646 Cisa Jobs - Page 26

We are looking forward to hire Audit & Compliance Documentation Professionals in the following areas : : Experience required: 5-7 years Transformation Risk and Control Team Job Summary: This executive role is in ensuring that transformation projects align with the company s risk appetite and regulatory requirements, while driving sustainable growth and innovation. Skills Experience in risk management, internal control, or a related field, with significant experience in managing risks for mid to small-scale transformation projects. Strategic thinking and leadership skills , strong analytical and problem-solving abilities, excellent communication and interpersonal skills, and proficiency in risk management software and tools. CRISC, CISA, or similar certifications are highly preferred. Experience in a risk management role within a large organization or consultancy. Deep understanding of industry-specific regulations and standards. Experience in interacting with cross-functional teams and managing simple to mid level projects. Extremely good with analysing the Risk and Audit requirements, documenting and evidencing the same with the available resources. Our Hyperlearning workplace is grounded upon four principles Flexible work arrangements, Free spirit, and emotional positivity Agile self-determination, trust, transparency, and open collaboration All Support needed for the realization of business goals, Stable employment with a great atmosphere and ethical corporate culture

Job Title- Regulatory Compliance Assessment - IT Lead Position type- Full Time Work Location-Bangalore/Gurugram Working style- Hybrid People Manager role: No Required education and certifications critical for the role- Any Graduate or Post-Graduate (full time) Required years of experience - Minimum 5+ years of relevant experience AON IS IN THE BUSINESS OF BETTER DECISIONS At Aon, we shape decisions for the better to protect and enrich the lives of people around the world As an organization, we are committed as one firm to our purpose, united through trust as one inclusive, diverse team and we are passionate about helping our colleagues and clients succeed GENERAL DESCRIPTION OF ROLE: We are looking to build out our team responsible for regulatory compliance assessment work You will be responsible for working with individuals across the organization to assess their IT General Controls for design and operational effectiveness This position sits within the Global Security Services (GSS) organization and is focused primarily on determining the control effectiveness of ITGCs as it relates to Sarbanes Oxley A secondary focus is related to other regulatory requirements A successful candidate is a problem solver, self-starter, can work independently, and has an attention for detail JOB RESPONSIBILITIES Participate in and lead walkthrough meetings with control owners Evaluate provided control evidence, validating the evidence for completeness and accuracy, IPE requirements Determine testing conclusions for design and operating effectiveness Perform testing on controls related to on prem and cloud-based infrastructure Adjust testing results based on reviewer feedback Advise on suggested remediation for control deficiencies Discuss control deficiencies with control owners, being able to clearly articulate the gap and suggest remediation activities Support internal audits, regulatory audits, and client requests as needed Support additional activities related to our Governance, Risk and Compliance (GRC) program SKILLS/COMPETENCIES REQUIRED Any bachelor s degree with preference to a technical or business degree 4 to 6 years of experience in ITGC execution, testing, internal audit, or external audit functions Experience completing testing, status updates, and reporting using a GRC tool Ability to independently manage workload to achieve agreed upon milestones Advanced Excel proficiency (ability to use macros, advanced formulas, pivot tables, etc) Feel comfortable speaking English and leading group calls of 10-20 people Experience performing control testing for any of the following regulations: SOX, PCI, MAS, HIPAA, NYDFS, FCA, or other regulatory requirements Desire to work on a global team with the possibility of working adjusted hours to accommodate global time zones Certificates preferred: CISA, ITIL HOW WE SUPPORT OUR COLLEAGUES In addition to our comprehensive benefits package, we are proud to be an equal opportunity workforce At Aon, we believe a diverse workforce is an innovative workforce Our agile, inclusive environment allows colleagues to manage their wellbeing and work/life balance while empowering you to be your authentic self Furthermore, all colleagues enjoy two Global Wellbeing Days each year, encouraging them to take time to focus on themselves We offer a variety of workstyle options through our Smart Working model, but we also recognize that flexibility goes beyond just the place of work and we are all for it! Our continuous learning culture inspires and equips colleagues to learn, share and grow, helping them achieve their fullest potential As a result, Aon colleagues are more connected, more relevant and more valued #LI-RK2 2554343

Security Administration Data Privacy and Data Protection Compliance Risk Management Training & Awareness Performing Regular Audits Incident Response Collaboration & Reporting Administrative Support

