantive and/or control testing with moderate supervision. Executing the test of design and operating effectiveness for RCSA (Risk & Compliance Self-Assessment) controls. Completes all testing and documentation under limited supervision and appropriately retains all work papers (testing schedule, templates, work-papers, deferrals, deviations, etc.). Providing consultation and subject matter expertise for process related matters including evaluating severity of control deficiencies and related remediation efforts. Documenting test results and any issues identified while also providing recommendations to management. Providing Credible Challenge to the First Line Units as needed. Acting as a change agent for continual improvement of the control environment Chartered Accountant Certified Management Accounting Certified Public Accountant (CPA) Certified Internal Auditor (CIA) MBA Finance/PGDBA Certified Regulatory Compliance Manager (CRCM) Cybersecurity and Infrastructure Security Agency (CISA) Certified Information Security Manager (CISM) Certified in Risk and Information System Control (CRISC) Information Security Management Systems (ISMS) Data Management information
Posted 1 month ago
6 - 11 years
17 - 32 Lacs
Bengaluru, Delhi / NCR, Mumbai (All Areas)
Hybrid
6+ yrs of exp in Cyber Security consulting, with min 3 yrs in leadership role Expertise in cybersecurity frameworks & standards such as NIST, ISO 27001, GDPR, DPDPA, PCI DSS, etc. Exp in GDPR, VAPT, App security. Must have exp in consulting
Posted 1 month ago
2 - 7 years
3 - 8 Lacs
Pune, Bengaluru, Mumbai (All Areas)
Work from Office
IT audit experience in Domain like ITGC, Cyber Security, SOC 2, Application and IT security Infrastructure and IT Regulatory compliance Familiarity with IT regulatory requirements related to IS of regulators such as RBI, SEBI and other IT Standards
Posted 1 month ago
10 - 15 years
12 - 20 Lacs
Noida
Hybrid
Roles & Responsibilities: Conduct Data Inventory exercises, Privacy Threshold Assessments, Privacy Impact Assessments, and Data Protection Impact Assessments to identify and mitigate privacy risks related to new projects, products, or services. Develop, implement, maintain, and communicate privacy policies, processes, and procedures that comply with data privacy protection laws, regulations, and industry best practices. Participating in internal design discussions to ensure data protection requirements are clearly defined early and throughout the development life cycle for new projects. Ensuring data privacy and protection obligations are met. Monitoring changes in relevant data privacy and protection laws and regulations to ensure ongoing compliance. Manage and respond to Data Subject Access Requests (DSAR) to ensure compliance with data privacy protection laws, regulations, and guidance. Work cross-functionally with employees at all levels across the firm to ensure efficient integration of the Data Privacy Program into business processes. Guide functional departments in following the process for intake, verification, processing, analysis, and answering data subjects questions and requests under the GDPR, CPRA, and other regulations. Monitor and update (as necessary) the companys data map, which includes company and third-party managed personal information Collaborate with IT, HR, Operations, and other functional teams to ensure data protection and privacy initiatives are understood and implemented. Track and monitor updates and developments to applicable data privacy laws and regulations, as necessary. Grow and develop the privacy team, including conducting training sessions to ensure all employees are aware of and comply with data privacy policies and procedures Knowledge, Skills, Other Qualifications: Bachelors in law required - Any Specialization. Strong knowledge of U.S., EU, & Indian data privacy laws and regulations and related compliance processes. Familiarity with Canadian data privacy laws and regulations and related compliance processes. Privacy certifications in at least one of the following: CDPSE, CISA, CIPM, CIPP, CISSP, CIPT. Excellent communication (both verbal and written) and interpersonal skills. Strong decision-making, critical thinking, and organizational skills. Ability to work in a cross-functional, cross-cultural matrix environment. Experience working with cybersecurity and data forensic teams, including supporting data governance initiatives and data incident management. Ability to work independently and multitask effectively in a fast-paced environment. Minimum 8-10 years of experience working as part of an internal legal and regulatory compliance function in multinational organizations. Demonstrable privacy and data protection experience is preferable , ideally gained in a services environment or a digital business.
