646 Cisa Jobs - Page 3

TransUnion works with businesses and consumers to gather, analyze, and deliver critical information needed to build strong economies around the world. Protection of that information is critical to our customers and business. As part of our 2020 transformation journey, we became Global Audit & Advisory (GAA), formerly Internal Audit. As a Specialist III you will be part of the GAA team and be responsible for conducting Cybersecurity and IT audit engagements throughout the organization that support business objectives, best practices, and regulatory requirements. The incumbent will be responsible for the planning, execution, reporting, and follow-up on all audit engagements by participating on an audit team or at times independently leading engagements under the direction of GAA Management. This position will report directly to the Senior Lead and will work closely with other GAA Team Associates on key projects and initiatives as well as coordinate closely with our external auditors. The Global Audit & Advisory team is an independent and objective assurance and consulting activity that is guided by a philosophy of adding value to improve the operations of TU. GAA assists the organization in accomplishing its objectives by bringing a systematic and disciplined approach to evaluate and improve the effectiveness of the organizations risk management, control and governance processes. GAA collaborates with the Business Units, Functional leadership and their Associates in developing strong, professional and independent relationships to ensure a comprehensive understanding of the business to enable value added recommendations that improve efficiency and effectiveness. Perform detailed examinations of cybersecurity and IT practices and controls throughout the organization using an established assessment process and framework. The essential duties are as follows: Independently perform Information technology (IT) security reviews. Initiate, scope, plan, research and conduct IT controls assessments and audits. Lead and coordinate with process owners to initiate, scope, plan, and execute periodic controls assessments as part of the internal audit function, focusing on identifying risks by evaluating the design and operating effectiveness of internal controls. Actively support security audit initiatives by aligning audit procedures with cybersecurity frameworks (e. g. , NIST, ISO 27001 etc. ), conducting control walkthroughs, testing IT security and IT general and application controls, and assessing compliance with internal security policies. Document the results of audit procedures performed that support the conclusions reached. Prepare audit reports based on the adequacy and effectiveness of controls evaluated. Support external audits and regulatory examinations as needed. Analyze information security areas including ( but not limited to these ) governance and risk management, access and password controls, cloud security, cybersecurity, physical security, system security architecture and design, BCP and Disaster Recovery, network security, application and operations security, Incident Management, data migrations and system implementations etc. Lead engagement and communicate issues to process owners, ensuring understanding of risks and actions needed to remediate risks and subsequently track remediation activities. Cross train members of the Global Audit Team, including new hires and mentor junior IT staff. Continuously monitor emerging security trends and evolving threat landscapes through ongoing research and professional development. Insights gained are integrated into the audit universe to ensure risk assessments and audit planning remain current and aligned with the organization s security posture. Perform risk assessments and assist in the development of the annual audit plan. Participate in departmental initiatives, administrative matters, and special projects. Assist with other audit engagements as needed to broaden exposure across various risk areas and support the timely execution of the overall audit plan. Impact Youll Make: 6 - 10 years of experience in an IT/Security Audit and Assessment, or Information Security Technical, Management and/or Governance role. Bachelor s or Master s degree in computer science/information technology, management information systems or related field. Industry certification such as CISSP, CISA, CISM, CEH and/or CIA required. Experience with Cloud Security audits (AWS, Azure, GCP). Knowledge of data protection laws and industry standards. Familiarity with GRC platforms (e. g. , AuditBoard, Onspring, Archer). Demonstrated in-depth knowledge of concepts, best practices and controls in a breadth of Information Security areas/domains. These include governance & risk management, access control, cybersecurity, physical security, security architecture and design, business continuity/disaster recovery, network security, application and operations security and compliance/incident management. Demonstrated ability to understand complex technologies, business processes, regulations and emerging risks. Strong technical and/or IT and Security audit background with practical knowledge of a wide variety of technologies including server infrastructure and operating systems, network and web infrastructures, database architecture, vulnerability and penetration testing assessment and Intrusion Detection/Prevention Systems. Good understanding of SOX legislation and IT and Security frameworks including COSO and COBIT. Self-starter with the ability to manage and prioritize responsibilities. Team player with proven skills in influencing people without having direct management authority. Self-driven performer with established skills in tracking self and project performance, anticipating and recognizing problems and escalating issues appropriately. Strong ability to interact and communicate both written and verbally with people at all levels, both technical and non-technical, in a dynamic environment where interactions are not always in person. Strong risk analysis and problem solving skills. Must be flexible to ensure assessments are performed timely and manage multiple assessments simultaneously. This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week. TransUnion Job Title Consultant, Audit and Advisory

The Staff Information Security Analyst will be responsible for identifying and defining requirements and engineering solutions to solve the existing threats and security issues of a global organization. This role will initial focus heavily on data protection , leading advancements in data loss prevention, and changing how AMD protects data going forward. The Person: The ideal candidate will possess strong multi-tasking skills and enthusiasm for details and should think one step ahead of cyber-criminals. They should be well prepared to thrive in a fast-paced environment, possessing strong interpersonal and communication skills. You will use your critical thinking and sense of ownership to focus on long term quality IT security solutions. Are you self-motivated and a team player with proven ability to deliver end-to-end solutions in a high-tech and fast-moving industry? If so, this is a great career opportunity! Key Responsibilities: The Staff Information Security Analyst responsibilities include, but are not limited to: Building and growing AMD s data security capabilities to keep AMD data secure regardless of location. Identifying, monitoring, and defining the requirements to reduce the overall risk to AMD data, systems, and infrastructure. Implementing hardware and software solutions to help mitigate a wide variety of information security risks. Collaborating with other IT teams to align initiatives across the company. Preferred Experience: Minimum of 5 years of IT security related experience. Professional experience as a Security Engineer with demonstrated successful leadership and delivery of data protection solutions. Experience as a customer-facing technical lead , including working with both management-level and development teams. Senior/advanced related IT or security experience working in one or more Security Domains. Experience with CASB, DLP, CSPM, Web Proxy. Hands on experience with Data Classification policies and technologies to address data leakage. Working knowledge of network topology, protocols, components, and OSI model, and IAM technologies (e.g., PKI, Oauth, OIDC, SAML) Understanding of NIST Cyber Security Framework standard and requirements and ability to apply them to an enterprise environment. Experience with infrastructure operations and processes associated with IT service management in an Enterprise-level organization. Experience with cloud services (AWS, Google, Microsoft) and associated networking, as well as collaboration and integration with O365 products. Hands on experience with Enterprise Linux platforms. Experience with EDR solutions is a plus. DLP, CASB Nice to have: Client proxy, SIEM, File and Removable Media Protection [FRP] It would be nice if you also had: Experience with scripting language (python, PowerShell, etc.). Strong documentation skills. Academic Credentials: BS CS preferred but not required. CISSP, CISA, CISM, CCSK

Summary The Information Security & Compliance team is looking for an a highly skilled and experienced Business Information Security Expert to join our team. The successful candidate will be responsible for ensuring Information Security Compliance across our organization. This role requires a deep understanding of information security principles, risk management, and regulatory requirements, including GDPR and GxP. About the Role Your responsibilities include, but not limited to: Develop, implement, and maintain information security policies, procedures, and guidelines to ensure compliance with industry standards and regulatory requirements. Conduct regular security assessments, audits, and risk analyses to identify vulnerabilities and ensure the effectiveness of security controls. Collaborate with various departments to ensure that information security requirements are integrated into business processes and projects. Provide expert guidance on information security best practices and emerging threats to senior management and other stakeholders. Lead incident response efforts and coordinate with internal and external teams to address security breaches and mitigate risks. Develop and deliver information security training and awareness programs to employees at all levels. Conduct regular Risk Committee Meetings and drive accountability & remediations. Conduct Annual Risk Identification Workshops to identify Risks, assign ownerships and gain agreements on Remediation Plans and target dates. Stay up-to-date with the latest developments in information security, GDPR, and GxP regulatory requirements to ensure the organization remains compliant and secure. Role Requirements: Bachelors or Masters degree in Computer Science, Information Technology, or a related field. 12 - 16 years of experience in information security, with a focus on compliance, risk management, GDPR, and GxP. Infrastructure expertise Minimum of one certification among CISSP, CISA, CCSP. Strong knowledge of information security frameworks, standards, and regulations (e.g., ISO 27001, NIST, GDPR, HIPAA). Excellent analytical, problem-solving, and decision-making skills. Strong communication and interpersonal skills, with the ability to effectively convey complex security concepts to non-technical stakeholders. Proven ability to work independently and as part of a team in a fast-paced, dynamic environment. Preferred Skills: Experience with security tools and technologies such as SIEM, DLP, IDS/IPS, and vulnerability management. Knowledge of cloud security principles and best practices. Experience in conducting security assessments and audits. Familiarity with data privacy regulations and requirements.

