About the role We are seeking a Senior IT Architect to lead our annual ongoing technology refresh programme taking responsibility for defining, shaping and agreeing the annual portfolio of technology refresh projects each year. This will include the management and leadership of a small team of architects to successfully deliver these projects, ensuring effective governance and control and the delivery of business requirements, whilst minimising IT risk and optimising the IT estate. You will also contribute to the development of standards, patterns and strategic IT roadmaps for current IT systems, services & applications. You will also be capable of deputising for the head of solution architecture in their absence. Accountabilities: Working with Enterprise Architecture define and agree a portfolio of candidate projects each year for the annual technology refresh programme. Undertaking the necessary discovery and investigation to provide a robust proposed scope and approach for each candidate project; with a high degree of confidence in the likely costs and timeframe required to deliver each project. Management and leadership of a small team of IT architects to deliver each of the projects in the agreed annual technology refresh programme each year. Delivery of Solution Architectures for technology refresh projects: ensuring compliance to policies and standards, remediation of identified risks and vulnerabilities and optimisation. Deputise for Head of Solution Architecture in his absence, attending architectural governance and management meetings to represent Solution Architecture. Where required research, create, communicate and maintain IT product and supplier roadmaps for specific domains within the associated risk appetite; taking into account market and IT developments that are designed to deliver long-term business requirements, reduce IT risk and maximise re-use and efficiencies. Develop, agree, control, maintain and govern effective delivery of IT architectural solution blueprints (both internally and externally produced), incorporating IT operating model, technology, applications, information and service, in accordance with agreed standards and criteria, to ensure a shared understanding between parties, that it delivers business requirements and is effectively governed and controlled. Identify, evaluate and select technology, applications and service products, in collaboration with Group Procurement and business stakeholders and in accordance with policies, procedures and standards, to ensure they are fit for purpose, deliver business requirements within budget and timescales and that contracts are effective. Develop, agree, control and maintain IT architectural standards and policies for product, technology, information and service that are aligned with industry practice and the strategic roadmap and will deliver consistent and efficient IT solution design and application. Manage the technology relationships with third party suppliers and contractors, to ensure they meet business need and deliver the requirements of the solution and any contracts are aligned with IT roadmaps and standards. Monitor and manage specific Information Technology Infrastructure Library (ITIL) processes to ensure their effective operation and provide guidance and control to the architectural design aspects of other relevant ITIL processes to ensure governance requirements and standards are met. Assist with impact assessment of IT operational incidents and proposed IT Change to provide the subject matter expertise required to support effective decision making. About you Qualifications: Ideally qualified to the following standards or equivalent: Information Systems Examination Board (ISEB) Practitioner in Enterprise and Solution Architecture The Open Group Architecture Framework (TOGAF) 9 Certified ITIL Foundation Prince 2 Foundation Control Objectives for Information and related Technology (COBIT) Foundation Experience and Knowledge: Experience in playing a key role within an IT delivery function including solutioning/solution planning and delivering Experience as a Lead Architect for an IT programme or large project Experience in shaping and defining a portfolio of projects Experience of defining and creating architectural standards and patterns Experience of running architectural governance for a programme or large project Working knowledge of Architectural domains Good knowledge of: Emerging technologies and standards Wider IT market issues Architectural standards and methodologies e.g. TOGAF Architectural design patterns Integration design patterns Excellent presentation and influencing skills Great senior stakeholder communication and management skills Good working knowledge of change lifecycle skills: Analysis and requirements management Azure Hosting Functional Decomposition Business models Data models About the role We are seeking a Senior IT Architect to lead our annual ongoing technology refresh programme taking responsibility for defining, shaping and agreeing the annual portfolio of technology refresh projects each year. This will include the management and leadership of a small team of architects to successfully deliver these projects, ensuring effective governance and control and the delivery of business requirements, whilst minimising IT risk and optimising the IT estate. You will also contribute to the development of standards, patterns and strategic IT roadmaps for current IT systems, services & applications. You will also be capable of deputising for the