Posted 1 month ago
10 - 12 years
10 - 15 Lacs
Bengaluru
Work from Office
IT Internal Audit Manager Organization:Corporate Functions/Finance Location: Bangalore, India Level:7 - Manager People in the Corporate Function career track contribute to the running of Accenture as a high- performance business through specialization within a specific functional area and grow into internally focused roles by deepening their skills and/or developing new skills within an internal functional area. Finance professionals prepare and interpret financial plans and reports, ensuring accuracy and compliance with applicable financial rules and regulations, including internal financial controls, to mitigate risk for the company. Finance professionals may also shape and execute client deals to maximize the use of Accenture's capital and resources, manage cash and/or liaise with the investor community. Job Description: The Internal Auditor performs audit projects in accordance with Accenture's audit methodology and The Institute of Internal Auditors' (IIA) International Standards for the Professional Practice of Internal Auditing. The Internal Auditor-Information Technology focuses on audit projects that involve cyber/data security, computer operations, and IT compliance. The Internal Auditor effectively executes a wide range of Internal Audit activities in a high quality and timely manner. In their role, they perform activities that include planning and developing work programs, identifying recommendations for continuous improvement in global processes and controls, communicating results, and following up on issues reported. They are also responsible for audit strategy development, organization risk assessment/planning, and completion of special requests for Accenture Management and the Audit Committee. Key Responsibilities Depending on the role/organization the Internal Auditor-Information Technology belongs to and their career level, some or all of the following key responsibilities will apply: Participates in the detailed execution and communication of the risk-based work plan, including Accenture Management and Audit Committee special project requests. Verifies the adequacy of information technology (IT) operating procedures of the company through a systemic program of audits. Assists in development of the Company's annual audit plan and schedule. Manages audit work, including audit work plan, work papers, findings, and associated reports. Prepares and oversees the preparation of audit reports and work papers to ensure adequate documentation exists to support the completed audit and conclusions. Conducts IT integrated audits with operational, compliance, financial, and investigative audit teams, as assigned. Manages cyber/data security, IT operations, IT service delivery, and compliance audits, as assigned on a wide-ranging scope of audits with an emphasis on assessing emerging areas of risk including cyber security, artificial intelligence, cloud computing, robotic process automation, and the Internet of Things Identifies, recommends, and reports improvement opportunities for global processes and controls. As appropriate, identifies opportunities for continuous improvement of technology, security, financial, and other processes and evaluation of organization-driven risk. Manages auditee relationship, including facilitating meetings, discussions of findings, and presenting draft and final reports in a professional manner. Prepares well-written and timely audit reports and high quality presentations for leadership and board level reporting. Develops audit skills and establishes/maintains relationships related to the risk areas assigned. Contributes to appropriate skilling of the IA team (e.g., recruiting, training and development, coaching/mentoring, providing career growth opportunities). Keeps abreast of company policies and procedures, current developments in technology and auditing professions, and changes in local, state, and federal laws. Qualification Basic Qualifications: Bachelors Degree (Undergraduate degree in Computer Science/ Electronics/ IT Engineering, Information Systems, Business Administration) Certifications on Auditing and Information Security Domains (i.e. CIA, CISA, CISSP, CCSK) Cloud Security Azure Security (AZ500), AWS Certified Solutions Architect Understanding of industry standards including ISO27001, ISO 20K, NIST 800-53, PCI DSS, HIPAA, GDPR Minimum of 12 years experience in information technology auditing, combined audit/IT audit, or relevant information security or information technology roles. Preferred Qualifications: Big 4 experience Experience working in a global Internal Audit function Cyber security experience Strong working knowledge of operational, compliance and IT auditing techniques Broad IT knowledge in infrastructure technologies (networking, data centers, servers, etc.), application development and support, and emerging technologies. Experience with Windows and UNIX operating systems and Microsoft Office 365 Sarbanes-Oxley project experience, familiarity with COSO/COBIT framework Professional Skills: Excellent verbal and written communication skills; interpersonal and presentation skills Proven management and organizational skills Ability to train, develop, and motivate team members Demonstrated leadership in professional setting; either military or civilian Demonstrated teamwork and collaboration in a professional setting; either military or civilian Ability to adopt flexible work hours to collaborate with global teams and travel (up to 20%).
Posted 1 month ago
3 - 8 years
6 - 11 Lacs
Bengaluru
Work from Office
About Us Standard At ANZ, were shaping a world where people and communities thrive, driven by a common goal: to improve the financial wellbeing and sustainability of our millions of customers. About the Role As Audit Manager, you will bring to life Internal Audit s value proposition by supporting the bank to move at pace, safely through our enterprise-wide lens and independence to deliver what matters for our customers, the board, and regulators. Your primary responsibility is to provide independent assurance on the risk and control environment. You will support the execution of the Internal Audit Plan for division. You will be accountable for ensuring appropriate and timely assessment of the key risks and controls, and for the design and delivery of assurance activities and insights. Role Type: Permanent Role Location: Bengaluru What will your day look like Ensure risk identification is performed effectively, reducing where possible, the scope of the review without reducing the provision of assurance. Building and actively maintaining communication and engagement with key stakeholders within the Technology business unit. Audit messages and recommendations are value adding, material, show foresight, are timely, commercial and pragmatic. Ensure line management buy into the audit findings, while also proactively and effectively managing any disconnect in opinions that may arise between senior parties during an audit. Deliver appropriate assurance through quality audit reports supported by appropriate audit evidence. Manage or execute Audits in alignment with IA methodology and IIA standards and ensure