for an IT Senior Compliance Manager who can overlook and ensure Application Compliance, IT Risk mitigation & Issue management. How you ll make an impact: Engaging the third party and driving the ITGC operations across P&A (Platforms and Applications). Review that all the JSOX Controls are executed as per the standards and the required quality is being adhered to by the third party. Defining the key attributes needed to perform the controls effectively. Planning and ensuring that all the audits are completed in a timely manner in Coordination with the Control performers. Liaison between the P&A Application managers and the Control performers. Support Framework transition and optimization. Work out opportunities for efficiency improvements, automated controls, aggregation of controls, etc. Work out concept of internalization of Control Owner. Defining the KPI and come out with adequate measures to reduce the outsourcing costs without reducing the security risks to the applications. Supporting non JSOX audits and defining clear plans with timelines for all identified gaps, working on mitigations. Supporting non JSOX compliance maturity enhancements across P&A. Responsible to ensure compliance with applicable external and internal regulations, procedures, and guidelines. Living Hitachi Energy s core values of safety and integrity, which means taking responsibility for your own actions while caring for your colleagues and the business. Your background: The candidate should have more than 20 years professional experience and more than 15 years in Internal audits The candidate should be a CISA and ISO 27001 Certified The candidate should have extensive experience with compliance service The candidate should have extensive experience in dealing with diverse technological audits The candidate should have experience in dealing with regulatory audits and also have a track record of completing SOX audits testing on time The candidate should have experience in managing large, global and diverse teams include handling third parties The candidate should have worked with senior management, provided and discussed reporting Proficiency in both spoken & written English language is required. .

Title Zero Trust and IAM Eng II Region APAC Country India What we look for 5+ years experience implementing enterprise Identity and Access Management (IAM), Privileged Access Management (PAM) solutions (e. g. Saviynt, Okta, SailPoint, Ping Identity, Omada, Microsoft Identity Manager, Beyond Trust, CyberArk or equivalent IAM solution) in client environments. Familiarity with Zero Trust Network Architecture is desirable Familiarity with service now Ticketing and CMDB is desirable Design, build, operate and automate security solutions and processes to protect the integrity of the organizations networks, systems, applications and data. Experience developing technical strategies, architectures, and roadmaps. Outstanding communication and presentation skills. Able to articulate complex, technical concepts to non-technical audiences. Respond to security incidents, including data breaches, and coordinate with other IT teams to mitigate the impact of any security breaches. Preferred Experience hardening security for Active Directory, Windows, *nix OS. Experience with IDaaS providers such as Microsoft, Okta, Ping Identity, Google Cloud Identity Experience with cloud architectures particularly Azure, AWS, GCP native IAM controls. Experience with Identity Governance processes and solutions such as Saviynt, SailPoint, Ping Identity or equivalent. Experience with Microsoft 365, Active Directory, SAML, OIDC Knowledge of Applied Cryptography and PKI Manage and network security infrastructure Firewall configuration and rule management Cloud proxies services Network Access control Employee and Partner remote access VPN services Cloud based Web application firewall Development knowledge e. g. Python, Java, C#, . NET, Web Services (SOAP/REST/RESTful, APIs), Shell programming/scripting Preferred Network Infrastructure Security background in both on prem physical security components (firewalls, IDS/IPS , remote access and internet proxies) as well as cloud security services (Zscaler , Azure, GCP). Strong experience of working on SIEM tools like Splunk to analyse logs and correlate events. Experience with User Behaviour Analytics Workday, SAP, Salesforce Experience with MDM capabilities such as Intune or AirWatch Understanding of trends and regulations to ensure effectiveness and compliance with all regulations and frameworks (NIST, HIPPA-HITECH, HITRUST, PCI, GDPR) Certifications CISSP or SANS, GIAC, CIMP, CEH, CISM or CISA certifications is a plus OKTA - Professional or Consultant is a plus Google/AWS/Microsoft Professional Cloud Architect is a plus Johnson Controls International plc. is an equal employment opportunity and affirmative action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, genetic information, status as a qualified individual with a disability, or any other characteristic protected by law. For more information, please view EEO is the Law . If you are an individual with a disability and you require an accommodation during the application process, please visit www. johnsoncontrols. com/careers .

Colliers is looking to hire a cyber security analyst with expertise and experience in data analysis and reporting for cyber risk and compliance. Coming from an IT Security in infrastructure technical background, the right candidate will be able to work across multiple technical and non-technical teams in the Colliers regional environment and seek to take the next steps of their career into cyber security analysis across Asia Pacific. Role responsibilities Develop and complete technical cyber risk and compliance assessments followed by appropriate treatment plans. Prepare detailed compliance reports on specific cyber security risks. Support internal stakeholders with their Information Security queries. Coordination of cyber security related project work Conduct periodic supplier risk assessments against supply chain risk. Administering periodic online training in cyber security. Assist the Regional Director Cyber Risk and Compliance in completing customer facing cyber risk reviews. Keeping up to date on major cyber industry news relevant to Colliers and bringing relevant information to the wider IT team. Other ad hoc queries and tasks related to cyber security at Colliers

You are a strategic thinker passionate about driving solutions in financial analysis. You have found the right team. As a Control Manager Associate in our Finance team, you will spend each day defining, refining and delivering set goals for our firm Job Responsibilities Performing an independent review and validation of external reporting processes and data to mitigate the risk of external reporting errors. Possessing strong auditing skills, a robust understanding of internal control systems within a financial institution, and knowledge of consumer businesses and products. Assisting in the development, execution, and refinement of new and existing Control Reporting. Maintaining the integrity of review documentation and providing it when requested for various reviews, such as SCG QA, Internal Audit Review, and External Audit Requests. Assisting in ongoing implementation and monitoring of Control Programs impacting CCB Finance, such as Intelligent Solution Standards, Model/Estimations Governance, and User Tools. Monitoring adherence to CCB and Firmwide Policies and Standards, maintaining the integrity of program management/reporting documentation, and providing it when requested for various reviews. Contributing to the development and enhancement of the business control environment through the execution of the Control and Operational Risk Evaluation (CORE). Required qualifications, capabilities, and skills Minimum 5 years experience in Auditing, Accounting, Internal Control and/or Finance Bachelor s in accounting or Finance. Strong communication (written and verbal) and attention to detail; demonstrated influencing skills; interact comfortably with staff at all levels Strong quantitative and qualitative analytical skills; ability to synthesize data from many sources, design and draw persuasive conclusions for plans A willingness to challenge conventional thinking and assumptions and to constructively dissent when appropriate. Strong working knowledge of Microsoft Office applications Ability to work in an evolving environment, manage multiple projects and support a growing business Preferred qualifications, capabilities, and skills Knowledge of Tableau and Alteryx Big Four public accounting experience and /or CA / CISA / CPA/CIA/ MBA certification preferred, internal audit / ITGC / automated controls testing experience required