head of solution architecture in their absence. Accountabilities: Working with Enterprise Architecture define and agree a portfolio of candidate projects each year for the annual technology refresh programme. Undertaking the necessary discovery and investigation to provide a robust proposed scope and approach for each candidate project; with a high degree of confidence in the likely costs and timeframe required to deliver each project. Management and leadership of a small team of IT architects to deliver each of the projects in the agreed annual technology refresh programme each year. Delivery of Solution Architectures for technology refresh projects: ensuring compliance to policies and standards, remediation of identified risks and vulnerabilities and optimisation. Deputise for Head of Solution Architecture in his absence, attending architectural governance and management meetings to represent Solution Architecture. Where required research, create, communicate and maintain IT product and supplier roadmaps for specific domains within the associated risk appetite; taking into account market and IT developments that are designed to deliver long-term business requirements, reduce IT risk and maximise re-use and efficiencies. Develop, agree, control, maintain and govern effective delivery of IT architectural solution blueprints (both internally and externally produced), incorporating IT operating model, technology, applications, information and service, in accordance with agreed standards and criteria, to ensure a shared understanding between parties, that it delivers business requirements and is effectively governed and controlled. Identify, evaluate and select technology, applications and service products, in collaboration with Group Procurement and business stakeholders and in accordance with policies, procedures and standards, to ensure they are fit for purpose, deliver business requirements within budget and timescales and that contracts are effective. Develop, agree, control and maintain IT architectural standards and policies for product, technology, information and service that are aligned with industry practice and the strategic roadmap and will deliver consistent and efficient IT solution design and application. Manage the technology relationships with third party suppliers and contractors, to ensure they meet business need and deliver the requirements of the solution and any contracts are aligned with IT roadmaps and standards. Monitor and manage specific Information Technology Infrastructure Library (ITIL) processes to ensure their effective operation and provide guidance and control to the architectural design aspects of other relevant ITIL processes to ensure governance requirements and standards are met. Assist with impact assessment of IT operational incidents and proposed IT Change to provide the subject matter expertise required to support effective decision making. About you Qualifications: Ideally qualified to the following standards or equivalent: Information Systems Examination Board (ISEB) Practitioner in Enterprise and Solution Architecture The Open Group Architecture Framework (TOGAF) 9 Certified ITIL Foundation Prince 2 Foundation Control Objectives for Information and related Technology (COBIT) Foundation Experience and Knowledge: Experience in playing a key role within an IT delivery function including solutioning/solution planning and delivering Experience as a Lead Architect for an IT programme or large project Experience in shaping and defining a portfolio of projects Experience of defining and creating architectural standards and patterns Experience of running architectural governance for a programme or large project Working knowledge of Architectural domains Good knowledge of: Emerging technologies and standards Wider IT market issues Architectural standards and methodologies e.g. TOGAF Architectural design patterns Integration design patterns Excellent presentation and influencing skills Great senior stakeholder communication and management skills Good working knowledge of change lifecycle skills: Analysis and requirements management Azure Hosting Functional Decomposition Business models Data models

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Cyber Governance Risk and Compliance Consultant - Senior The opportunity This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, designing security and privacy controls, advising client stakeholders, facilitating workshops and supporting business development. Your Key Responsibilities As a Cyber GRC Professional in our Cyber Security practice, you will be occupied in the following domains: a) Strategy, b) Risk, c) Compliance. As part of our team strategy you will be expected to take on responsibility and initiative early, providing you with real experience working with a wide range of major clients in EY. You will be taking responsibility for the quality of your work, while continually developing your personal and professional skills through formal training, hands-on experience and coaching. Skills And Attributes For Success To qualify for the role, you must have: Degree, or equivalent, in Information Security, Cyber Security, Information Technology, Informatics, or other similar and technical areas Evidence of self-motivation to continuously develop in the areas of cybersecurity Good organizational and time management skills with the ability to prioritize and complete multiple complex projects under tight deadlines Ability to translate security issues into business risks