methodology efficiencies are identified. Identifying and implementing innovative ideas to improve processes, to uplift stakeholder experience across the audit execution lifecycle. Ensure the Audit Director / Audit Owner is appraised of any significant audit issues (this includes audit progress, challenges arising and issues) in a timely manner. Compile and keep up to date own performance and development plans. Solicit and act on development and performance feedback. Respond well to change and willingness to adapt own behaviours to meet changing demands in the industry. Constantly deliver quality on assigned tasks What will you bring Must have knowledge, skills and experiences Experience in Banking Industry, Audit or Risk Understands and aligns to audit approach to Risk Management Framework and Internal Audit Methodology Strong track record of delivering high quality work in complex technical areas (e.g. audit, assurance). Using and applying Data Analytics techniques in the delivery of audits. Excellent written and verbal communication skills. Good to have knowledge, skills and experiences Experience and exposure to auditing cloud-based environments is highly regarded Experience to auditing agile organisations and/or conduct agile audits Sound understanding of Technology and/or Data Governance related regulatory requirements such as CPS234 or CPG235 Banking & finance industry knowledge. Experience within the ANZ Group Technology Division. Experience in supporting change and overcoming resistance to change. While not essential exposure to using or applying data analytics in your previous roles. Qualifications (relevant to this role) Tertiary qualified with Professional (CPA/CA) Post Graduate IT qualifications with technically relevant skills (e.g. CISA, CISSP, CISM, ITIL) So why join us(Bengaluru GCC) ANZ is a place where big things happen as we work together to provide banking and financial services across more than 30 markets. With more than 7,500 people, our Bengaluru team is the banks largest technology, data and operations centre outside Australia. In operation for over 33 years, the centre is critical in delivering the banks strategy and making an impact for our millions of customers around the world. Our Bengaluru team not only drives the transformation initiatives of the bank, it also drives a culture that makes ANZ a great place to be. Were proud that people feel they can be themselves at ANZ and 90 percent of our people feel they belong. We want to continue building a diverse workplace and welcome applications from everyone. Please talk to us about any adjustments you may require to our recruitment process or the role itself. If you are a candidate with a disability or access requirements, let us know how we can provide you with additional support. To find out more about working at ANZ visit https://www.anz.com/careers/ . You can apply for this role by visiting ANZ Careers and searching for reference number 95585. Job Posting End Date 20/05/2025 , 11.59pm, (Melbourne Australia)
Posted 1 month ago
4 - 6 years
10 - 14 Lacs
Bengaluru
Work from Office
Develop hardening standards and translate into tool recognized format. [Example : should aware regex writing skill and implement in Policy Compliance module in Qualys ] Knowledge of identifying true and false positive against to the hardening standards Perform Vulnerability assessment & Policy Compliance using leading Vulnerability Scanning solutions like Qualys, Nessus etc. Experience in Cloud Agent, VMDR Perform false positive validation and ensure delivery of quality reports. Act as a technical SME to analyse the configuration compliance & underlying mechanism on the identification of compliance results. Provide technical advice and support on remediation to infrastructure / application support teams. Review findings and identify root causes for common issues and provide recommendations for sustainable improvements. Understand security policies, procedures and guidelines to all levels of management and staff. Communicate effectively orally and in writing and establish cooperative working relationships. Provide suggestion to improve vulnerability Management service based on current trends in information technology (Network, system security software and hardware). Act as line manager in the absence of team lead. People & Talent * Minimum 4-6 years of experience in Information security and preferably in Banking and Financial services sector In-depth working experience on Operating System, Network devices such as routers, switches, firewalls, load balancers and proxy will be added advantage for the role. Bachelor Degree in Engineering, Computer Science/Information Technology or its equivalent. Industry certifications will be a plus e.g. CISSP, CCNA Security, CCIE, CCNP Security, CISA, CRISC and CISM. Strong knowledge and subject matter expertise in multiple areas within Information Security. Hands on skill and expertise in performing risk / threat assessments/risk consulting. Excellent written, oral communication and reporting skills. Provides technical leadership, expertise and direction working with district and college technical staff for design and implementation of information technology security systems. Develops strategy for propagating, maintaining, and measuring compliance against security policies, standards, and guidelines district-wide. Time management and organizational skills Ability and desire to learn new skills quickly Performs other related duties as assigned. ROLE SPECIFIC TECHNICAL Skills And Competencies and Proficiency Levels * Technical Competency Name: Proficiency Levels Knowledge in industry hardening standards on operating systems, network devices Advanced Qualys, RAPID7, Tanium COMPLY, Nessus Expert Strong Linux Shell experience and Solid knowledge of programming languages is needed, Python etc., Core ITIL Concepts Core Knowledge on latest vulnerabilities & threats Expert Hands on skill and expertise in performing risk / threat assessments/risk consulting Core (Please select target proficiency level) Policy Compliance, Qualys
Posted 1 month ago
2 - 4 years
11 - 15 Lacs
Chennai
Work from Office