Overview Omnicom Global Solutions is an integral part of Omnicom Group, a leading global marketing and corporate communications company. Omnicom’s branded networks and numerous specialty firms provide advertising, strategic media planning and buying, digital and interactive marketing, direct and promotional marketing, public relations, and other specialty communications services to over 5,000 clients in more than 70 countries. OGS India plays a critical role for our group companies and global agencies by providing stellar products, solutions, and services across Creative Services, Technology, Marketing Science (Data & Analytics), Advanced Analytics, Market Research, Business Support Services, Media Services, and Project Management. With over 4000 talented colleagues in India, we are growing rapidly and are looking for professionals like you to help build the next chapter of our journey. Let’s build this together! Responsibilities Operate day-to-day Information Security Governance, Risk, and Compliance (GRC) activities across the organization. Support alignment and implementation of security standards including ISO 27001, PCI, NIST, and TISAX. Assist in the execution of Information Security Risk Management policies and procedures. Collaborate on internal and external audit activities, and track remediation efforts to closure. Support documentation, reporting, and evidence gathering for compliance and regulatory assessments. Contribute to the continuous improvement of governance processes, control effectiveness, and risk posture. Coordinate with business units and IT teams to ensure governance standards are understood and adhered to. Qualifications 3–5 years of experience in information security governance, risk, compliance, or audit. Working knowledge of ISO 27001, PCI-DSS, NIST, TISAX, or other major regulatory frameworks. Experience with policy implementation, risk assessment methodologies, and audit coordination. Ability to evaluate and articulate compliance requirements to technical and non-technical teams. Strong documentation, analytical, and reporting skills with attention to detail. Excellent interpersonal and communication skills to work cross-functionally. Preferred Qualifications Certifications such as ISO 27001 Lead Implementer/Auditor, CISA, or similar. Experience with GRC platforms and tools. Exposure to vendor risk management and compliance monitoring.

Skills: AI, API AWS, Azure, GCP, Go, Java, JavaScript, Cryptography, Graph QL, Palo Alto Python Threat Vulnerability Bachelor's Degree in Computer Science, Information Systems, Business Administration or other related field Certification may be required for specific functions 6-9 years of information security experience Experience with gathering functional requirements, deployment of information security tools, and data analysis In-depth experience with desktop software and office automation tools Experience with information security risk management and process improvement Preferred Qualifications: Experience with threat modeling frameworks, attack vectors and vulnerability analysis: CAPEC, ATT&CK, STRIDE. Experience with application security controls (Web, API, Mobile, AI). Experience with common information security management and application frameworks: NIST 800-53, CSF, OWASP ASVS. Experience with Application Security design and DevSecOps Full stack knowledge of application architectures including: Single Page Applications, REST APIs, SOAP APIs, Mobile Applications. Experience with Java, Javascript and mobile application development. Knowledge or familiarity with database architectures including Oracle, SQL, DB2 and NoSQL Databases Experience with Cloud security, architecture, design, implementation, and operations Exposure to IAM Controls (OAuth 2.0, OIDC, JWT) Strong familiarity with Cryptography Controls (Data at rest, in motion). CISSP, CISM, CSSLP, CISA, CRISC, OSCP.

Cyber and 3rd party risk analyst About Amgen Amgen harnesses the best of biology and technology to fight the world’s toughest diseases, and make people’s lives easier, fuller and longer. We discover, develop, manufacture and deliver innovative medicines to help millions of patients. Amgen helped establish the biotechnology industry more than 40 years ago and remains on the cutting-edge of innovation, using technology and human genetic data to push beyond what’s known today. What you will do Role Description: The role is responsible for identifying, analyzing, and mitigating IT-related risks to the organization. This role will involve working closely with various departments to ensure that risk controls are in place, policies are adhered to, and security standards are met. The IT Risk Analyst will assist in developing and maintaining risk management frameworks, performing assessments, and supporting regulatory compliance efforts. Roles & Responsibilities: Risk Identification and Assessment : Conduct risk assessments to identify vulnerabilities in IT systems, processes, and policies. Assist in the identification and evaluation of risks associated with third-party vendors and partners. Maintain the IT risk register, documenting risks, issues, and remediation actions. Risk Mitigation and Monitoring : Recommend risk mitigation strategies and implement risk management controls across IT infrastructure. Collaborate with IT, cybersecurity, and business teams to track and resolve identified risks and vulnerabilities. Monitor and report on the effectiveness of existing IT risk controls and recommend enhancements as needed. Compliance and Regulatory Support: Ensure compliance with relevant industry standards and regulatory requirements (e.g., GDPR, SOX, PCI-DSS, NIST). Assist in the preparation for audits by internal and external parties, providing documentation and evidence of IT risk management practices. Support the development and implementation of IT governance, risk, and compliance frameworks. Vendor Risk Management : Conduct vendor risk assessments, ensuring third-party services and products align with internal risk and security policies. Regularly review vendor performance and risk exposure, working with procurement and legal teams as necessary. What we expect of you Basic Qualifications and Experience: Education : Bachelor’s degree in information technology, Cybersecurity, Risk Management, or a related field. Certifications such as CRISC (Certified in Risk and Information Systems Control), CISA (Certified Information Systems Auditor), or CISSP (Certified Information Systems Security Professional) are highly desirable. Experience: 2 - 4 years of experience in IT risk management, IT auditing, or information security. Hands-on experience with risk management tools and frameworks (e.g., ISO 27001, NIST, COBIT). Skills and Competencies : Strong understanding of IT infrastructure, systems, and security best practices. Ability to assess technical and business risk related to information systems. Excellent problem-solving, analytical, and communication skills. Ability to communicate complex risk concepts to non-technical stakeholders. Ability to assess and interpret security-related clauses in third-party contracts, such as Security Requirements Schedules (SRS) Familiarity with regulatory frameworks and compliance standards (e.g., GDPR, HIPAA, SOX, PCI-DSS). This role involves second shifts2pm-11pm IST Technical Knowledge : Proficiency with risk management tools, GRC (Governance, Risk, and Compliance) software, and security incident management tools. Experience with security controls related to networks, databases, and cloud environments. Soft Skills: Excellent analytical and troubleshooting skills Strong verbal and written communication skills Ability to work effectively with global, virtual teams High degree of initiative and self-motivation Ability to manage multiple priorities successfully Team oriented, with a focus on achieving team goals Strong presentation and public speaking skills Collaboration across global teams What you can expect of us As we work to develop treatments that take care of others, we also work to care for your professional and personal growth and well-being. From our competitive benefits to our collaborative culture, we’ll support your journey every step of the way. In addition to the base salary, Amgen offers competitive and comprehensive Total Rewards Plans that are aligned with local industry standards. Apply now for a career that defies imagination Objects in your future are closer than they appear. Join us. careers.amgen.com As an organization dedicated to improving the quality of life for people around the world, Amgen fosters an inclusive environment of diverse, ethical, committed and highly accomplished people who respect each other and live the Amgen values to continue advancing science to serve patients. Together, we compete in the fight against serious disease. Amgen is an Equal Opportunity employer and will consider all qualified applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability status, or any other basis protected by applicable law. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Job ID: 199874 Required Travel :Minimal Managerial - No LocationIndia- Pune (Amdocs Site) Who are we Amdocs helps those who build the future to make it amazing. With our market-leading portfolio of software products and services, we unlock our customers innovative potential, empowering them to provide next-generation communication and media experiences for both the individual end user and enterprise customers. Our employees around the globe are here to accelerate service providers migration to the cloud, enable them to differentiate in the 5G era, and digitalize and automate their operations. Listed on the NASDAQ Global Select Market, Amdocs had revenue of $5.00 billion in fiscal 2024. For more information, visit www.amdocs.com In one sentence We are seeking a highly skilled and experienced Senior Governance, Risk, and Compliance (GRC) Specialist to join our dynamic team. The ideal candidate will have a strong background in GRC, with a proven track record of managing and implementing comprehensive risk management and compliance programs, particularly within the EMEA (Europe, Middle East, and Africa) and IMEA (India, Middle East, and Africa) regions. What will your job look like Develop and maintain governance frameworks, policies, and procedures. Ensure compliance with industry standards, regulations, and contractual obligations. Identify, assess, and prioritize security risks, implementing mitigation strategies. Conduct regular risk assessments, audits, and maintain risk registers. Ensure adherence to GDPR, CRA, and other relevant security regulations. Monitor and enforce security compliance across EMEA and IMEA regions. Develop and deliver compliance training programs for employees. Prepare and present security reports to senior management and stakeholders. Collaborate with internal teams and liaise with external auditors and regulators. Communicate security risks and mitigation strategies effectively to stakeholders. All you need is... Bachelor's degree in Business Administration, or a related field. Professional certification (e.g., CISA, CRISC, CISSP) is preferred. Minimum of 6 years of experience in governance, risk management, and compliance. Strong knowledge of relevant laws, regulations, and industry standards, particularly in the EMEA and IMEA regions. Strong understanding of NIST CSF, CIS, ISO 27001, PCI DSS, and Data Protection frameworks. Excellent analytical, problem-solving, and decision-making skills. Strong communication and interpersonal skills, with experience in defending and explaining security risks and mitigations to customers and stakeholders. Ability to work independently and as part of a team. Proficiency in GRC software and tools. Why you will love this job: You will be able to demonstrates an understanding of key business drivers and ensures strategic directions are followed and the organization succeeds You will be able to gathers relevant data, identifies trends and root causes, and draws logical conclusions to develop solutions You will have ability to assess details, systems and other factors as part of a single and comprehensive picture We are a dynamic, multi-cultural organization that constantly innovates and empowers our employees to grow. Our people our passionate, daring, and phenomenal teammates that stand by each other with a dedication to creating a diverse, inclusive workplace! We offer a wide range of stellar benefits including health, dental, vision, and life insurance as well as paid time off, sick time, and parental leave Amdocs is an equal opportunity employer. We welcome applicants from all backgrounds and are committed to fostering a diverse and inclusive workforce