Visa s Value Added Services VAS organization is seeking a Cybersecurity Engineer to support and manage its security engineering processes and testing efforts internally as well as those performed by Visa s Cybersecurity team. This Role will directly support Regional Solutions Product Development Technical Leadership Team but will directly report back to the VAS Security Lead. The individual will review findings from various security tools Qualys, CheckMarx, Sonatype, Prsima Cloud etc and will coordinate the dissemination of results to project teams and coordinate resolution of High, Medium and Low findings. The individual will be responsible for creating and distributing weekly, monthly, ad hoc reports to all layers of management. Responsibilities Security Governance Supervise all Security Governance activities for RSDP and assist in updating the RSDP Security Dashboard with the latest information. Reporting Create and disseminate reports weekly, monthly, ad hoc as required to management and executive management. Exception Reconciliation Participate in Exception reconciliation meetings with Information Security Assurance and assist in remediation discussions as required. Security Testing Coordinate scheduling and execution of security tests, including CheckMarx, Qualys, Nexus IQ, and Pentests, and disseminate test results to project teams in a timely or automated manner. Finding Resolution Create Features for Security Finding resolution by regularly scheduled tag up with Product Development teams and utilize JIRA ticketing system for Finding and Exception Management. Audit Coordination Assist Audit Coordinator in drafting exceptions, escalating issues, and managing open audit findings. This includes holding regular status meetings to provide status on remediation to Head of RSDP Security. Control Reviews Proactively institute reviews of current environment controls to identify possible weaknesses that could result in audit findings. Interfacing Interface with varying levels within the organization, including Directors and Executive Management, to ensure effective communication and collaboration. Basic Qualifications 8 or more years of work experience with a Bachelors Degree or with an Advanced Degree. Security Expertise A strong background in Information security is essential. SSDLC Knowledge A solid understanding of the SSDLC process is necessary. Pentest Acumen Knowledge of the Application Security Pentest is required. Experience A minimum of 5 years experience working as a Security Engineer or Risk Analyst or Security Auditor in an IT audit environment is needed. Project Management Exposure to project management experience is mandatory. Analytical Skills Must demonstrate strong analytical and problem solving abilities. Communication Skills Excellent written and verbal communication, along with interpersonal skills, is crucial. Independence The ability to work independently with minimal supervision and manage multiple simultaneous projects with deadlines is required. Attention to Detail Must be extremely detail-oriented, conscientious, thorough, and accurate. Technical Proficiency Expertise with Code Review tools, Pentest and SCA tools along with MS Office applications Excel, PowerPoint, Word, SharePoint, and document control systems is necessary. Collaboration The ability to collaborate professionally with various levels of management is important. Regulatory Knowledge Strong knowledge of COBIT, FFIEC, Sarbanes Oxley SOC, PCI-DSS, and SSAE 16 is required. Influence Must have the ability to influence process and control changes in the environment and advise colleagues. GRC Understanding Knowledge and understanding of Finding Management, including Risk and Compliance Management, is needed. Security Standards Familiarity with OWASP top 10, SANS top 20 Critical Security Controls, and NIST is essential. A critical analytical thinker who can express a point of view supported by data and communicate effectively with both technical and non-technical audiences. Excellent communication and teaching skills, with strong influencing and persuasion abilities. Proactive in raising concerns early and knows when to escalate. Capable of raising issues and facilitating constructive problem solving at all levels of the organization. Passionate and knowledgeable in technology and cybersecurity domains. Able to register opinions confidently, respectfully, and articulately. Holds at least one professional security management certification, such as Certified Information Systems Security Professional CISSP, Certified Information Systems Auditor CISA, or Certified in Risk and Information Systems Control CRISC. Experienced in Secure Software Development Life Cycle SSDLC processes, Secure Code Reviews, and Threat Modeling. Experienced in managing Open-Source Vulnerabilities. Experienced in conducting Penetration Testing. Knowledgeable in Mobile Security, including evaluating tools and processes. Experienced in designing and securing distributed systems and applications, real time, scalable web services, REST APIs, and developer portals. Possesses in-depth knowledge of risk management principles, practices, and methodologies.

Perform testing of IT Application Controls, IPE, and Interface Controls through code reviews, IT General Controls review covering areas such as Change Management, Access Management, Backup Management, Incident and Problem Management, SDLC, Data Migration, Batch Job scheduling/monitoring and Business Continuity and Disaster RecoveryPerform Risk Assessment, identification, and Evaluation of Controls, prepare process flow diagrams and document the same in Risk & Control Matrix Perform business process walkthrough and controls testing for IT Audits Performing planning and executing audits, including - SOX, Internal Audits, External AuditsConducting controls assessment in manual/ automated environmentPrepare/Review of Policies, Procedures, SOPsMaintain relationships with client management and the project Manager to manage expectations of service, including work products, timing, and deliverables Demonstrate a thorough understanding of complex information systems and apply it to client situations Use extensive knowledge of the clients business/industry to identify technological developments and evaluate impacts on the work to be performed Coordinate effectively and efficiently with the Engagement manager and the client management keeping both constantly updated regarding project s progress Collaborate with other members of the engagement team to plan the engagement and develop relevant workpapers/deliverables Perform fieldwork and share the daily progress of fieldwork, informing supervisors of engagement status

Strong understanding of IT General Controls domains such as Change Management, User Access Management, IT Operations, Back and Recovery Management etc Strong understanding of the thirdparty risk management Implementation and assessment knowledge of various industry standards, frameworks, and compliances such as ISO 27001, HIPAA, HITRUST, ISO 22301, ISO 27701 etc Understanding of the IT Risk Assessment methodologies and ability to comprehend and apply the knowledge during IT assessment lifecycle Interview client stakeholders and conducts walkthrough meetings and develop assessment artifacts Should understand complete assessment lifecycle from assessment scoping to project deliverables Great communication skills and the ability to break down and explain complex data security problems Excellent presentation skills and ability to effectively communicate proposals and point of view at senior management levels

We re looking for Senior Security Consultant with expertise in cyber / information security, risk and controls concepts. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of a new service offering. Your key responsibilities Engage in Cyber Strategy & Governance, Cyber Risk & Compliance, Cyber Resilience, Cyber Transformation and Co-Sourcing, Application & Network Security engagements Work effectively as a team member, sharing responsibility, providing support, maintaining communication and updating senior team members on progress. Execute the engagement requirements, along with review of work by junior team members. Help prepare reports and schedules that will be delivered to clients and other parties. Develop and maintain productive working relationships with client personnel. Build strong internal relationships within EY Consulting Services and with other services across the organization Contribute to people related initiatives including recruiting and retaining Cyber Transformation professionals Maintain an educational program to continually develop personal skills of staff Understand and follow workplace policies and procedures Building a quality culture at GDS Help senior team members in performance reviews and contribute to performance feedback for staff/junior level team members Manage the performance management for the direct reportees, as per the organization policies. Foster teamwork and lead by example; training and mentoring of project resources Participating in the organization-wide people initiatives Skills and attributes for success Hands-on experience of more than 5 years with key components of cybersecurity including (but not limited to) Vendor/3rd Party Risk Management & Assessment Cyber Strategy & Governance, Cyber Transformation, Cyber Dashboarding Regulations/standards such as ISO 27001, PCI DSS, HIPAA, HITRUST, GDPR, CCPA, FISMA/FEDRAMP, COBIT, OWASP Top 10, NIST 800-53 Business Continuity & Disaster Recovery Must have experience in working in client facing roles, interacting with the third parties, assessing different kinds of environments (IT and non-IT) and ability to apply cyber security concepts in all these sectors. Experienced in creation and review of security policy/procedures, and in performing risk assessments. Good to have experience in assessing ITGC requirements across various industries including both Cybersecurity and resilience requirements. Should have a good understanding of VAPT process, common application security vulnerabilities, exploitation techniques and remediation measures. Basic understanding of Network Security and network architecture diagram reviews, access and perimeter control, vulnerability management and intrusion detection, firewall rule-based reviews. Good understanding of logging and monitoring tools (SIEM). Knowledge in any one of the SIEM tools is a plus. To qualify for the role, you must have BE - B. Tech / MCA / M. Tech/ MBA with background in computer science and programming. More than 5 Years of relevant experience. Strong Excel and PowerPoint skills. Should be proficient in leading medium to large engagements and coach junior staff.