Excellent interpersonal skills and ability to work effectively within a team at all hierarchical levels Willingness to research client inquiries and emerging issues, including regulations, industry practices, and new technologies Experience, knowledge and strong interest in information and cyber security domains are essential for this role Experience on Cyber Governance, Risk & Compliance (GRC), Cyber risk assessments & management methodologies Experience on assessing, designing and implementing security strategies, governance frameworks over processes and controls, allowing organisations to optimally manage cyber security Experience on design and implementation of security policies, procedures, standards and controls in line with regulation and/or current standards, such as ISO27001, NIST, SANS etc. Experience in data classification exercises and controls / mechanisms enforcement Working knowledge of control frameworks such as ISO 27001/27002, COBIT, NIST, ITIL, etc. Ability to conduct Security regulatory and compliance assessment independently Hands on with assessment report preparation and presenting to senior technical and business stakeholders Hand on knowledge of excel, PowerPoint and word Articulative and confident in presentation to senior stakeholders Ability to lead workstreams or dedicated portions of projects Cyber maturity assessments, recommendations, roadmap and strategy creation knowledge of use of and risks related to modern and emerging technologies Cybersecurity audit Ability to plan and deliver cyber security training and awareness Ideally, you’ll also have: Security-related qualifications / certifications such as CISSP, SSCP, CISM, ISO27001 lead implementer or auditor, CompTIA Security+, are desirable Experience in Third Party Risk Management (TPRM) and / or vendor risk assessment engagements Experience in design and implementation of Information Security Management Systems (i.e. security policies, procedures and guidelines) according to leading International Standards Security-related vendor / technology certifications are desirable EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

locationsBangalore, Indiaposted onPosted 11 Days Ago job requisition id30648 FICO (NYSEFICO) is a leading global analytics software company, helping businesses in 100+ countries make better decisions. Join our world-class team today and fulfill your career potential! The Opportunity FICO is seeking Cyber Security Engineer to join our growing GRC Team. This is a full-time regular position (hybrid), and a great opportunity for an individual with strong PCI, ISO 27001, SOC2 audit skills or great interest in security Compliance and Risk Management frameworks and grow in exciting field of GRC". Cyber Security - Director What Youll Contribute A pplicable work experience, in performing and running audits, certification programs and control assessments, including but not limited to scope planning, defining control procedures based on requirements, policies and standards, control testing, mapping issues to risks and socializing results. Coordinate audit-related tasks to ensure the readiness of managers and their teams for audit testing and facilitate the timely resolution of any audit findings. Strong knowledge of common security legal and regulatory requirements. (e.g., PCI, SOC, CSA STAR, NIST, ISO/IEC 27001, COBIT, etc.) Work on compliance initiatives to ensure operational effectiveness with applicable laws and regulations, as well as internal policies and procedures. Monitor activities of assigned IT areas to ensure compliance with internal policies and standards. Assist Corporate Compliance and the Business with all required compliance/security-related documentation. Facilitate for external audits to ensure compliance with all industry-mandated regulations. Participate in the development and implementation of new business initiatives to ensure functionality required to support compliance. Provide guidance to business functions on compliance/security-related matters. Good understanding of IT concepts, including Cloud hosting, containerization, encryption, networking, operating systems, databases, middleware, and applications. Knowledge of or experience working with, Cloud technologies/environments, AWS or other related cloud experience is required. Ability to effectively communicate to all levels of the organization, including senior management, and other stakeholders that influence the security and compliance posture of FICO. Ability to assess the nature of controls and identify automation opportunities for increased monitoring and scaling coverage. What Were Seeking Bachelors degree in the field of Information Security, Computer Science or discipline and/or certifications. (e.g., ISO 27001 LI/LA, ISA/QSA, CISSP, CISA, CISM, and related GIAC.) Demonstrated ability to apply IT-related knowledge and experience in solving compliance issues. Experience implementing cloud security and compliance standards, frameworks, and controls (ISO/IEC 27001, SOC 2, PCI, NIST) for cloud service delivery models (IaaS, PaaS, SaaS). AWS Certifications (added advantage). Experience or understanding of governance, risk and compliance (GRC) processes and solutions. Background in security controls, auditing, network and system security. Ability to express technical concepts in business terms. Able to work well under deadlines in a changing environment and complete multiple projects effectively and concurrently. Evaluate effectiveness of the internal security control framework