Location Bangalore : IT SOX, Risk Management, Audits, Business Continuity Planning Not Ready to Apply Join our talent pool and we'll reach out when a job fits your skills.

About GlobalFoundries: GlobalFoundries is a leading full-service semiconductor foundry providing a unique combination of design, development, and fabrication services to some of the world s most inspired technology companies. With a global manufacturing footprint spanning three continents, GlobalFoundries makes possible the technologies and systems that transform industries and give customers the power to shape their markets. For more information, visit www.gf.com. Summary of Role: We are looking for a skilled SAP Auditor to join our team for a significant multi-year SAP implementation project. The ideal candidate will play a crucial role in ensuring compliance across various financial and operational areas, with a particular emphasis on ITAC, Key Reports, and SOC Reports. A qualified candidate will have 6 to 7 years of experience in accounting or auditing. Experience testing financial statement controls is preferred . Essential Responsibilities: C oordinat e the day-to-day management of the SAP implementation compliance from planning through scheduling, preparing, execution, tracking, and reporting. This includes scoping and risk assessment, documenti ng and designing processes and controls, testing, deficiency evaluation, and remediation tracking. Work directly with business process owners on the implementation and maintenance of controls, especially in software transformation . This includes business process control design, policies, procedures, documentation, evidence evaluation, and system enhancements. Coordinate compliance program testing with co-sourced team members to ensure sufficient documentation and adequate design and testing of controls for assigned critical processes and accounts. Perform testing of controls for IT Automated Controls (ITAC), Information Provided by Entity (IPE) reports, and SOC 1 Reviews: test of design and operating effectiveness. A ssist team members to execute internal control processes for Business Process IT Automated Controls (ITAC) for S/4 Hana and Ariba, Information Provided by Entity (IPE), SOC 1 Reviews, and SOD analysis using SAP GRC Access Controls. Ensure the timely execution of the compliance program relating to IT Automated Controls (ITAC), Information Provided by Entity (IPE) reports, and SOC 1 Reviews. Ensure the timely execution of identifying controls relating to the transformation of software. Maximize use of Internal Control systems, AuditBoard , to enhance efficiency of the compliance program. Knowledge and experience around business process controls and evaluation are a must . Resolve internal control issues and deficiencies through collaboration with process and control owners. Monitor management s remediation efforts to closure, including review of supporting evidence and retesting. Liaise with external auditors and proactively coordinate audits. Identify areas for process improvement. Participate in special projects and initiatives as needed. Other Responsibilities: Perform all activities in a safe and responsible manner and support all Environmental, Health, Safety & Security requirements and programs. Required Qualifications: 6 to 7 years of experience, including Big 4 and/or experience with SOX 404 and S/4 HANA. Bachelor s Degree in Accounting/Finance or similar degree (CPA/CA and/or CIA and CISA certifications preferable). Knowledge of S/4 business process automated controls, including key reports. Knowledge of SAP GRC Access Controls, S/ 4 and Ariba user access concepts, and Ariba business process automated controls. Knowledge of Software as a Service industry and SOC Report Testing is preferable. Strong quantitative and qualitative analytical skills - significant experience in Microsoft applications; Workday, SAP, and AuditBoard experience is a plus. Thrives in a fast-paced environment and welcomes the opportunity to make a difference in a growing organization. Takes personal pride in the accuracy of their work and treats business partners with the utmost care. Strong process, systems, and controls understanding. Language Fluency - English (Written & Verbal). Travel - Up to 4 0%. Preferred Qualifications: Excellent organizational, verbal, and written communication skills. Highly detail-oriented, with the ability to multi-task and strong project management skills. Ability to operate independently and as part of a larger functional team. GlobalFoundries is an equal opportunity employer, cultivating a diverse and inclusive workforce. We believe having a multicultural workplace enhances productivity, efficiency and innovation whilst our employees feel truly respected, valued and heard. As an affirmative employer, all qualified applicants are considered for employment regardless of age, ethnicity, marital status, citizenship, race, religion, political affiliation, gender, sexual orientation and medical and/or physical abilities. All offers of employment with GlobalFoundries are conditioned upon the successful completion of background checks, medical screenings as applicable and subject to the respective local laws and regulations. To ensure that we maintain a safe and healthy workplace for our GlobalFoundries employees, please note that offered candidates who have applied for jobs in India will have to be fully vaccinated prior to their targeted start date. For new hires, the appointment is contingent upon the provision of a copy of their COVID-19 vaccination document, subject to any written request for medical or religious accommodation. Information about our benefits you can find here: https: / / gf.com / about-us / careers / opportunities-asia

Management Level Senior Manager & Summary At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively. Why PWC At PwC , you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purposeled and valuesdriven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other. Learn more about us . At PwC , we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm s growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations. JOB DESCRIPTION Purpose of the Job /Role Lead/Manage/Perform Security Reviews which includes Cloud Security and Data Security , Threat and Vulnerability Management , Identity and access management , Technology controls, process controls, and governance, risk and compliance elements , IT General Controls. Roles and Responsibilities Should manage/ oversee/execute engagements around Cyber Risk and Maturity Assessments, Cyber Strategy, Cloud Security, Data Protection, Third Party Risk Management, Enterprise Architecture reviews. Knowledge on NIST CSF, ISO 27001, ISO 27701, ISO 27017, DPDP Act Experience in financial sector companies like banks, NBFCs and FinTechs Certifications CISA/CISM/ISO will be added advantage Mandatory Skill Sets Strategy and Governance Preferred Skill Sets Cyber Strategy Years of experience required 10 years Education Qualification Minimum Qualification BE/ BTech Minimum 7 years for Managers Postgraduates in any stream would be preferred (not mandatory) Prior Big 4 experience would be an added advantage Experience in IT Risk Advisory/ Assurance for varied industry segments preferred Excellent communication skills both written and oral Education Degrees/Field of Study required Bachelor of Technology, Master of Business Administration Degrees/Field of Study preferred Required Skills Cyber Risks Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Analytical Thinking, Azure Data Factory, Coaching and Feedback, Communication, Creativity, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Embracing Change, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Influence, Intellectual Curiosity, Learning Agility, Managed Services, Optimism, Privacy Compliance {+ 16 more} Travel Requirements Government Clearance Required?