KPMG in India, a professional services firm, is the Indian member firm affiliated with KPMG International and was established in September 1993 Our professionals leverage the global network of firms, providing detailed knowledge of local laws, regulations, markets, and competition KPMG has offices across India in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, and Vadodara KPMG in India offers services to national and international clients in India across sectors We strive to provide rapid, performance-based, industry-focused, and technology-enabled services, which reflect a shared knowledge of global and local industries and our experience of the Indian business environment KPMG Advisory professionals provide advice and assistance to enable companies, intermediaries, and public sector bodies to mitigate risk, improve performance, and create value KPMG firms provide a wide range of Risk Advisory and Financial Advisory Services that can help clients respond to immediate needs as well as put in place the strategies for the longer term Projects in IT Advisory focus on the assessment and/or evaluation of IT systems and the mitigation of IT-related business risks They are either IS audit, SOX reviews, Internal audit engagements, IT infrastructure review and/or risk advisory including but not limited to IT audit supports in nature IT Audit + SAP experience with knowledge of IT governance practicesPrior IT Audit knowledge in areas of ITGC, ITAC (application/automated controls) SOX 404, SOC-1 and SOC-2 AuditsGood to have knowledge of other IT regulations, standards and benchmarks used by the IT industry (e g NIST, PCI-DSS, ITIL, OWASP, SOX, COBIT, SSAE18/ISAE 3402 etc )Technical Knowledge of IT Audit Tools with excellent knowledge of IT Audit process and methodologyExposure to Risk Management and Governance Frameworks/ Systems will be an added advantage Exposure to ERP systems will be added advantageStrong project management, communication (written and verbal) and presentation skillsKnowledge of security measures and auditing practices within various applications, operating systems, and databases Strong self-directed work habits, exhibiting initiative, drive, creativity, maturity, self-assurance, and professionalismPreferred Certifications - CISA/CISSP//CISMExposure to automation Data Analytics tools such as QlikView/Qlik sense, ACL, Power BI will be an advantageProficiency with Microsoft Word, Excel, Visio, and other MS Office tools Equal employment opportunity information: Perform testing of IT Application Controls, IPE, and Interface Controls through code reviews, IT General Controls review covering areas such as Change Management, Access Management, Backup Management, Incident and Problem Management, SDLC, Data Migration, Batch Job scheduling/monitoring and Business Continuity and Disaster RecoveryPerform Risk Assessment, identification, and Evaluation of Controls, prepare process flow diagrams and document the same in Risk & Control Matrix Perform business process walkthrough and controls testing for IT Audits Performing planning and executing audits, including - SOX, Internal Audits, External AuditsConducting controls assessment in manual/ automated environmentPrepare/Review of Policies, Procedures, SOPsMaintain relationships with client management and the project Manager to manage expectations of service, including work products, timing, and deliverables Demonstrate a thorough understanding of complex information systems and apply it to client situations Use extensive knowledge of the clients business/industry to identify technological developments and evaluate impacts on the work to be performed Coordinate effectively and efficiently with the Engagement manager and the client management keeping both constantly updated regarding project s progress Collaborate with other members of the engagement team to plan the engagement and develop relevant workpapers/deliverables Perform fieldwork and share the daily progress of fieldwork, informing supervisors of engagement status
Posted 1 month ago
4 - 8 years
14 - 18 Lacs
Hyderabad
Work from Office
Minimum 1+ years experience in cyber risk assessments with industry certifications like CISSP, CCSP, CISA, CISM, CRISC, ISO/IEC. Profound knowledge of cybersecurity frameworks, industry standards, and best practices. Familiarity with cybersecurity policies and standards such as NIST and IEC. Experience in network security, infrastructure assessment, and network architecture design review. Knowledge of GDPR, PCI-DSS, NIST, and privacy regulations. Hands-on experience with cloud computing technologies. Experience in conducting end-to-end risk assessments, including impact assessments, regulatory assessments, and control assessments. Proficient in information security risk assessments for cloud services and vendor-managed applications. Hands-on experience in cloud security measures and best practices, ensuring data integrity and confidentiality in cloud environments. Conduct thorough cyber risk assessments for clients, analyzing digital infrastructure, systems, and security controls. Collaborate with cross-functional teams to gather essential information for comprehensive risk assessments. Evaluate and interpret assessment results to identify vulnerabilities and provide mitigation recommendations. Stay updated on cyber threats and industry best practices to enhance risk assessment effectiveness. Prepare clear reports summarizing assessment findings for clients and internal stakeholders. Manage client expectations and satisfaction, acting as an advisor. Excellent communication and presentation abilities for technical and non-technical audiences. Proactive, self-motivated, and committed to continuous learning.
Posted 1 month ago
4 - 7 years
10 - 11 Lacs
Gurugram
Work from Office
& Summary At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive Network Security, Cloud Security, ITGC Reviews, Compliance Reviews, ISO 27001 Reviews, Purpose of the Job /Role Lead/Manage/Perform Security Reviews which includes Cloud Security and Data Security, Threat and Vulnerability Management, Identity and access management, Technology controls, process controls, and governance, risk and compliance elements, IT General Controls. Responsibilities Should manage/ oversee/execute engagements around Cyber Risk and Maturity Assessments, Cyber Strategy, Cloud Security, Data Protection, Third Party Risk Management, Enterprise Architecture reviews. Knowledge on NIST CSF, ISO 27001, ISO 27701, ISO 27017, DPDP Act Experience in financial sector companies like banks, NBFCs and FinTechs Mandatory Skill Strategy and Governance Preferred Skill Cyber Strategy Education Qualifications Minimum Qualification BE/ BTech Postgraduates in any stream would be preferred (not mandatory) Prior Big 4 experience would be an added advantage Experience in IT Risk Advisory/ Assurance for varied industry segments preferred Excellent communication skills both written and oral Certifications CISA/CISM/ISO will be added advantage Education Degrees/Field of Study required Bachelor of Technology, Bachelor of Engineering Degrees/Field of Study preferred Required Skills Strategic Governance Optional Skills Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Analytical Thinking, Azure Data Factory, Communication, Creativity, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Embracing Change, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Learning Agility, Managed Services, Optimism, Privacy Compliance, Regulatory Response, Security Architecture
Posted 1 month ago
3 - 10 years
5 - 12 Lacs
Mumbai
Work from Office