Manage and oversee the Technology Risk teams daily operations, ensuring high-quality deliverables and adherence to timelines Develop and execute IT audit plans and strategies to assess the effectiveness of IT controls, compliance, and governance processes Provide expert guidance on ITGCs, ITACs, SOX 404 controls testing, Change Management, Access Management, and other relevant areas Lead SOX compliance activities, including risk assessments, controls testing, and coordinating remediation efforts Review and approve Service Organization Control Reports (SOCR) and ensure the teams understanding of related frameworks Mentor and develop team members through knowledge sharing, training, and providing performance feedback Facilitate IT process reviews and conduct stakeholder interviews, data validations, and document analysis Collaborate with cross-functional teams to identify control gaps and develop effective remediation plans Stay informed of industry trends, regulatory changes, and emerging technologies related to IT controls and compliance Prepare and present audit findings, recommendations, and status updates to core assurance teams, senior management and key stakeholders Drive continuous improvement in the IT audit process and methodologies Skills and attributes To qualify for the role you must have Qualification Experience in IT controls, ITGCs, ITACs, SOX 404 controls testing, and IT auditing Strong understanding of Change Management, Access Management, SOD, business process IT controls, and ICFR principles Proven track record of managing audit teams and delivering results Relevant professional certifications such as CISA, CISSP, or equivalent Excellent analytical, problem-solving, and project management skills Strong communication and interpersonal skills, with the ability to lead and work collaboratively with various teams Ability to adapt to a fast-paced environment and manage multiple priorities Experience 5 to 6 years of post-qualification experience with either a mid or top-tier accounting firm, focused on external or statutory audit-related matters or an MNC or a large domestic Indian company, preferably within a shared services environment

As Technology Risk Assurance Manager, you ll actively establish, maintain and strengthen internal and external relationships. With the guidance of partners, directors and senior managers, you ll identify potential business opportunities for EY. Drawing on your knowledge and experience, you ll provide innovative commercial insights for clients, adapt methods and practices to fit operational team and cultural needs and contribute to thought leadership. You ll actively contribute to improving operational efficiency on projects and internal initiatives. In line with our commitment to quality, you ll consistently drive projects to completion and confirm that work is of high quality. Your role in leading teams - or parts of teams - on engagements will depend on the size of engagement. When working on engagements, you ll report to higher levels of management, who will expect you to anticipate and identify risks, and raise any issues with them as appropriate. As an influential member of the team, you ll help to create a positive learning culture, coach and counsel junior team members and help them to develop. Client responsibilities Participate in Risk Assurance engagements Help manage the financial aspects of engagements by organizing staffing, tracking fees and communicating issues to project leaders Participate in business development initiatives Build strong internal relationships within EY Advisory Services and with other services across the organization Stakeholder management People responsibilities Develop people through effectively supervising, coaching, and mentoring staff Conduct performance reviews and contribute to performance feedback for staff Contribute to people-related initiatives including recruiting, retaining and training IT Risk and Assurance professionals Maintain an educational program to continually develop personal skills of all staff Understand and follow workplace policies and procedures Requirements (including experience, skills and additional qualifications) Technical skills requirements Preferably B.E/B.Tech (Electronics, Electronics & Telecommunications, Comp. Science)/MBA/M.Sc./CA with atleast a minimum of 6-9 years You ll have knowledge and experience of a number of the following areas, and be developing deep experience and technical competence in at least one Financial Audit IT Integration/ IT control testing experience Service Organization Controls Reporting (SOCR - SSAE 16 // ISAE 3402) SOC 1, 2, & 3 Reporting IT governance and risk Control frameworks such as COSO Enterprise risk services with a specific focus on IT, and related industry standards IT risk management framework Common IT governance and control industry frameworks, including CObIT, RiskIT, ValIT, IT Governance Institute and ISACA good practices IT industry frameworks such as ITIL and CMM Project risk Robust understanding of program and project management practices Familiarity with a typical IT systems development life cycle Experience in developing technical skills specific to a solution, e.g., SAP, Oracle, CRM Proven business process/analysis skills IT assurance and compliance A broad appreciation of business processes, data structures, IT applications and infrastructure, IT processes, and governance and internal control principles. Depending upon your specific area(s) of focus, you ll have additional skills and knowledge in IT audit in the context of a financial audit, and related regulations, auditing standards and guidelines Control frameworks such as COSO, internal control principles and related regulations including SOX and J-SOX Internal audit services with a specific focus on IT, and related industry standards Common IT governance, control and assurance industry frameworks, including CObIT, RiskIT, ValIT, IT Governance Institute and ISACA good practices IT industry frameworks such as ITIL and CMM Infrastructure Technically enabled IT /business transformation, program and project delivery, design, architecture and solution design, information management, implementation, operations, and management of IT infrastructure Strong technical or security skills related to a broad range of operating systems, databases or security tools, e.g., UNIX, Linux, Windows 2000 and NT, firewalls and IDS systems Familiarity with security and risk standards such as ISO 27001-2, PCI DSS, NIST, ITIL, COBIT Experience of security testing methods and techniques including network, operating and application system configuration review Applications Application controls and security experience security modeling sensitive access and SoD testing controls testing Process systems and integrity, including risks and controls within business processes (manual, automated, security) Change management Project management and program management office (PMO) experience Office skills/experience, e.g., Excel and Access Additional requirements Demonstrated track record with a blue chip consulting organization and/or a blue chip organization Demonstrated experience in business job descriptions development and account management Strong academic record including a degree Relevant professional qualifications such as CISA, CA, CIA