and recommend adjustments as business needs change. Regularly interact with all levels of management to present and discuss audit results and obtain gap remediation status. Our Offer to You An inclusive culture strongly reflectingourcore valuesAct Like an Owner, DelightOurCustomers and Earn the Respect of Others. The opportunitytomake an impact and develop professionally by leveraging yourunique strengths and participating in valuable learning experiences. Highly competitive compensation, benefits and rewards programs that encourageyoutobring yourbest every day and be recognized for doing so. An engaging, people-first work environmentoffering work/life balance, employee resource groups, and social eventstopromote interaction and camaraderie. Why Make a Move to FICO At FICO, you can develop your career with a leading organization in one of the fastest-growing fields in technology today Big Data analytics. Youll play a part in our commitment to help businesses use data to improve every choice they make, using advances in artificial intelligence, machine learning, optimization, and much more. FICO makes a real difference in the way businesses operate worldwide Credit Scoring FICO Scores are used by 90 of the top 100 US lenders. Fraud Detection and Security 4 billion payment cards globally are protected by FICO fraud systems. Lending 3/4 of US mortgages are approved using the FICO Score. Global trends toward digital transformation have created tremendous demand for FICOs solutions, placing us among the worlds top 100 software companies by revenue. We help many of the worlds largest banks, insurers, retailers, telecommunications providers and other firms reach a new level of success. Our success is dependent on really talented people just like you who thrive on the collaboration and innovation thats nurtured by a diverse and inclusive environment. Well provide the support you need, while ensuring you have the freedom to develop your skills and grow your career. Join FICO and help change the way business thinks! Learn more about how you can fulfil your potential at FICO promotes a culture of inclusion and seeks to attract a diverse set of candidates for each job opportunity. We are an equal employment opportunity employer and were proud to offer employment and advancement opportunities to all candidates without regard to race, color, ancestry, religion, sex, national origin, pregnancy, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. Research has shown that women and candidates from underrepresented communities may not apply for an opportunity if they dont meet all stated qualifications. While our qualifications are clearly related to role success, each candidates profile is unique and strengths in certain skill and/or experience areas can be equally effective. If you believe you have many, but not necessarily all, of the stated qualifications we encourage you to apply. Information submitted with your application is subject to theFICO Privacy policy at

Job Description Who we are looking for - Alpha Platform is looking for an experienced risk professional to join their Business Risk Management (BRM) team. A candidate for this position is expected to work in a fast-paced environment akin to a commercial software company in order to meet the expectations of this rapidly growing business. Risk management skills, especially those acquired at G-SIFI organizations and/or large public accounting firms, balanced with technology and data skills will contribute to a candidate’s success in this position. This is a full-time position located at our Burlington, Massachusetts office. Why this role is important to us - Effective risk management is a top priority for a G-SIFI organization. As a member of the BRM team you will assist in the execution of a risk management program aimed at governing, overseeing and managing risks, in support of the firm’s risk excellence goals. What You Will Be Responsible For - Identify and assess risks and controls within business and technology processes Test design and operating effectiveness of controls as part of periodic required process and control reviews Self-identify, and assist the business in self-identifying, control issues, analyze their root causes, draft / assist in drafting appropriate and timely remediation plans, and continuously monitor remediation progress Advise the business on risks and control design, adopting a partnership approach, especially during introduction of new technology and business processes Assist with the execution of key business risk programs, including regular risk reviews, risk reporting, oversight and governance activities (including issue and incident management), and monitoring control performance Assist with the preparation and coordination of outside reviews, including audit events and/or regulatory examinations Escalate any perceived violations of rules, regulations, policies, procedures and recommend a course of action What We Value - Ability to effectively prioritize multiple tasks and work independently in non-routine situations Willingness to learn new technologies and processes Strong analytical, interpersonal, organizational, research, and communication (verbal and written) skills Good understanding of the role of first, second and third line of defense Strong influencing, collaboration, and project management skills Critical thinking and intellectual curiosity Initiative, ownership and energetic Excellent analytical skills Self-motivation, self-assurance and self-management Excellent