Job Title: IAUAuditor Job Code: 9219 Country: IN City: Mumbai Skill Category: Audit Description: Overview: Nomura is a global financial services group with an integrated network spanning approximately 30 countries and regions. By connecting markets East & West, Nomura services the needs of individuals, institutions, corporates and governments through its three business divisions: Wealth Management, Investment Management, and Wholesale (Global Markets and Investment Banking). Founded in 1925, the firm is built on a tradition of disciplined entrepreneurship, serving clients with creative solutions and considered thought leadership. For further information about Nomura, visit www.nomura.com The role of the VP is to support the Technology Portfolio Director (TPD), based in Powai who [QX(1] [LP(2] reports to the Regional Head of Internal Audit and the Global Portfolio Director based in the US, in the definition, execution and management of the Internal Audit efforts related to Compliance, Financial Crimes, Conduct and Culture and Legal (LCC) [QX(3] [LP(4] . The candidate will be responsible to support the audit of technology components covered in the above mentioned LCC areas. The LCC portfolio, oversees key control frameworks related to Market Abuse Surveillance, Conflicts Management, Compliance Advisory, AML/KYC, Sanctions, AntiBribery and Corruption (ABC), Conduct & Culture, and Legal, including the use of Master Agreements. In this role, the VP is expected to: Leading and executing the IT audit reviews (Application controls & ITGC) independently in global and regional LCC audits including audit scoping, execution and reporting. Work closely with business auditors on integrated audit reviews, and report directly to the Global LCC TPD. Take primary responsibility for audit planning, fieldwork, finalising report findings and agreeing action plans with auditees. Candidate should also be able to perform Data Analytics in audits using excel and python coding. Support Internal Audit s strategic initiative for Data Analytics by being an active supporter and contributor to this initiative. Advocate and develop audit colleagues to use data analysis to improve and enhance the audit approach. Maintain strong independent working relationships with LCC technology teams, identifying emerging risks, and raising important value adding control improvements to senior management.. Followup and validating audit findings raised in audit reports and tracked by Internal Audit. Perform risk assessments, at least annually, using the departmental risk assessment methodology. Carry out special projects, ad hoc investigations and advisory work where required. Skill and Experience Requirements Solid experience of executing IT application audits within an investment bank. Experience should include demonstrated track record in: integrated audits, auditing application controls, auditing data integrity to provide an audit opinion on the completeness, accuracy and timeliness of system based processing, and IT general controls. Solid experience of designing and executing sophisticated Data Analytics tests. Background and experience of auditing technology components of Compliance (including but not limited to Market Abuse Surveillance, Conflicts Management), Financial Crimes, and Conduct and Culture, in the Investment Banking business of a major financial institution. Experience in successfully managing complex regional and global audit projects, as well as managing multiple audits concurrently ensuring assurance activities are coordinated and resources optimized for productivity. Strong analytical skills with the ability to identify key risks and formulate audit plans, with sound judgement on the criticality and impact of issues raised Confident manner and excellent communication skills, both oral and written Strong time and project management skills, consistently delivering to deadlines (budget and time) At least 810 years of professional experience in audits of which 3 years of internal audit experience in the financial sector. Qualifications Preferred Qualifications: Engineering Degree or equivalent IT related degree CISA / CISSP or equivalent is a plus Knowledge of coding e.g. using Python and other languages for Data Analytics to provide more insights into risks and/or controls Compliance certifications such as CISI or regional equivalent
Posted 1 month ago
4 - 9 years
6 - 11 Lacs
Gurugram
Work from Office
You Lead the Way. We ve Got Your Back. With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you ll learn and grow as we help you create a career journey that s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally. At American Express, you ll be recognized for your contributions, leadership, and impact every colleague has the opportunity to share in the company s success. Together, we ll win as a team, striving to uphold our company values and powerful backing promise to provide the world s best customer experience every day. And we ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong. Join Team Amex and lets lead the way together. How will you make an impact in this role? Responsible for contacting clients with overdue accounts to secure the settlement of the account. Also, they do preventive work to avoid future overdue with accounts that have a high exposure. Partner with the BU to complete risk assessments and ensure adherence to program requirements. Assist with evaluation of control environments of Third Parties to support security assessment activities Facilitate execution of information security assessments for in-scope third parties (e.g., Manage the inventory of Third Parties, conduct periodic assessments, assess the quality of assessments conducted by External Assessors, define risk ratings as appropriate to the control failures, etc.) Partner with ISO Organization in sharing inputs towards assessment questionnaires and Guidance documents, and for managing assessments related to IS-Critical Third Parties Program Managing transformational projects, as and when required, related to Process improvements, System upgradation and overall Program uplift Assist with analysis and reporting related to TSM lifecycle as needed Minimum Qualifications 4+ years of experience in the financial services industry focus on Operations; including working with complex and dynamic functions and solutions, strong thought leadership is required Customer service focused and results-oriented leader A broad understanding of the IT controls and best practices across key risk domains, including risk assessment methodology, application security, network and infrastructure security, Data loss prevention, and incident management is recommended Prior experience managing risk assessments; including background in audit, compliance, Third Party Risk/Oversight, or other risk control functions Possess ability to lead through a highly matrixed organization Requires ability to influence without direct authority and possess proven collaboration skills Excellent written and verbal communication skills, able to effectively communicate at all levels within the organization is required Being flexible and able to adjust to new needs and new technologies, and be comfortable with ambiguity Preferred Qualifications Current certifications in CISSP, CISM, CISA, CRISC, CGEIT, COBIT, ISO 27001 or PCI is recommended but not mandatory Benefits include: Competitive base salaries Bonus incentives Support for financial-well-being and retirement Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location) Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need Generous paid parental leave policies (depending on your location) Free access to global on-site wellness centers staffed with nurses and doctors (depending on location) Free and confidential counseling support through our Healthy Minds program Career development and training opportunities Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.