: Job Title - Information Security Analyst, Associate Location - Bangalore, India Role Description Information Security Risk Analyst - TDI CSO The Technology Data Innovation (TDI) Chief Security Office (CSO) comprises both Corporate Security and Information Security. We run security operations globally to protect the banks people, infrastructure, processes, and information. CSO Governance and Control conducts proactive Information Security (IS) controls assess ability and applicability reviews for the emerging technologies to design adaptable IS assessment framework to appropriately assess the security requirement for relevant applications and infrastructures. The Information Security Analyst role holder is responsible for supporting the execution of the Information Security strategy. The Information Security Analyst provides data and analysis to measure the effectiveness of Information Security controls across group wide products and services. The Information Security Analyst identifies and evaluates potential areas of Information Security threats by assessing the probability and impact and facilitates feedback for mitigation. Roles within Information Security may cover one or more areas of specialty, e.g. Identity & Access Management (which may include, for example, authentication; access management & control; recertification etc.); Information Security (IS) Operations (which may for example include, cyber threat operations; cyber forensics, protection against data leakage etc.) and IS Technology (which may include IS architecture, IS engineering, cryptographic services etc.) What we'll offer you As part of our flexible scheme, here are some of the benefits that you will enjoy. Best in class leave policy. Gender neutral parental leaves 100% reimbursement under childcare assistance benefit (gender neutral) Sponsorship for Industry relevant certifications and education Employee Assistance Program for you and your family members Comprehensive Hospitalization Insurance for you and your dependents Accident and Term life Insurance Complementary Health screening for 35 yrs. and above Your key responsibilities Review Risk Assessment (Application/Technical Risk profile) and Assurance spot checks for Compliance evaluation of IS controls (e.g., IS/Cloud/SOx/MAS/Client Access Management/other regulatory controls) Analysis and verification of compliance issues. Analyze and identify root causes. Collect and review evidence (e.g., from de-centrally managed applications) Communicates openly with internal stakeholders; keeps them informed of potential findings and escalate problems/delays accordingly. Acts as a competent partner to stakeholders in the closure process of findings and remediation activities. Provide and prepare data / reports for stakeholders and management communication. Conduct application risk assessments and support business stakeholders to determine the CIA ratings. Focus on utilizing the capacity in an efficient and effective manner. Proactively develop and maintain professional working relationships with the CSO function and stakeholders Represent the process and provide inputs / suggestion with any challenges faced to improve the quality. Improvement and documentation of operational tracking activities Raise Business to Central Solutions run by other CSO teams. Your skills and experience Work experience in the Information Technology area / Information security area Practical experience in Governance or Compliance Monitoring beneficial. Knowledge about basic principles of Risk, Identity and Access Management beneficial Certifications in ISO 27001 or on information security (e.g., CISSP, CISA) would be beneficial. Effective communication and strong interpersonal skills in English (verbal and written). German language would be beneficial. Positive attitude and proactive behavior with diligence and precision Self-driven, eager to learn, well organized collaborator to integrate with heterogeneous teams. Structured way of thinking and working with good analytical and critical thinking skills Ability to monitor, track and clearly communicate progress, escalate issues when appropriate, not shunning to address issues to higher management levels. Experience in Excel (advanced), added advantage to languages such as Python/VB/SQL etc., How we'll support you Training and development to help you excel in your career. Coaching and support from experts in your team A culture of continuous learning to aid progression. A range of flexible benefits that you can tailor to suit your needs. About us and our teams Please visit our company website for further information: https://www.db.com/company/company.htm We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively. Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group. We welcome applications from all people and promote a positive, fair and inclusive work environment.

: Job Title - Information Security Analyst, NCT Location - Pune, India Role Description Information Security Risk Analyst - TDI CSO The Technology Data Innovation (TDI) Chief Security Office (CSO) comprises both Corporate Security and Information Security. We run security operations globally to protect the banks people, infrastructure, processes, and information. CSO Governance and Control conducts proactive Information Security (IS) controls assess ability and applicability reviews for the emerging technologies to design adaptable IS assessment framework to appropriately assess the security requirement for relevant applications and infrastructures. The Information Security Analyst role holder is responsible for supporting the execution of the Information Security strategy. The Information Security Analyst provides data and analysis to measure the effectiveness of Information Security controls across group wide products and services. The Information Security Analyst identifies and evaluates potential areas of Information Security threats by assessing the probability and impact and facilitates feedback for mitigation. Roles within Information Security may cover one or more areas of specialty, e.g. Identity & Access Management (which may include, for example, authentication; access management & control; recertification etc.); Information Security (IS) Operations (which may for example include, cyber threat operations; cyber forensics, protection against data leakage etc.) and IS Technology (which may include IS architecture, IS engineering, cryptographic services etc.) What we'll offer you As part of our flexible scheme, here are some of the benefits that you will enjoy. Best in class leave policy. Gender neutral parental leaves 100% reimbursement under childcare assistance benefit (gender neutral) Sponsorship for Industry relevant certifications and education Employee Assistance Program for you and your family members Comprehensive Hospitalization Insurance for you and your dependents Accident and Term life Insurance Complementary Health screening for 35 yrs. and above Your key responsibilities Review Risk Assessment (Application/Technical Risk profile) and Assurance spot checks for Compliance evaluation of IS controls (e.g., IS/Cloud/SOx/MAS/Client Access Management/other regulatory controls) Analysis and verification of compliance issues. Analyze and identify root causes. Collect and review evidence (e.g., from de-centrally managed applications) Communicates openly with internal stakeholders; keeps them informed of potential findings and escalate problems/delays accordingly. Acts as a competent partner to stakeholders in the closure process of findings and remediation activities. Provide and prepare data / reports for stakeholders and management communication. Conduct application risk assessments and support business stakeholders to determine the CIA ratings. Focus on utilizing the capacity in an efficient and effective manner. Proactively develop and maintain professional working relationships with the CSO function and stakeholders Represent the process and provide inputs / suggestion with any challenges faced to improve the quality. Improvement and documentation of operational tracking activities Raise Business to Central Solutions run by other CSO teams. Your skills and experience Work experience in the Information Technology area / Information security area Practical experience in Governance or Compliance Monitoring beneficial. Knowledge about basic principles of Risk, Identity and Access Management beneficial Certifications in ISO 27001 or on information security (e.g., CISSP, CISA) would be beneficial. Effective communication and strong interpersonal skills in English (verbal and written). German language would be beneficial. Positive attitude and proactive behavior with diligence and precision Self-driven, eager to learn, well organized collaborator to integrate with heterogeneous teams. Structured way of thinking and working with good analytical and critical thinking skills Ability to monitor, track and clearly communicate progress, escalate issues when appropriate, not shunning to address issues to higher management levels. Experience in Excel (advanced), added advantage to languages such as Python/VB/SQL etc., How we'll support you Training and development to help you excel in your career. Coaching and support from experts in your team A culture of continuous learning to aid progression. A range of flexible benefits that you can tailor to suit your needs. About us and our teams Please visit our company website for further information: https://www.db.com/company/company.htm We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively. Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group. We welcome applications from all people and promote a positive, fair and inclusive work environment.