team player and treating others with respect Education & Preferred Qualifications - University degree in information systems, computer science, or related field Proficiency in IT and risk management Knowledge of industry Risk and Control frameworks (COSO, COBIT, NIST, ISO, etc.) Experience with Microsoft Tools, Archer platform, Open Pages, Tableau, SharePoint Technical certifications preferred e.g. CISA, CISM, CRISC, CISSP Who We Are - Alpha Platform builds and operates technology platforms and harmonizes data for use across the end-to-end investment management cycle so clients can overcome silos, work smarter and stay in sync. The Alpha Platform organization includes Alpha Data Platform, Charles River Development, Mercatus, Commercialization, and Platform Management. We are part of State Street, a Global Systemic Important Financial Institution (G-SIFI), who is one of the largest custodian banks, asset managers and asset intelligence companies in the world. From technology to product innovation, we’re making our mark in the financial services industry. For more than two centuries, we’ve been helping our clients safeguard and steward the investments of millions of people. We provide investment servicing, data & analytics, investment research & trading and investment management to institutional clients. We make all efforts to create a great work environment. Our benefits packages are competitive and comprehensive. Details vary in location, but you may expect generous medical care, insurance and savings plans among other perks. You’ll have access to flexible Work Program to help you match your needs. And our wealth of development programs and educational support will help you reach your full potential. We truly believe our employees’ diverse backgrounds, experiences and perspective are a powerful contributor to creating an inclusive environment where everyone can thrive and reach their maximum potential while adding value to both our organization and our clients. We warmly welcome candidates of diverse origin, background, ability, age, sexual orientation, gender identity and personality. Another fundamental value at State Street is active engagement with our communities around the world, both as a partner and a leader. You will have tools to help balance your professional and personal life, paid volunteer days, matching gift programs and access to employee networks that help you stay connected to what matters to you. State Street is an equal opportunity and affirmative action employer. Interested in learning more about us? Visit our www.statestreet.com www.ssga.com www.crd.com LinkedIn page: State Street on LinkedIn Job ID: R-772428 Show more Show less

Who We Are Looking For - Alpha Platform is looking for an experienced risk professional to join their Business Risk Management (BRM) team. A candidate for this position is expected to work in a fast-paced environment akin to a commercial software company in order to meet the expectations of this rapidly growing business. Risk management skills, especially those acquired at G-SIFI organizations and/or large public accounting firms, balanced with technology and data skills will contribute to a candidate’s success in this position. This is a full-time position located at our Burlington, Massachusetts office. Why this role is important to us - Effective risk management is a top priority for a G-SIFI organization. As a member of the BRM team you will assist in the execution of a risk management program aimed at governing, overseeing and managing risks, in support of the firm’s risk excellence goals. What You Will Be Responsible For - Identify and assess risks and controls within business and technology processes Test design and operating effectiveness of controls as part of periodic required process and control reviews Self-identify, and assist the business in self-identifying, control issues, analyze their root causes, draft / assist in drafting appropriate and timely remediation plans, and continuously monitor remediation progress Advise the business on risks and control design, adopting a partnership approach, especially during introduction of new technology and business processes Assist with the execution of key business risk programs, including regular risk reviews, risk reporting, oversight and governance activities (including issue and incident management), and monitoring control performance Assist with the preparation and coordination of outside reviews, including audit events and/or regulatory examinations Escalate any perceived violations of rules, regulations, policies, procedures and recommend a course of action What We Value - Ability to effectively prioritize multiple tasks and work independently in non-routine situations Willingness to learn new technologies and processes Strong analytical, interpersonal, organizational, research, and communication (verbal and written) skills Good understanding of the role of first, second and third line of defense Strong influencing, collaboration, and project management skills Critical thinking and intellectual curiosity Initiative, ownership and energetic Excellent analytical skills Self-motivation, self-assurance and self-management Excellent team player and treating others with respect Education & Preferred Qualifications - University degree in information systems, computer science, or related field Proficiency in IT and risk management Knowledge of industry Risk and Control frameworks (COSO, COBIT, NIST, ISO, etc.) Experience with Microsoft Tools, Archer