Acts as a Team Leader on diverse portfolio of audits and shares responsibility with the Audit Leader for planning and delivering the audits Assists the Audit Leader in on-boarding the audit team and confirms the team members understand the audit objectives and scope, and their respective responsibilities on the audit Manages the execution of assigned audits; supervises the work of the audit team members during the various phases of the audit ensuring ongoing compliance with methodology and quality standards Collaborates with management on the more complex audit issues to develop possible recommendations Presents findings and proposes recommendations that deal with root cause of issues and impact to the organization Manages the approved budget and resources for the assigned audit; assigns and reviews the work done by all team members Coaches team members and colleagues in the best use of EY and GIA methodologies and tools Demonstrates excellent people management capabilities and is able to think out of the box Skills and attributes for success Technical attributes Significant and concrete experience to manage and deliver an audit from planning to reporting Experience in control testing for financial/ non-financial processes Proven ability to lead projects and initiatives that drive performance Analytical thought process to evaluate unstructured situations and provide logical conclusions Presentation skills Motivated, fast thinking, dynamic person with strong business acumen Proficiency in Microsoft 365, including advanced skills in MS Excel for data analysis Expertise in MS PowerPoint for creating compelling presentations and effectively communicating audit findings and recommendations Familiarity with other Microsoft Office applications to support various audit and administrative tasks Ability to leverage Power BI to analyze complex data sets, identify trends, and support data-driven decision-making within the audit function Management attributes Ability to manage people in a way that inspires, develops, and delivers results Ability to foster teamwork and innovation amongst a diverse and sometimes virtual team Solution oriented approach and superior problem solving abilities Be a quick learner and possess the ability to adapt to change Possess excellent communication skills (oral and written), strong interpersonal and presentation skills for interacting with senior stakeholders Experience working under agile delivery methodology Ability to travel To qualify for the role, you must have CA/ MBA with 8+ years of post-qualification relevant experience in Internal Audit and SOX Compliance/ Risk Advisory in a consulting or multinational environment

Job summary Your role in risk identification, control evaluation, and security governance is crucial in advising on complex situations and enhancing the firm s risk posture. Through collaboration and analytical skills, you will contribute to the Testing CoE s overall success and strengthen the firm s compliance with regulatory obligations and industry standards. Job responsibilities Lead comprehensive control evaluations and substantive testing to independently assess the design and effectiveness of controls within Global Technology. Ensure compliance with internal policies, procedures, and external laws, rules, and regulations, while identifying necessary remediation actions. This includes developing and executing testing procedures, meticulously documenting results, drawing informed conclusions, making actionable recommendations, and distributing detailed compliance testing review reports. Foster collaboration with Compliance and Operational Risk Officers on various engagements. This includes developing detailed test scripts, facilitating issue discussions, participating in business meetings, and drafting comprehensive final reports to ensure alignment and clarity. Utilize advanced critical thinking skills to apply substantive testing techniques, thoroughly evaluating the effectiveness of high-risk business processes and identifying potential areas for improvement. Proactively assess and monitor risks, ensuring adherence to firm standards, regulatory requirements, and industry best practices. Implement strategies to mitigate identified risks effectively. Collaborate with cross-functional teams and stakeholders to support the design and effectiveness of controls. Drive initiatives that enhance the business control environment through recommended updates to the Compliance and Operational Risk Evaluation (CORE) application. Develop and execute robust control test scripts aimed at identifying control weaknesses, determining root causes, and recommending practical solutions to enhance operational efficiency and control effectiveness. Document test steps and results in a comprehensive and organized manner, ensuring sufficient support and justification for testing conclusions. Maintain a high standard of documentation to facilitate transparency and accountability. Lead meetings with business owners at various management levels, delivering testing results and supporting sustainable control enhancements. Identify and capitalize on opportunities to strengthen controls and improve operational efficiency. Required Qualifications, Capabilities, and Skills A minimum of 6+ years of experience or equivalent expertise in risk management, assessment, control evaluations, or a related field, preferably within the financial services industry. Possess a strong understanding of technology and/or cybersecurity industry standards and regulatory requirements. Subject matter expertise in domains such as Data Protection, Technology Resiliency, Software Development, Vulnerability Management, Security Configuration etc. Demonstrated ability to analyze complex issues, develop and implement effective risk mitigation strategies, and communicate insights and recommendations clearly to senior stakeholders. Proficient knowledge of risk management frameworks, regulations, and industry best practices. Ability to stay updated with evolving regulatory landscapes and adapt strategies accordingly. Exceptional ability to develop and communicate well-founded recommendations based on regulatory guidance and standards, ensuring alignment with organizational goals and compliance requirements. Highly organized and detail-oriented, with a proven track record of managing multiple priorities and delivering results in a fast-paced environment. Strong analytical and communication skills, with the ability to convey complex information in a clear and concise manner to diverse audiences Preferred qualifications, helpful capabilities, and skills CISM, CRISC, CISSP, CISA, CCEP, CRCM, CRCMP, GRCP, or other industry-recognized risk and risk certifications preferred. A background in auditing and the ability to understand of internal controls is beneficial. Proficiency in MS (Microsoft Suite) Office - Microsoft Word, Excel, Access, and PowerPoint. Knowledge of data analytical tools such as Tableau, Altryx or Pythyon is a plus.