We are looking for a skilled SAP Auditor to join our team for a significant multi-year SAP implementation project. The ideal candidate will play a crucial role in ensuring compliance across various financial and operational areas, with a particular emphasis on ITAC, Key Reports, and SOC Reports. A qualified candidate will have 6 to 7 years of experience in accounting or auditing. Experience testing financial statement controls is preferred . Essential Responsibilities: C oordinat e the day-to-day management of the SAP implementation compliance from planning through scheduling, preparing, execution, tracking, and reporting. This includes scoping and risk assessment, documenti ng and designing processes and controls, testing, deficiency evaluation, and remediation tracking. Work directly with business process owners on the implementation and maintenance of controls, especially in software transformation . This includes business process control design, policies, procedures, documentation, evidence evaluation, and system enhancements. Coordinate compliance program testing with co-sourced team members to ensure sufficient documentation and adequate design and testing of controls for assigned critical processes and accounts. Perform testing of controls for IT Automated Controls (ITAC), Information Provided by Entity (IPE) reports, and SOC 1 Reviews: test of design and operating effectiveness. A ssist team members to execute internal control processes for Business Process IT Automated Controls (ITAC) for S/4 Hana and Ariba, Information Provided by Entity (IPE), SOC 1 Reviews, and SOD analysis using SAP GRC Access Controls. Ensure the timely execution of the compliance program relating to IT Automated Controls (ITAC), Information Provided by Entity (IPE) reports, and SOC 1 Reviews. Ensure the timely execution of identifying controls relating to the transformation of software. Maximize use of Internal Control systems, AuditBoard , to enhance efficiency of the compliance program. Knowledge and experience around business process controls and evaluation are a must . Resolve internal control issues and deficiencies through collaboration with process and control owners. Monitor management s remediation efforts to closure, including review of supporting evidence and retesting. Liaise with external auditors and proactively coordinate audits. Identify areas for process improvement. Participate in special projects and initiatives as needed. Other Responsibilities: Perform all activities in a safe and responsible manner and support all Environmental, Health, Safety & Security requirements and programs. Required Qualifications: 6 to 7 years of experience, including Big 4 and/or experience with SOX 404 and S/4 HANA. bachelors Degree in Accounting/Finance or similar degree (CPA/CA and/or CIA and CISA certifications preferable). Knowledge of S/4 business process automated controls, including key reports. Knowledge of SAP GRC Access Controls, S/ 4 and Ariba user access concepts, and Ariba business process automated controls. Knowledge of Software as a Service industry and SOC Report Testing is preferable. Strong quantitative and qualitative analytical skills - significant experience in Microsoft applications; Workday, SAP, and AuditBoard experience is a plus. Thrives in a fast-paced environment and welcomes the opportunity to make a difference in a growing organization. Takes personal pride in the accuracy of their work and treats business partners with the utmost care. Strong process, systems, and controls understanding. Language Fluency - English (Written & Verbal). Travel - Up to 4 0%. Preferred Qualifications: Excellent organizational, verbal, and written communication skills. Highly detail-oriented, with the ability to multi-task and strong project management skills. Ability to operate independently and as part of a larger functional team.

Seniors are project team members who will be involved in conducting process consulting/ internal audit/ risk consulting and execution of other solutions of GRCS Seniors may play the role of team leader on some engagements with 1-3 team members reporting to them for the project. In such cases seniors shall have responsibility of reviewing the work done (Deliverables) by the team members Interact with the client representatives for the ongoing requirements of the project Consistently deliver quality client services and take charge of the project area assigned to him/her Monitor progress, manage risk and verify key stakeholders are kept informed about progress and expected outcomes Demonstrate in-depth technical capabilities and professional knowledge. Demonstrate ability to assimilate to new knowledge Possess good business acumen. Remain current on new developments in advisory services capabilities and industry knowledge The job would require travel to client locations within India and abroad THE INDIVIDUAL Possess strong domain knowledge, understanding of business processes and possible risks in operations of at least one industry sector Ability to perform and interpret process gap analysis Ability to identify risks in business processes Understanding of control rationalization, optimization, effectiveness and efficiency Have experience in process consulting/ internal audit/ risk consulting Strong analytical and problem solving skills. Possess strong data analytics skills and knowledge of advanced data analytical tools will be an advantage Strong written and verbal communication skills (presentation skills) Ability to work we'll in teams Advanced understanding of IT systems, Knowledge of MS office ( MS Excel, PowerPoint, Word etc); and Have the ability to work under pressure - stringent deadlines and tough client conditions which may demand extended working hours Willingness to travel within India or abroad for continuous long periods of time Demonstrate integrity, values, principles, and work ethic and lead by example Qualification Qualified CAs with articleship from Big-4 firms, MBAs from top Business Schools with 0 - 3 years of experience Other qualified CAs/ MBAs with 1 - 4 years OR Graduates with 4 - 6 years of relevant experience in risk consulting/ operations or compliance function role in the industry (Understanding of internal audit, business processes, sector understanding) Certifications like Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA) would be an added advantage Compensation Compensation is competitive with industry standards Details of the compensation breakup will be shared with short-listed candidates only People BENEFITS Continuous learning program Driving a culture of recognition through ENCORE our quarterly rewards and recognition program Comprehensive medical insurance coverage for staff and family Expansive general and accidental coverage for staff Executive Health checkup (Manager & above, and for staff above the age of 30) Les Concierge desk Internal & Global mobility Various other people friendly initiatives Strong commitment to our Values such as CSR initiatives

The Information Security Manager is responsible for developing, implementing, and maintaining the organizations overall information security strategy. This includes ensuring the confidentiality, integrity, and availability of all information assets. What you'll do Implement Security policies & Standard operating processes (SOPs) : Create/ review, and update information security policies and SOPs, procedures, and standards to ensure alignment with industry best practices and RBI regulatory requirements. Risk Management: Identify, assess, and mitigate information security risks to the organizations assets, data, and systems. Compliance: Ensure compliance with relevant laws, regulations, and industry standards, such as GDPR, NIST, PCI-DSS, and ISO 27001. Security Awareness: Develop and implement security awareness training programs for employees to promote a culture of security. Incident Response: Develop and manage incident response plans to ensure prompt and effective response to security incidents. Vulnerability Management: Implement vulnerability management processes to identify, classify, and remediate vulnerabilities in systems and applications. Security Architecture (Cloud and On Prime) : Design , review and implement secure architectures for systems, networks, and applications. Third-Party Risk Management: Assess and mitigate information security risks associated with third-party vendors and service providers. Budgeting and Resource Allocation: Manage the information security budget and allocate resources to ensure effective implementation of security measures. Reporting and Metrics: Provide regular reporting and Security metrics to stakeholders on information security performance and risk posture. Cloud Security Experience*: Experience with cloud security platforms and technologies. Programming Skills: Proficiency in programming languages such as Python, Java, or C++. Industry Certifications: Additional certifications such as CompTIA Security+, or ISO 27001 Lead Implementer. Operational & Reporting Tasks: Risk management: Identify, assess, and mitigate information security risks to the organization. Compliance: Ensure compliance with relevant laws, regulations, and industry standards. Budgeting: Manage the information security budget and allocate resources. Stakeholder Management: Communicate information security risks and mitigation strategies to stakeholders. Project Management: Manage information security projects, including project planning, execution, and delivery. Vendor Management: Manage relationships with information security vendors and service providers. Security Metrics: Develop and report security metrics to stakeholders. Compliance Reporting: Report on compliance with relevant laws, regulations, and industry standards. Risk Reporting: Report on information security risks and mitigation strategies. Incident Reporting: Report on security incidents and response activities. What experience you need bachelors Degree or Engineering with Information security certification like ISO 27001, CCNA, ITIL foundation Minimum 13 to 15 yrs of Information security Information / Security audits experience/Technology administration /Project management etc Education: Bachelors degree in Computer Science or computer engineering, Information Security, or related field. Certifications: CISSP, CEH, CISM, or CISA certification preferred. Experience: Minimum 5 years of experience in information security, with at least 2 years in a management role. Skills: Strong knowledge of information security principles, risk management, and compliance. Excellent communication, leadership, and project management skills. Soft skills: Time management - Effective time management and prioritizing Collaboration - Ability to work & collaborate with cross functional teams Adaptability: Ability to adapt to changing security landscapes and professional environment. What could set you apart People management skills Good Communication skill Passion to continuously learn and work to value add to the organization security environment Positive attitude

The Auditor, Global IT is responsible for assessing the adequacy of Global Information Technology security and controls for applications and infrastructure throughout Abbott s international and domestic organizations. The IT auditor will execute audit projects using a risk-based approach to help ensure effective testing coverage. They will identify control gaps and other areas of risk exposure related to controls within IT processes and deliver achievable, meaningful recommendations for management to mitigate the identified risks. The individual should have the demonstrated ability to communicate effectively, present professionally, and work we'll with the highest level of Corporate and Division management as we'll as his/her peer group. WHAT you'll DO Execute Information Systems audits throughout Abbotts international and domestic organizations. Assess the design and development of security solutions and their adherence to applicable policies and comply with information security requirements. Prepare and present audit findings to senior management. Maintain comprehensive historical audit work paper documentation that fully supports reported audit results, leveraging established department tools and standards. Proactively communicate with key stakeholders regarding audit status, findings and other relevant issues. Stay abreast of current and emerging security risks. Research new technologies, understand existing processes, and reference recognized standards and frameworks. Work collaboratively with others on the Corporate Audit team to proactively assess organizational IT risks and ensure effective audit coverage. Identify control gaps and other areas of heightened risk exposure related to governance, risk management and internal controls within IT processes. Design and deliver achievable meaningful recommendations for management to mitigate the identified risks. EDUCATION AND EXPERIENCE you'll BRING Required BA/BS degree in Business, Computer Science, Management Information Systems or related field, or equivalent practical experience. 1.5-3+ years of related experience with a top-tier consulting or public accounting firm in one of the following two areas required: Execution of Information Systems audits, including Application, Platform or General IT Controls; or conducting information security assessments or implementing information security controls. Strong interpersonal and communication skills are required. 0-10% travel to Abbotts International and Domestic locations required. Preferred Experience with auditing major ERP systems (ie SAP) Experience with auditing IaaS, PaaS, SaaS services and solutions Experience with SOX audits and compliance requirements Deep insight of best practice standards and frameworks, such as ISO 27001/2 and NIST. Understanding of network and system security technology and practices across major-computing areas. Experience with Technology Risk Management / IT Audit function in Enterprise organizations. Certifications such as HCISPP, CHPS, CISA, CISSP, CISM, CRISC, CIPP. Manufacturing and/or international business experience. Foreign language skills.