platform, Open Pages, Tableau, SharePoint Technical certifications preferred e.g. CISA, CISM, CRISC, CISSP Who We Are - Alpha Platform builds and operates technology platforms and harmonizes data for use across the end-to-end investment management cycle so clients can overcome silos, work smarter and stay in sync. The Alpha Platform organization includes Alpha Data Platform, Charles River Development, Mercatus, Commercialization, and Platform Management. We are part of State Street, a Global Systemic Important Financial Institution (G-SIFI), who is one of the largest custodian banks, asset managers and asset intelligence companies in the world. From technology to product innovation, we’re making our mark in the financial services industry. For more than two centuries, we’ve been helping our clients safeguard and steward the investments of millions of people. We provide investment servicing, data & analytics, investment research & trading and investment management to institutional clients. We make all efforts to create a great work environment. Our benefits packages are competitive and comprehensive. Details vary in location, but you may expect generous medical care, insurance and savings plans among other perks. You’ll have access to flexible Work Program to help you match your needs. And our wealth of development programs and educational support will help you reach your full potential. We truly believe our employees’ diverse backgrounds, experiences and perspective are a powerful contributor to creating an inclusive environment where everyone can thrive and reach their maximum potential while adding value to both our organization and our clients. We warmly welcome candidates of diverse origin, background, ability, age, sexual orientation, gender identity and personality. Another fundamental value at State Street is active engagement with our communities around the world, both as a partner and a leader. You will have tools to help balance your professional and personal life, paid volunteer days, matching gift programs and access to employee networks that help you stay connected to what matters to you. State Street is an equal opportunity and affirmative action employer. Interested in learning more about us? Visit our www.statestreet.com www.ssga.com www.crd.com LinkedIn page: State Street on LinkedIn Job ID: R-772423 Show more Show less

A career within Internal Audit services, will provide you with an opportunity to gain an understanding of an organisation’s objectives, regulatory and risk management environment, and the diverse needs of their critical stakeholders. We focus on helping organisations look deeper and see further considering areas like culture and behaviours to help improve and embed controls. In short, we seek to address the right risks and ultimately add value to their organisation. To really stand out and make us fit for the future in a constantly changing world, each and every one of us at PwC needs to be a purpose-led and values-driven leader at every level. To help us achieve this we have the PwC Professional; our global leadership development framework. It gives us a single set of expectations across our lines, geographies and career paths, and provides transparency on the skills we need as individuals to be successful and progress in our careers, now and in the future. Responsibilities As a Senior Associate, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to: Invite and give in the moment feedback in a constructive manner. Share and collaborate effectively with others. Identify and make suggestions for improvements when problems and/or opportunities arise. Handle, manipulate and analyse data and information responsibly. Follow risk management and compliance procedures. Keep up-to-date with developments in area of specialism. Communicate confidently in a clear, concise and articulate manner - verbally and in the materials I produce. Build and maintain an internal and external network. Seek opportunities to learn about how PwC works as a global network of firms. Uphold the firm's code of ethics and business conduct. Essential Duties And Responsibilities Manage the work streams related to IT SOX compliance covering ITGC and IT Dependencies (ITAC, Interfaces, IPE’s). Thorough understanding around ITGC domains such as Logical Access, Change Management, SDLC and Computer Operations. Exposure of testing IT Application Controls (Configurable, Non-configurable), Interfaces, IPE’s, Data Migration and Platform Reviews. Provide technical support in the assessment, design, and implementation of ITGC requirements. Review control evidence for adherence to accuracy, completeness, and precision of control execution for all ITGC. Develop, implement, and test controls for new acquisitions and in-scope entities Work with control owners and operators to ensure quality, consistency, and operability of new and existing controls. Collaborate and build long-term relationships with key stakeholders in a fast-paced and matrixed work environment. Review test findings, facilitate the remediation of ITGC control gaps, and escalate possible critical issues to senior management within IT. Mentors and develops peer and Associates, monitors their work, and takes corrective action when necessary Builds and maintains strong peer relationships within the team and across the organization Coordinates work with External Auditors. Interpersonal Skills Ability to work independently under general supervision with latitude for initiative and independent judgment Effective