Job summary Your role in risk identification, control evaluation, and security governance is crucial in advising on complex situations and enhancing the firm s risk posture. Through collaboration and analytical skills, you will contribute to the Testing CoE s overall success and strengthen the firm s compliance with regulatory obligations and industry standards. Job responsibilities Lead comprehensive control evaluations and substantive testing to independently assess the design and effectiveness of controls within Global Technology. Ensure compliance with internal policies, procedures, and external laws, rules, and regulations, while identifying necessary remediation actions. This includes developing and executing testing procedures, meticulously documenting results, drawing informed conclusions, making actionable recommendations, and distributing detailed compliance testing review reports. Foster collaboration with Compliance and Operational Risk Officers on various engagements. This includes developing detailed test scripts, facilitating issue discussions, participating in business meetings, and drafting comprehensive final reports to ensure alignment and clarity. Utilize advanced critical thinking skills to apply substantive testing techniques, thoroughly evaluating the effectiveness of high-risk business processes and identifying potential areas for improvement. Proactively assess and monitor risks, ensuring adherence to firm standards, regulatory requirements, and industry best practices. Implement strategies to mitigate identified risks effectively. Collaborate with cross-functional teams and stakeholders to support the design and effectiveness of controls. Drive initiatives that enhance the business control environment through recommended updates to the Compliance and Operational Risk Evaluation (CORE) application. Develop and execute robust control test scripts aimed at identifying control weaknesses, determining root causes, and recommending practical solutions to enhance operational efficiency and control effectiveness. Document test steps and results in a comprehensive and organized manner, ensuring sufficient support and justification for testing conclusions. Maintain a high standard of documentation to facilitate transparency and accountability. Lead meetings with business owners at various management levels, delivering testing results and supporting sustainable control enhancements. Identify and capitalize on opportunities to strengthen controls and improve operational efficiency. Required Qualifications, Capabilities, and Skills A minimum of 6+ years of experience or equivalent expertise in risk management, assessment, control evaluations, or a related field, preferably within the financial services industry. Possess a strong understanding of technology and/or cybersecurity industry standards and regulatory requirements. Demonstrated ability to analyze complex issues, develop and implement effective risk mitigation strategies, and communicate insights and recommendations clearly to senior stakeholders. Proficient knowledge of risk management frameworks, regulations, and industry best practices. Ability to stay updated with evolving regulatory landscapes and adapt strategies accordingly. Exceptional ability to develop and communicate well-founded recommendations based on regulatory guidance and standards, ensuring alignment with organizational goals and compliance requirements. Highly organized and detail-oriented, with a proven track record of managing multiple priorities and delivering results in a fast-paced environment. Strong analytical and communication skills, with the ability to convey complex information in a clear and concise manner to diverse audiences Preferred qualifications, helpful capabilities, and skills CISM, CRISC, CISSP, CISA, CCEP, CRCM, CRCMP, GRCP, or other industry-recognized risk and risk certifications preferred. A background in auditing and the ability to understand of internal controls is beneficial. Proficiency in MS (Microsoft Suite) Office - Microsoft Word, Excel, Access, and PowerPoint. Knowledge of data analytical tools such as Tableau, Altryx or Pythyon is a plus.

Lead comprehensive control evaluations and substantive testing to independently assess the design and effectiveness of controls within Global Technology. Ensure compliance with internal policies, procedures, and external laws, rules, and regulations, while identifying necessary remediation actions. This includes developing and executing testing procedures, meticulously documenting results, drawing informed conclusions, making actionable recommendations, and distributing detailed compliance testing review reports. Foster collaboration with Compliance and Operational Risk Officers on various engagements. This includes developing detailed test scripts, facilitating issue discussions, participating in business meetings, and drafting comprehensive final reports to ensure alignment and clarity. Utilize advanced critical thinking skills to apply substantive testing techniques, thoroughly evaluating the effectiveness of high-risk business processes and identifying potential areas for improvement. Proactively assess and monitor risks, ensuring adherence to firm standards, regulatory requirements, and industry best practices. Implement strategies to mitigate identified risks effectively. Collaborate with cross-functional teams and stakeholders to support the design and effectiveness of controls. Drive initiatives that enhance the business control environment through recommended updates to the Compliance and Operational Risk Evaluation (CORE) application. Develop and execute robust control test scripts aimed at identifying control weaknesses, determining root causes, and recommending practical solutions to enhance operational efficiency and control effectiveness. Document test steps and results in a comprehensive and organized manner, ensuring sufficient support and justification for testing conclusions. Maintain a high standard of documentation to facilitate transparency and accountability. Lead meetings with business owners at various management levels, delivering testing results and supporting sustainable control enhancements. Identify and capitalize on opportunities to strengthen controls and improve operational efficiency Required Qualifications, Capabilities, and Skills A qualified graduate with minimum of 8+ years of relevant experience or equivalent expertise in risk management, assessment, control evaluations, or a related field, within the financial services industry. Possess a strong understanding of technology and/or cybersecurity industry standards and regulatory requirements. Demonstrated ability to analyze complex issues, develop and implement effective risk mitigation strategies, and communicate insights and recommendations clearly to senior stakeholders. Proficient knowledge of risk management frameworks, regulations, and industry best practices. Ability to stay updated with evolving regulatory landscapes and adapt strategies accordingly. Exceptional ability to develop and communicate well-founded recommendations based on regulatory guidance and standards, ensuring alignment with organizational goals and compliance requirements. Highly organized and detail-oriented, with a proven track record of managing multiple priorities and delivering results in a fast-paced environment. Strong analytical and communication skills, with the ability to convey complex information in a clear and concise manner to diverse audiences. Preferred qualifications, helpful capabilities, and skills CISM, CRISC, CISSP, CISA, CCEP, CRCM, CRCMP, GRCP, or other industry-recognized risk and risk certifications preferred. A background in auditing and the ability to understand of internal controls is beneficial. Proficiency in MS (Microsoft Suite) Office - Microsoft Word, Excel, Access, and PowerPoint. Knowledge of data analytical tools such as Tableau, Altryx or Pythyon is a plus.