The Auditor, Global IT is responsible for assessing the adequacy of Global Information Technology security and controls for applications and infrastructure throughout Abbott s international and domestic organizations. The IT auditor will execute audit projects using a risk-based approach to help ensure effective testing coverage. They will identify control gaps and other areas of risk exposure related to controls within IT processes and deliver achievable, meaningful recommendations for management to mitigate the identified risks. The individual should have the demonstrated ability to communicate effectively, present professionally, and work we'll with the highest level of Corporate and Division management as we'll as his/her peer group. WHAT you'll DO Execute Information Systems audits throughout Abbotts international and domestic organizations. Assess the design and development of security solutions and their adherence to applicable policies and comply with information security requirements. Prepare and present audit findings to senior management. Maintain comprehensive historical audit work paper documentation that fully supports reported audit results, leveraging established department tools and standards. Proactively communicate with key stakeholders regarding audit status, findings and other relevant issues. Stay abreast of current and emerging security risks. Research new technologies, understand existing processes, and reference recognized standards and frameworks. Work collaboratively with others on the Corporate Audit team to proactively assess organizational IT risks and ensure effective audit coverage. Identify control gaps and other areas of heightened risk exposure related to governance, risk management and internal controls within IT processes. Design and deliver achievable meaningful recommendations for management to mitigate the identified risks. EDUCATION AND EXPERIENCE you'll BRING Required BA/BS degree in Business, Computer Science, Management Information Systems or related field, or equivalent practical experience. 1.5-3+ years of related experience with a top-tier consulting or public accounting firm in one of the following two areas required: Execution of Information Systems audits, including Application, Platform or General IT Controls; or conducting information security assessments or implementing information security controls. Strong interpersonal and communication skills are required. 0-10% travel to Abbotts International and Domestic locations required. Preferred Experience with auditing major ERP systems (ie SAP) Experience with auditing IaaS, PaaS, SaaS services and solutions Experience with SOX audits and compliance requirements Deep insight of best practice standards and frameworks, such as ISO 27001/2 and NIST. Understanding of network and system security technology and practices across major-computing areas. Experience with Technology Risk Management / IT Audit function in Enterprise organizations. Certifications such as HCISPP, CHPS, CISA, CISSP, CISM, CRISC, CIPP. Manufacturing and/or international business experience. Foreign language skills.

About the Role: Grade Level (for internal use): 10 The Team: The Customer Experience, a new shared capability within Market Intelligence, partners closely with the Sales organization to deliver a differentiated customer experience. This group enables our sales team and businesses by overseeing customer success, sales operations, and implementation of commercial technology. This includes Salesforce, alignment to targets in strategic growth areas, and empowers accelerated growth and delivery by putting the customer at the core of everything we do driving a full customer experience that differentiates us from our competitors. The Proposal & Customer Assessment Team is part of the broader commercial solutions. An enabling function to assist with due diligence questionnaires, risk assessments, audits, and other customer inquiries. Our goal is to enable new revenue generation via RFX & deliver superior customer satisfaction by providing high-quality proposals & relevant information during pre/post-sales. We serve a vast array of clients across geographies and are committed to the client-first mindset. Responsibilities and Impact: This position within the Proposal & Assessment Team is integral to supporting Market Intelligence commercial teams in responding to the growing volume of client audits and inquiries. The person will collaborate closely with product, risk, compliance, legal, and functional teams, to ensure client requirements are met effectively. Responding/Managing client audits and risk assessments from end to end, maintaining awareness of internal controls and audit trends to uphold the efficacy of the audit process. Serving as the primary point of contact for our top customers, assisting them in meeting their vendor management requirements. Cultivating partnerships and closely collaborating with corporate and divisional groups to seek information and influence approaches and outcomes. Developing familiarity with Market Intelligence's audit processes and the company's cyber security policies, standards, processes, and controls. Tracking assessment and audit outcomes, management responses to address findings, and follow-up activities, and producing reports for executives and management. Undertaking additional tasks and responsibilities as directed by the team manager, while continuously enhancing the overall process to align with evolving industry standards. What W ere L ooking F or : Bachelor's degree in a related field, or equivalent professional experience in Third-Party Risk Management (TPRM), Audit, and Risk. 6-7+ years of relevant experience in conducting audits or responding to audits, within a SaaS-related business environment. Demonstrated understanding of client-initiated audits and organizational controls. Familiarity with CISA, ISO Standards, NIST, and SOC standards. Proven track record of building strong relationships resulting in successful outcomes. Ability to collaborate effectively with a global team spanning multiple time zones. Competencies : Exceptional communication and interpersonal skills, adept at engaging and influencing stakeholders across all levels. Demonstrated flexibility and negotiation prowess to achieve optimal outcomes. Proficient in efficiently managing multiple concurrent projects, with a keen ability to adapt as priorities evolve. Exhibits creativity and perseverance in devising solutions. Possesses strong analytical and problem-solving capabilities, proficient in assessing complex information and formulating actionable strategies. Fosters robust working relationships with internal colleagues, facilitating collaboration and synergy within teams.

Skill required: Control Testing - Agile testing Designation: Regulatory Compliance Analyst Qualifications: Any Graduation Years of Experience: 3 to 5 years What would you do? Help clients transform their compliance function from reactive to proactive through an intelligent compliance operating model- powered by data, intelligent technologies and talentLooking for someone with SOX testing experience.Conduct testing tasks within Agile models and integration processes and manage development sprints. Automated/IT control testing experience is required What are we looking for? Commitment to quality Written and verbal communication Risk management Ability to work well in a team Ability to meet deadlines Automated/IT control testing experience is must Roles and Responsibilities: In this role you are required to do analysis and solving of lower-complexity problems Your day to day interaction is with peers within Accenture before updating supervisors In this role you may have limited exposure with clients and/or Accenture management You will be given moderate level instruction on daily work tasks and detailed instructions on new assignments The decisions you make impact your own work and may impact the work of others You will be an individual contributor as a part of a team, with a focused scope of work Please note that this role may require you to work in rotational shifts Qualification Any Graduation