Posted 1 month ago
5 - 10 years
7 - 12 Lacs
Bengaluru
Work from Office
Visa is seeking a Controls Monitoring & Testing Analyst within its Technology Risk Management program to review and assess Cybersecurity and Technology risks. The candidate will perform Risk Assessments, Design Effectiveness Assessments, and Operational Effectiveness Testing for key technology threat vectors such as security configuration management, firewall configuration, application, user access management, and availability & reliability. Responsibilities include managing stakeholder engagement plans, participating in process walkthroughs, tracking/reporting deliverables, and producing high-quality work papers for all lines of defense and risk stakeholders. Additionally, the candidate will interpret data from source systems to perform statistical sampling and aggregate assessment across various risk management levers, collaborate with technology partners, and distill information into management and executive-level reporting. Key Responsibilities: Technology & Cybersecurity Controls Testing: Perform independent technology and cybersecurity controls testing. Document testing results in detailed workpapers. Prepare management reports based on testing outcomes. Communicate findings with stakeholders. Automation for Continuous Monitoring: Develop automation for continuous controls monitoring/auditing for technology and cybersecurity. Monitor the results of automated controls, perform investigation and follow-ups as needed. Risk & Control Self-Assessment (RCSA): Execute RCSA Risk Business Partner (RBP) controls quality review and sample-based testing. Conduct Key Risk Indicator (KRI) testing. Training, Metrics Alignment & Reporting: Develop and track risk management training. Align metrics with reporting dashboards. Develop reporting and stakeholder communication. Basic Qualification 3 years of relevant work experience and a Bachelors degree Preferred Qualification Bachelor s degree with 5 years of work experience in cyb
Posted 1 month ago
3 - 6 years
11 - 15 Lacs
Mumbai
Work from Office
The Role: The Senior Auditor is responsible for risk-based audit activities across several different business areas within Crisil. As a Senior Auditor in Crisil Internal Audit team you will be responsible for leading internal audit process reviews in collaboration with an internal audit service provider, implementing and executing enterprise risk management (ERM) governance, leading risk-related projects, and performing technology audits. The role requires strong stakeholder management, risk assessment expertise, and the ability to provide insights on process enhancements. The ideal candidate for this role must be an experienced financial services professional with strong internal control and auditing skills, and a strong level of comfort with data and technology. Location : Mumbai Key Responsibilities: Partner with the internal audit service provider to plan and execute the internal audit program. Lead and execute internal audit process reviews, ensuring compliance with regulatory and organizational standards. Conduct technology audit, including cybersecurity, data privacy, and emerging technology risk assessments. Develop and execute risk-based audit plans, ensuring the identification of key control gaps and associated risks. Oversee Enterprise Risk Management (ERM) governance, including risk identification, assessment, and mitigation strategies. Lead and manage risk-related projects, ensuring timely delivery and alignment with business objectives. Monitor regulatory developments and emerging risks, advising leadership on potential impacts. Support process improvements and automation initiatives to enhance audit efficiency and risk assessment frameworks. What We’re Looking For: Strong understanding of internal audit methodologies, risk-based auditing, and industry best practices. Experience in conducting technology audits, including cybersecurity, cloud governance, data analytics, and IT risk management. Strong analytical, problem-solving, and critical-thinking skills with the ability to assess complex business processes. Excellent communication skills (both verbal and written) to engage with senior stakeholders and present audit findings effectively. Ability to work independently, manage multiple assignments, and collaborate with cross-functional teams. Basic Qualifications: Minimum 5-6 years of experience in financial services internal audit or related roles (operational risk, credit risk, compliance risk). Experience with integrated audits, electronic work papers and standard productivity tools. Strong academic and professional credentials including an undergraduate degree Professional certifications preferred (CAMS, CRMA, CISA, CISM, CISSP etc.).