You Lead the Way. We ve Got Your Back. At American Express, you ll be recognized for your contributions, leadership, and impact every colleague has the opportunity to share in the company s success. Together, we ll win as a team, striving to uphold our company values and powerful backing promise to provide the world s best customer experience every day. And we ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong. Join Team Amex and lets lead the way together. American Express Internal Audit Group (IAG) has reinvented our audit process and is leading the financial services industry with our Audit NextGen, Data-Driven Continuous Auditing, and Auditor of the Future initiatives. Each uniquely support our Winning Aspiration to be a world class internal audit function that: Provides data-driven and technology-enabled assurance Delivers timely risk insights that are business-aware and forward-looking Supports our colleagues with experiences that prepare them to be enterprise leaders Collectively, IAG s strategic initiatives, combined with our greatest asset our people enable IAG to utilize advanced data analysis capabilities, provide greater and continuous assurance, and help ensure quality products and services are provided to American Express customers. IAG s innovative Data-Driven Continuous Auditing approach has led to patent-pending technology assets over our uniquely developed audit methodology and technology enablers. We are looking for those who share our mission and aspirations and are passionate about the use of data and technology in a collaborative, people-focused environment. About the Internal Audit Group at American Express Our Internal Audit Group is a worldwide function with 300+ team members and offices across nine countries within American Express. Our mission is to protect and enhance organizational value by providing independent, objective, risk-based assurance, advisory services and to influence the way the company manages risk. We are committed to growing our audit staff significantly as we continue to expand and enhance the Internal Audit Group. Our assurance and risk professionals have diverse backgrounds including internal controls, consumer compliance, technology, operational risk, financial accounting, data analytics, and banking operations. Our audit teams align to key risk areas and business units to ensure IAG can provide comprehensive and risk-based audit coverage. In addition, IAG has a Professional Practices group responsible for managing audit operations, quality, and standards; regulatory relations; reporting; training and professional development; and key internal capabilities and technologies. About the Role: Our Internal Audit Group (IAG) is seeking an eager Senior Auditor to be part of the IAG s Resource Centre of Excellence being set-up in India. In this role, the ideal candidate will be responsible for assisting on multiple audit portfolios across IAG. This is an exceptional opportunity for you to showcase and further expand your audit skills, and knowledge! About the Team: IAG s Resource Centre of Excellence in India will span across multiple audit portfolios within IAG. The Resource Centre of Excellence team is expected to work with global and regional audit teams to assist on audits across various risk pillars within American Express. The team s shift timing will have some overlap with other regions, including US, EMEA and LACC. IAG is heavily focused on utilizing a data driven auditing approach across all audit portfolios. The Key Responsibilities of the role include: Participate as a key team member on global and regional audit projects responsible for assisting with annual planning and owning core audit tasks, more complex areas and challenging workloads on successive assignments Collaborate with audit teams to understand the data behind key processes, risk and controls to develop analytic control tests and analyze and interpret their results Proficient use of automated work papers, analytics and other department and company tools Monitor a portfolio of audit analytics, assess results, & use data to tell the business story, and work with audit and business colleagues to validate findings Evaluate results, synthesize audit findings across the project, draft audit reports and ensure effective and efficient execution of audits in conformance with professional and department standards, budgets, and timelines Present audit objectives, scope, and results to senior management, clearly articulating the potential impact of control gaps in a highly professional and proficient manner Assist team leaders and other team members in accomplishing team objectives and producing results. Execute multiple simultaneous global audit projects of all sizes and complexity across multiple business areas including integrated audits that consider financial, operational, compliance and technology risk. Maintain internal audit competency through ongoing professional development Minimum Qualifications 5+ years of relevant audit experience within the financial Services Industry BA, BS, or equivalent degree in accounting or finance related field Knowledge and experience in the application of control theory and professional auditing practices including the audit lifecycle Understanding of regulatory, accounting, and financial industry best practices relevant to the business, including technology and data implications Ability to break-down a complex problem into components, solve them using data analysis, process knowledge and risk/control knowledge, and communicate results and control recommendations with transparency and integrity Strong written and verbal communication skills that deliver quality, actionable and beneficial feedback to management on potential control issues and solutions to close gaps. Effectively works independently, within a team and across teams in a fast-paced environment to drive business results, utilizing related project management skills, employing creative thinking, and the ability to work on competing priorities Preferred Qualifications Experience with technology control testing including interface inputs, reports, application security, business continuity and third parties Experience with using data analytic tools, data visualization, key risk indicators (KRIs), key performance indicators (KPIs), and scorecards / dashboards Background in information systems, data analytics or information technology Professional Certification (CIA, CPA, CISA or equivalent) Experience from big accounting firms or global internal audit functions Benefits include: Competitive base salaries Bonus incentives Support for financial-well-being and retirement Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location) Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need Generous paid parental leave policies (depending on your location) Free access to global on-site wellness centers staffed with nurses and doctors (depending on location) Free and confidential counseling support through our Healthy Minds program Career development and training opportunities