Challenging. Meaningful. Life-changing. Those aren t words that are usually associated with a job. But working at Bristol Myers Squibb is anything but usual. Here, uniquely interesting work happens every day, in every department. From optimizing a production line to the latest breakthroughs in cell therapy, this is work that transforms the lives of patients, and the careers of those who do it. You ll get the chance to grow and thrive through opportunities uncommon in scale and scope, alongside high-achieving teams. Take your career farther than you thought possible. Bristol Myers Squibb recognizes the importance of balance and flexibility in our work environment. We offer a wide variety of competitive benefits, services and programs that provide our employees with the resources to pursue their goals, both at work and in their personal lives. Read more: careers. bms. com/working-with-us . Position: Internal Audit Analyst II, Global Internal Audit & Assurance (EG 90) Location : Hyderabad, India Reports To : Associate Director, IT Audit At Bristol Myers Squibb, we are inspired by a single vision - transforming patients lives through science. Across oncology, hematology, immunology, neuroscience, and cardiovascular disease, with one of the most diverse and promising pipelines in the industry, each of our passionate colleagues contribute to innovations that drive meaningful change. We bring a human touch to every treatment we pioneer. Join us and make a difference. Position Summary The Internal Audit Analyst II in GIA will work in a team environment to plan and execute dynamic risk-based audits and identify value-added recommendations to strengthen Company processes and controls. Audits will include U. S. -based operations, international Company subsidiaries, strategic initiatives, critical business processes, and key third-party outsourcing arrangements. Throughout the audits, the Senior Internal Audit Analyst will have the opportunity to interact with senior management and enhance oral and written communication skills. Key Responsibilities Key responsibilities include, but are not limited to: Work collaboratively with audit teams to execute financial, operational, compliance, and integrated IT audits. Actively participate in planning activities to identify significant risks and develop appropriate risk-based audit procedures. Research applicable policies, guidance, and regulations to drive assigned sections of the audit with high quality and within deadlines. Leverage existing data analytics AI use cases and assist with build and enhancement projects, when assigned. Interview key personnel to assess business processes and the strength of their control environments. Identify meaningful value-added recommendations for management to improve the adequacy, effectiveness, and efficiency of controls and related processes. Actively participate in meetings involving various levels of management to effectively communicate audit status, align on significant audit issues and recommended corrective actions. Prepare clear, detailed audit documentation evidencing the results of actual testing procedures in accordance with BMS and the Institute of Internal Auditors (IIA) standards. Prepare audit reports, including clearly written, concise audit observations that effectively communicate identified issues and their related corrective actions to key stakeholders. Participate with the team in trainings and regular departmental meetings that include sharing best practices. Participate in departmental projects as assigned (e. g. , audit lessons learned, training, continuous improvement, etc. ). Qualifications & Experience A BA/BS degree in Data Science, Computer Science, Information Systems, Accounting, Finance, or other business discipline. A minimum of 3 years prior public accounting or internal audit experience, including experience in financial, operational, IT or compliance auditing. Knowledge of U. S. GAAP and IIA standards. English fluency. Strong verbal and written communication skills. Proficiency with Excel/Word/PowerPoint. AI and Data analytics experience (specifically with visualization tools such as Tableau) and ERPs. Desirable Qualifications & Experience MBA or other advanced degree. Professional certification (i. e. , CPA, CA, CIA, CISA or equivalent). Experience with a Big Four firm. Experience in developing written reports and delivering presentations. Multilingual (verbal and written). Key Capabilities of Focus Leadership : Pursues tasks with a sense of urgency. Shows accountability by taking ownership of assigned responsibilities and completing them on time, with the highest quality. Demonstrates speed and innovation to get things done; can simplify complex processes; knows of and can leverage resources to drive tasks/projects forward across functions and within the function. Able to identify risk and quickly develop an understanding of complex processes. Works effectively in ambiguous situations and adapts quickly in a rapidly changing environment. Collaboration: Works well in a team environment, fostering inclusion and building effective relationships with both team members and customers. Displays excellent ability to communicate across various levels of management, including with executives, to explain identified issues and related corrective actions. Digital Proficiency: Actively works toward improving data analytics capabilities and developing digital acumen. Gathers relevant information and critically evaluates it to define next steps and propose a solution. Business Acumen: This role requires strong and proven ability to understand local and micro business dynamics, identify risks and opportunities. Around the world, we are passionate about making an impact on the lives of patients with serious diseases. Empowered to apply our individual talents and diverse perspectives in an inclusive culture, our shared values of passion, innovation, urgency, accountability, inclusion, and integrity bring out the highest potential of each of our colleagues. Bristol Myers Squibb recognizes the importance of balance and flexibility in our work environment. We offer a wide variety of competitive benefits, services and programs that provide our employees with the resources to pursue their goals, both at work and in their personal lives. Our company is committed to ensuring that people with disabilities can excel through a transparent recruitment process, reasonable workplace adjustments and ongoing support in their roles. Applicants can request an accommodation prior to accepting a job offer. If you require reasonable accommodation in completing this application, or any part of the recruitment process direct your inquiries to adastaffingsupport@bms. com . Visit careers. bms. com/eeo-accessibility to access our complete Equal Employment Opportunity statement. If you come across a role that intrigues you but doesn t perfectly line up with your resume, we encourage you to apply anyway. You could be one step away from work that will transform your life and career. With a single vision as inspiring as Transforming patients lives through science , every BMS employee plays an integral role in work that goes far beyond ordinary. Each of us is empowered to apply our individual talents and unique perspectives in a supportive culture, promoting global participation in clinical trials, while our shared values of passion, innovation, urgency, accountability, inclusion and integrity bring out the highest potential of each of our colleagues. BMS has an occupancy structure that determines where an employee is required to conduct their work. This structure includes site-essential, site-by-design, field-based and remote-by-design jobs. The occupancy type that you are assigned is determined by the nature and responsibilities of your role: Site-essential roles require 100% of shifts onsite at your assigned facility. Site-by-design roles may be eligible for a hybrid work model with at least 50% onsite at your assigned facility. For these roles, onsite presence is considered an essential job function and is critical to collaboration, innovation, productivity, and a positive Company culture. For field-based and remote-by-design roles the ability to physically travel to visit customers, patients or business partners and to attend meetings on behalf of BMS as directed is an essential job function. BMS is dedicated to ensuring that people with disabilities can excel through a transparent recruitment process, reasonable workplace accommodations/adjustments and ongoing support in their roles. Applicants can request a reasonable workplace accommodation/adjustment prior to accepting a job offer. If you require reasonable accommodations/adjustments in completing this application, or in any part of the recruitment process, direct your inquiries to adastaffingsupport@bms. com . Visit careers. bms. com/ eeo -accessibility to access our complete Equal Employment Opportunity statement. BMS cares about your well-being and the well-being of our staff, customers, patients, and communities. As a result, the Company strongly recommends that all employees be fully vaccinated for Covid-19 and keep up to date with Covid-19 boosters. BMS will consider for employment qualified applicants with arrest and conviction records, pursuant to applicable laws in your area. If you live in or expect to work from Los Angeles County if hired for this position, please visit this page for important additional information: https://careers. bms. com/california-residents/ Any data processed in connection with role applications will be treated in accordance with applicable data privacy policies and regulations.

At GoDaddy the future of work looks different for each team. Some teams work in the office full-time, others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely. This is a remote position, so you ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings. Join our Team... At GoDaddy, we are seeking a Manager, SOX Compliance & Risk Management, to join our Finance team! This role will play a key part in driving high-quality execution of our SOX compliance efforts across the full annual SOX cycle leveraging technology, including AI, to optimize execution. We need a diligent and proactive team member to assist in testing controls, identifying gaps, and contributing to the continuous improvement of the SOX program. This role reports to the Senior Manager, SOX Compliance & Risk Management. What youll get to do... Assist in driving the SOX program by supporting SOX compliance activities including performing walkthroughs and testing of business process controls, while and ensuring alignment with regulatory expectations and industry standard processes Assist in the maintenance and improvement of SOX-related documentation, risk assessments, and reporting, bringing to bear automation tools where feasible Identify control deficiencies and trends, and partner with internal teams to support remediation planning Give to ongoing program improvement by recommending updates to testing and documentation standards Maintain strong cross-functional relationships across business and IT collaborators to support program objectives Your experience should include... 4+ years of experience in SOX compliance, internal audit or external audit Bachelors degree or equivalent experience in accounting, finance, computer information systems or related field Recent public accounting background from a Big 4 Firm Strong understanding of SOX 404 and internal control frameworks (e.g., COSO, COBIT) Experience testing SOX business process controls CPA (equivalent), CIA, CISA, or other relevant certifications Weve got your back... We offer a range of total rewards that may include paid time off, retirement savings (e.g., 401k, pension schemes), bonus/incentive eligibility, equity grants, participation in our employee stock purchase plan, competitive health benefits, and other family-friendly benefits including parental leave. GoDaddy s benefits vary based on individual role and location and can be reviewed in more detail during the interview process.