Posted 1 month ago
2 - 5 years
10 - 15 Lacs
Bengaluru
Work from Office
IT Internal Audit Associate Manager We Are: Accenture is helping transform leading organizations and communities around the world. Choose Accenture and make delivering innovative work part of your extraordinary career. Accenture works at the intersection of business and technology to help clients improve their performance and create sustainable value for their stakeholders. Accenture is consistently recognized on FORTUNE's 100 Best Companies to Work For and DiversityInc's Top 50 Companies for Diversity lists. The Internal Audit Department provides the Audit Committee of the Board of Directors with an independent and objective assessment of the reliability and integrity of financial and select operating information, the effectiveness and efficiency of Accenture plc and its consolidated subsidiaries' (the "Company") systems and internal controls, and compliance with the Company's policies and procedures. Internal Audit Services also provides advisory services designed to add value and improve the Company's operations through bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, controls, operations, and governance processes. You Are: An agile, highly-motivated, innovative thinker with a background in audit, risk, or compliance looking to join a fast-paced, global internal audit organization that has embraced transformative capabilities including advanced analytics, dynamic risk assessment processes, and automation to retain its role as a trusted advisor to the business. The Work: Participate in the execution of the risk-based audit plan, reporting results to Accenture Leadership and the Audit Committee of the Board of Directors Conduct a wide-ranging scope of audits with an emphasis on assessing emerging areas of risk including cyber security, artificial intelligence, cloud computing, robotic process automation, and the Internet of Things. Through advisory services, work with our business partners to help them proactively identify and manage risk in new technologies, new go-to-market offerings, and critical corporate initiatives. Shape the future of the Accenture Internal Audit through involvement in departmental initiatives that enable us to become more efficient and effective in everything we do. Ensure your technical skill set and business acumen stay current and relevant through participation in our robust training program. Support the departmental annual risk assessment and audit planning efforts Why Should I Join the Accenture Team? You are looking for an internal audit role that provides you with exposure to senior levels of leadership, enables you to work with emerging technologies, provides opportunities for international travel and flexible work arrangements (work from home), requires little to no SOX testing, and offers a competitive salary and benefits package. Qualification Desired Skills & Qualifications Undergraduate degree in Computer Science, Information Systems, Electronics, or Business Administration. Minimum of 6 years of experience in IT auditing, information security, or related technical role focusing on compliance activities. Experience conducting IT external and internal audits or assessments, preferably for a global organization. Strong IT knowledge in infrastructure technologies (networking, data centers and hosting, virtualization, cloud etc.), application development and support, and emerging technologies. Understanding of industry standards including ISO27001, ISO 20K, NIST 800-53, PCI DSS, HIPAA, GDPR Experience leveraging predictive models and custom analytics in audit planning and execution is preferred. Technical knowledge and familiarity with control requirements in areas including ERP applications, Windows and Unix operating systems, cyber security, cloud security and vendor management. Strong verbal and written communication skills and proficiency with the English language. Demonstrated leadership, teamwork, and collaboration skills. Possession of a relevant professional certification (CISA, CISSP, CIA, CPA, CCSK) is preferred. Ability to adopt flexible work hours to collaborate with global teams and travel (up to 20%).
Posted 1 month ago
12 - 15 years
22 - 30 Lacs
Bengaluru
Work from Office
FC Global Services India LLP (First Citizens India), a part of First Citizens BancShares, Inc., a top 20 U.S. financial institution, is a global capability center (GCC) based in Bengaluru. Our India-based teams benefit from the company s over 125-year legacy of strength and stability. First Citizens India is responsible for delivering value and managing risks for our lines of business. We are particularly proud of our strong, relationship-driven culture and our long-term approach, which are deeply ingrained in our talented workforce. This is evident across all key areas of our operations, including Technology, Enterprise Operations, Finance, Cybersecurity, Risk Management, and Credit Administration. We are seeking talented individuals to join us in our mission of providing solutions fit for our clients greatest ambitions. Job Title: Associate Director - Operational Risk Management Management Level: L3 Job Category: Vice President Job location - Bengaluru Summary/Objective This is a key role within the banks second line of defense, Operational Risk Management team. This role will manage a team of experienced risk and control professionals dedicated to RCSA and ORE programs of the bank. The role will oversee planning, timely execution, and delivery of RCSA and ORE deliverables along with maintaining quality of Output. The person in this role will be located out of the First Citizens India office in Bangalore and functionally align to the RCSA program leader in the US. This role will require broad knowledge of consumer and commercial banking products and services, as well as applicable laws and regulations. The role will be responsible to build strong partnership with stakeholders in First Citizens India (FCI) and as required, with the onshore stakeholders in the U.S. to ensure smooth alignment of the methodologies with, and / or transition of work between onshore & offshore resources. Manage FCI stakeholders by providing periodic updates and contribute to periodic communications such as debriefs, dashboards, KPIs etc. Build effective working relationships with senior management and staff, both internal and external as needed. Broaden and deepen knowledge of the business functions and environment of the Bank to effectively assist leadership and staff in contributing towards banks risk management efforts. The role may also involve evaluating best practices, efficiency opportunities, and compliance with the requirements. The person in this role should have strong risk management expertise, exceptional written and oral communication skills, strong understanding of banking business processes, stakeholder management skills and the ability to manage multiple projects and deadlines at once. The person in this role should have a good knowledge of operational and compliance risks in a bank and a broad understanding of the control environment mitigating those risks. This will require broad knowledge of consumer and commercial banking products and services, as