You Lead the Way. We ve Got Your Back. With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you ll learn and grow as we help you create a career journey that s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally. At American Express, you ll be recognized for your contributions, leadership, and impact every colleague has the opportunity to share in the company s success. Together, we ll win as a team, striving to uphold our company values and powerful backing promise to provide the world s best customer experience every day. And we ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong. Join Team Amex and lets lead the way together. American Express Internal Audit Group (IAG) has reinvented our audit process and is leading the financial services industry with our Audit NextGen, Data-Driven Continuous Auditing, and Auditor of the Future initiatives. Each uniquely support our Winning Aspiration to be a world class internal audit function that: Provides data-driven and technology-enabled assurance Delivers timely risk insights that are business-aware and forward-looking Supports our colleagues with experiences that prepare them to be enterprise leaders Collectively, IAG s strategic initiatives, combined with our greatest asset our people enable IAG to utilize advanced data analysis capabilities, provide greater and continuous assurance, and help ensure quality products and services are provided to American Express customers. IAG s innovative Data-Driven Continuous Auditing approach has led to patent-pending technology assets over our uniquely developed audit methodology and technology enablers. We are looking for those who share our mission and aspirations and are passionate about the use of data and technology in a collaborative, people-focused environment. About the Internal Audit Group at American Express Our Internal Audit Group is a worldwide function with 300+ team members and offices across nine countries within American Express. Our mission is to protect and enhance organizational value by providing independent, objective, risk-based assurance, advisory services and to influence the way the company manages risk. We are committed to growing our audit staff significantly as we continue to expand and enhance the Internal Audit Group. Our assurance and risk professionals have diverse backgrounds including internal controls, consumer compliance, technology, operational risk, financial accounting, data analytics, and banking operations. Our audit teams align to key risk areas and business units to ensure IAG can provide comprehensive and risk-based audit coverage. In addition, IAG has a Professional Practices group responsible for managing audit operations, quality, and standards; regulatory relations; reporting; training and professional development; and key internal capabilities and technologies. About the Role: Our Internal Audit Group (IAG) is seeking an eager Audit Manager to be part of the IAG s Resource Centre of Excellence being set-up in India. In this role, the ideal candidate will be responsible for assisting on multiple audit portfolios across IAG. This is an exceptional opportunity for you to showcase and further expand your audit skills, and knowledge! About the Team: IAG s Resource Centre of Excellence in India will span across multiple audit portfolios within IAG. The Resource Centre of Excellence team is expected to work with global and regional audit teams to assist on audits across various risk pillars within American Express. The team s shift timing will have some overlap with other regions, including US, EMEA and LACC. IAG is heavily focused on utilizing a data driven auditing approach across all audit portfolios. The Key Responsibilities of the role include: Participate as a key team member on global and regional audit projects responsible for assisting with annual planning and owning core audit tasks, more complex areas and challenging workloads on successive assignments Collaborate with audit teams to understand the data behind key processes, risk and controls to develop analytic control tests and analyze and interpret their results Proficient use of automated work papers, analytics and other department and company tools Monitor a portfolio of audit analytics, assess results, & use data to tell the business story, and work with audit and business colleagues to validate findings Evaluate results, synthesize audit findings across the project, draft audit reports and ensure effective and efficient execution of audits in conformance with professional and department standards, budgets, and timelines Present audit objectives, scope, and results to senior management, clearly articulating the potential impact of control gaps in a highly professional and proficient manner Assist audit leaders and other team members in accomplishing team objectives and producing results. Execute multiple simultaneous global audit projects of all sizes and complexity across multiple business areas including integrated audits that consider financial, operational, compliance and technology risk. Effectively coach, teach, mentor and develop junior colleagues and co-sourced resources across all aspects of their role, the audit and analytic lifecycle, and audit methodology Effectively manage scheduling, utilization and performance management for the assigned team members Maintain internal audit competency through ongoing professional development Minimum Qualifications 7+ years of relevant audit experience within the financial Services Industry BA, BS, or equivalent degree in accounting or finance related field Knowledge and experience in the application of control theory and professional auditing practices including the audit lifecycle Understanding of regulatory, accounting, and financial industry best practices relevant to the business, including technology and data implications Ability to break-down a complex problem into components, solve them using data analysis, process knowledge and risk/control knowledge, and communicate results and control recommendations with transparency and integrity Strong written and verbal communication skills that deliver quality, actionable and beneficial feedback to management on potential control issues and solutions to close gaps. Effectively works independently, within a team and across teams in a fast-paced environment to drive business results, utilizing related project management skills, employing creative thinking, and the ability to work on competing priorities Preferred Qualifications Experience with technology control testing including interface inputs, reports, application security, business continuity and third parties Experience with using data analytic tools, data visualization, key risk indicators (KRIs), key performance indicators (KPIs), and scorecards / dashboards Background in information systems, data analytics or information technology Professional Certification (CIA, CPA, CISA or equivalent) Experience from big accounting firms or global internal audit functions Benefits include: Competitive base salaries Bonus incentives Support for financial-well-being and retirement Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location) Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need Generous paid parental leave policies (depending on your location) Free access to global on-site wellness centers staffed with nurses and doctors (depending on location) Free and confidential counseling support through our Healthy Minds program Career development and training opportunities

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively. JOB DESCRIPTION Purpose of the Job /Role Lead/Manage/Perform Security Reviews which includes Cloud Security and Data Security, Threat and Vulnerability Management, Identity and access management, Technology controls, process controls, and governance, risk and compliance elements, IT General Controls. Responsibilities Should manage/ oversee/execute engagements around Cyber Risk and Maturity Assessments, Cyber Strategy, Cloud Security, Data Protection, Third Party Risk Management, Enterprise Architecture reviews. Knowledge on NIST CSF, ISO 27001, ISO 27701, ISO 27017, DPDP Act Experience in financial sector companies like banks, NBFCs and FinTechs Certifications CISA/CISM/ISO will be added advantage Mandatory Skill sets Strategy and Governance Preferred Skill sets Cyber Strategy