well as applicable laws and regulations. The role will also require knowledge of functioning of a offshore banking organization in India and applicable laws and regulations. The role requires to engage with senior leadership within FCI and / or in U.S. across the First Line and Second Lines of Defense, for their day-to-day work. Strong communication and interpersonal skills are necessary to achieve the required objectives. The role will define roles, responsibilities, individual goals, and performance objectives for the team. The role will also involve identifying future talent and skill requirements in collaboration with onshore stakeholders. Experience in providing Second Line Risk Oversight in a bank or large financial institutions is preferred. Exposure to performing review and challenge activities as part of second line risk management will be an added advantage. Primary Responsibilities: Essential Functions Risk Management - supports the planning and execution of FCI s First Line & Second Line Risk Programs as per First Citizen Bank s (FCB) Risk framework. Collaborates with other key stakeholders across the organization to ensure appropriateness of and compliance with ORM program requirements. Maintains productive influential relationships with senior management to ensure appropriate tone from the top leadership of programs. Communicates risk vision to key stakeholders. Develops relationships and remains active within professional networks to stay abreast of current and emerging issues and relevant trends in Risk Management. Subject matter expertise - Provides credible and effective expert advice to FCI Business Functions based on industry knowledge and gained expertise in Enterprise / Operational Risk Management. Committees and Projects - Provides support for other ORM programs and initiatives. Participates as a risk advisor on project teams or governance structures to provide guidance on risk best practices, processes, and regulatory requirements Resourcing - Ensure appropriate resource allocation across various activities required to support Business Risk Oversight. Training - Define skill needs and resource requirement keeping in mind process evolution and emerging risk and control environment Human Resource - Contribute to hiring and talent management strategy and policies for FCI Reporting - Develop, maintain, and provide regular status reporting to FCI / India Risk Committee and other stakeholders Audit & Regulatory Support - Assists in managing preparation activities for ORM Internal Audit and regulatory exams. Partners with managers to ensure components are received in a timely manner for posting prior to exam start. Others - Assist in providing support to Ad-hoc requests (as required) Specific Responsibilities Work with the banks ORE and RCSA program lead in US and facilitate deployment of RCSA program for FCI. Facilitate implementation of ORE and RCSA program for FCI, manage any updates and report on its progress. Escalate any concerns or delays in implementation and deviations from planned schedule to relevant stakeholders. Develop and train BU process owners on RCSA and ORE requirements and facilitate its deployment. Ensure work is produced and documented with quality and content and in alignment with the requirements laid down in the RCSA and ORE standard. Promote positive client relations with business line colleagues and management. Maintain knowledge of laws, regulations, and policies for operational functions covered. Keep abreast of the Regulatory requirements and industry developments relevant to the activities of the assigned Business Units in specific, and across the industry in general, and advise the first line. Provide clear definition of roles, responsibilities, individual goals, and performance objectives for the team. Provide regular, constructive feedback to maximize positive impact of individual team member s talent. Knowledge and skills Risk and control frameworks as it applies to global banks. Operational and Compliance risks as it relates to banking. Key ORM processes and practices Second line review and challenge / oversight activities in banking. Strong communication skills both written and oral Analytical and logical thinking Working knowledge of MS tools such as word, Excel and PPT Required Education and Experience Bachelors degree or higher in the field of finance, operations with qualifications such as Chartered Accountant / CPA (Preferred and not mandatory) Banking and/ or financial services industry experience (12 to 15 years) Experience leading or overseeing and / or governing ORM programs in a Second Line of Defense role, preferably in a Large Bank setting (>$200B in assets). Hands-on exposure to any of the following Business areas - Finance, HR/Product, Credit Risk, and Enterprise Operations. Knowledge of regulatory guidance and industry frameworks pertaining to banking. Certifications Relevant industry certifications (e.g., CIA, CISA, CRCM, ACAMS) - one or more of these will be an added advantage. Equal Employment Opportunity FC Global Services India LLP (First Citizens India) is an Equal Employment Opportunity Employer. We are committed to fostering an inclusive and accessible environment and prohibit all forms of discrimination on the basis of gender, religion, caste, disability, sexual orientation, economic status or any other characteristics protected by the law. We strive to foster a safe and respectful environment in which all individuals are treated with respect and dignity. Our EEO policy ensures fairness throughout the employee life cycle.
Posted 1 month ago
Upload Resume
Drag or click to upload
Your data is secure with us, protected by advanced encryption.
The demand for Certified Information Systems Auditor (CISA) professionals in India is on the rise as organizations prioritize information security and compliance. CISA professionals play a crucial role in auditing, assessing, and managing IT systems to ensure they are secure and compliant with regulations. If you are considering a career in CISA, India offers a plethora of opportunities in various industries.
These cities are known for their booming IT sectors and have a high demand for CISA professionals.
The average salary range for CISA professionals in India varies based on experience: - Entry-level: INR 4-6 lakhs per annum - Mid-level: INR 8-12 lakhs per annum - Experienced: INR 15-25 lakhs per annum
A typical career path in CISA may include roles such as: 1. Junior Auditor 2. IT Auditor 3. Senior Auditor 4. Audit Manager 5. Chief Information Security Officer
In addition to CISA certification, CISA professionals are often expected to have skills in: - IT Security - Risk Management - Compliance - Information Security Management
As you prepare for CISA job interviews in India, remember to showcase your expertise in information security, compliance, and risk management. Stay updated with the latest trends in the industry and practice answering both technical and situational questions confidently. With the right skills and preparation, you can land a rewarding career in the field of CISA in India. Good luck!
Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.
We have sent an OTP to your contact. Please enter it below to verify.