Experience of working on FS clients is preferred IT audits including statutory and internal audits IT General Controls (ITGC) testing IT Application Controls (ITAC) testing / IT Automated Business Controls testing IT Infrastructure risks and control assessments IT SOX 404 SOC1, SOC2 audits and reporting IT Compliance and regulatory reporting Risk and control assessments considering emerging technologies such as cloud, RPA, AI/ML, etc Certifications preferred CISA, CISSP, CISM, CRISC, CCSK and others (if relevant). Skills and attributes To qualify for the role you must have Qualification BE/ B.Tech, or MSC in Computer Science/Statistics or M.C.A Experience 2 years of relevant experience in field of IT Audits Should have played client facing role in managing audits Experience of working on FS clients is preferred IT audits including statutory and internal audits IT General Controls (ITGC) testing IT Application Controls (ITAC) testing / IT Automated Business Controls testing IT Infrastructure risks and control assessments IT SOX 404 SOC1, SOC2 audits and reporting

Experience of working on FS clients is preferred IT audits including statutory and internal audits IT General Controls (ITGC) testing IT Application Controls (ITAC) testing / IT Automated Business Controls testing IT Infrastructure risks and control assessments IT SOX 404 SOC1, SOC2 audits and reporting IT Compliance and regulatory reporting Risk and control assessments considering emerging technologies such as cloud, RPA, AI/ML, Blockchain etc Certifications preferred CISA, CISSP, CISM, CRISC, CCSK and others (if relevant). Skills and attributes To qualify for the role you must have Qualification BE/ B.Tech,, or MSC in Computer Science/Statistics or M.C.A or MBA in Finance or IT Experience 5+ years of relevant experience in field of IT Audits Should have played client facing role in managing audits Experience of working on FS clients is preferred IT audits including statutory and internal audits IT General Controls (ITGC) testing IT Application Controls (ITAC) testing / IT Automated Business Controls testing IT Infrastructure risks and control assessments IT SOX 404 SOC1, SOC2 audits and reporting IT Compliance and regulatory reporting Risk and control assessments considering emerging technologies such as cloud, RPA, AI/ML, Blockchain etc

Experience of working on FS clients is preferred IT audits including statutory and internal audits IT General Controls (ITGC) testing IT Application Controls (ITAC) testing / IT Automated Business Controls testing IT Infrastructure risks and control assessments IT SOX 404 SOC1, SOC2 audits and reporting IT Compliance and regulatory reporting Risk and control assessments considering emerging technologies such as cloud, RPA, AI/ML, Blockchain etc Certifications preferred CISA, CISSP, CISM, CRISC, CCSK and others (if relevant). Skills and attributes To qualify for the role you must have Qualification BE/ B.Tech,, or MSC in Computer Science/Statistics or M.C.A or MBA in Finance or IT Experience 5+ years of relevant experience in field of IT Audits Should have played client facing role in managing audits Experience of working on FS clients is preferred IT audits including statutory and internal audits IT General Controls (ITGC) testing IT Application Controls (ITAC) testing / IT Automated Business Controls testing IT Infrastructure risks and control assessments IT SOX 404 SOC1, SOC2 audits and reporting IT Compliance and regulatory reporting Risk and control assessments considering emerging technologies such as cloud, RPA, AI/ML, Blockchain etc

Total of 5+ years of relevant IT experience with 3 + years in Security implementations Scope of role is to assess a project s compliance with Oracle policies and suggest remediation. Must have: - Development Experience in the Identity and Access Management space. -Product knowledge in at least 2 Oracle IDM product families with in-depth technical skills from installation to implementation & troubleshooting - OIM/OAM/OUD would be mandatory. -Understanding of authentication, authorization, SSO, and LDAP best practices. -Experience integrating and onboarding applications. -Ability to diagnose and troubleshoot issues on the OIAM platform -Strong knowledge of Java, Unix and experience in shell scripting -Good communication skills - verbal and written Secondary Skills: -Knowledge on Cloud security

Key Responsibilities: Develop Project Plans: Develop and execute end to end project lifecycle, from initiation to closure, ensuring alignment with business objectives and cybersecurity best practices. Create detailed project plans, including scope, timelines, milestones and resource allocation. Stakeholder Interactions: Work with internal and external stakeholders to define project requirements, manage expectations, and provide regular updates. Identify and Mitigate Risks: Assess potential risks and develop strategies to mitigate them. Ensure Quality: Monitor project progress and performance to ensure deliverables meet quality standards and adhere to cybersecurity policies and regulations. Maintain Documentation: Keep thorough documentation of project plans, status reports, and evaluations. Prepare and present reports to senior management and stakeholders. Apply Cybersecurity Knowledge: Utilize expertise in cybersecurity to ensure projects align with industry standards, best practices, and regulatory requirements. Handle Escalations : Handle escalations and conflict within the team. Implement Best Practices: Identify and apply process improvements and best practices to enhance project management and cybersecurity processes. Lead and Mentor Teams: Provide leadership and guidance to project teams, fostering collaboration and ensuring team members are aligned with project goals. Qualifications: Experience: Experience in project management, with a strong emphasis on cybersecurity projects. Proven track record of successfully managing large, complex projects in the Cybersecurity and Ecommerce sector. Education: Bachelors degree. Advanced degree or relevant certifications (PMP, CAPM, Prince2, CISA, CISM) are highly desirable. Cybersecurity Knowledge: Understanding of cybersecurity principles, practices, and technologies. Familiarity with regulatory requirements and industry standards (e.g., GDPR, PCI-DSS). Tools Hands on: JIRA, Confluence, Excel, GSuite. Communication: Excellent verbal and written communication skills, with the ability to convey complex technical information to non-technical stakeholders. Problem-Solving: Strong analytical and problem-solving skills with the ability to handle challenging situations and make informed decisions. Leadership: Proven leadership abilities, including experience in mentoring and guiding team members. Ability to inspire and motivate teams to achieve project goals.