verbal and written communications, including active listening skills Ability to establish and maintain effective working relationships with co-workers and external contactors/auditors Detail-oriented Comfortable working on multiple projects simultaneously Individuals would be expected to cultivate a strong team environment and promote a positive working relationship amongst their team. Excellent Communication, written and verbal would be expected. In addition to being an exceptional individual contributor, manage engagements and relevant Teams allocated for the same. Managing predominantly offshore engagements and relevant PwC Territory teams. Ensure client service delivery in accordance with the quality guidelines & methodologies. Build and maintain client relationships by understanding and being responsive to client needs and ensuring high quality of deliverables. Demonstrate strong analytical thinking and communication skills including the ability to research and understand complex processes and effectively communicate them to interested parties Client Management Develop strong working relationships with the client and onshore client teams. Maintain excellent rapport and proactive communication with the stakeholders and client. Operational Excellence Suggest ideas on improving engagement productivity and identify opportunities for improving client service. Ensure compliance with engagement plans and internal quality & risk management procedures. People Related Display teamwork, integrity, and leadership. Work with team members to set goals and responsibilities for specific engagements. Foster teamwork and innovation. Utilize technology & tools to continually learn and innovate, share knowledge with team members and enhance service delivery. Conduct workshops and technical training sessions for team members. Contribute to the learning & development agenda and knowledge harnessing initiatives Minimum Qualifications Bachelor’s degree in Information Systems, Computer Science Engineering, or Finance Preferred B.E., B. TECH, M. TECH, MCA, BCA, CA, MBA Experience in technology audit, risk management, compliance, consulting, or information security Excellent knowledge of IT General Controls, automated and security controls. Knowledge of security measures and auditing practices within various operating systems, databases, and applications Experience in auditing financial applications, cyber security practices, privacy, and various infrastructure platforms such as Unix, Linus, Windows, SQL Server, Oracle Databases Knowledge and concepts of auditing of cloud platforms (AWS, Azure and Google Cloud) Experience designing continuous auditing and monitoring tools and techniques is a plus. Good understanding of CoBIT 5 Domains of Access Management, SLDC & Change and Computer Operations and Control Design and Testing of SOX IT General Controls (ITGC) and/or IT Application Controls (ITAC) Experience in identifying control gaps and communicating audit findings and control redesign recommendations to Management/Clients Knowledge of regulations impacting privacy, integrity, and availability of clients PII. Functional knowledge of major ERP suites (like SAP, Dynamics, Oracle EBS) Understanding of audit concepts and regulations Required overall experience in testing/reviewing and implementation of ITGC controls, CoBit 5 and developing COSO framework Candidates with 3-5 years of relevant experience in similar role, preferably with a “Big 4” or equivalent Chartered Accountant (would be added advantage) Certification(s) Preferred CISA / CISM / CRISC / CISSP / ISO 27001 LA certifications Show more Show less

About WorkSpan The next era of growth is being driven by business interoperability. Cloud, genAI, solutions combining services and software- more and more, companies outpace their competition not just through building superior products, but by creating stronger partnerships, paths to market, and better business models for winning together. Cloud providers, service providers, tech partners and resellers are teaming up to win more deals together through co-selling. WorkSpan is building the world’s largest, trusted co-selling network. WorkSpan already has seven of the world’s ten largest partner ecosystems on our platform and $50B of customer pipeline under active management. AWS, Google, Microsoft, MongoDB, PagerDuty, Databricks and dozens of others trust WorkSpan to accelerate and amplify their ecosystem strategies. With a $30M series C and backing from world class investors Insight Partners, Mayfield, and M12, WorkSpan is poised to drive the future of B2B. Come be a part of it. We are seeking an experienced Information Security Manager to serve as our information security leader, advancing WorkSpan's mature security program and building upon our 5+ year track record of successful SOC 2 compliance. Reporting directly to the CISO, you will have comprehensive ownership of our security operations while serving as the subject matter expert for GDPR, ISO 27001, and SOC 2 compliance frameworks. This role requires close collaboration with IT, Site Reliability Engineering, Product, and business stakeholders to translate regulatory requirements into actionable security practices and organizational standards. You will operate as a hands-on security practitioner while providing strategic guidance across the entire security landscape. Key Responsibilities Compliance & Risk Management Optimize and enhance existing SOC 2 Type II and ISO 27001 controls across the organization Conduct comprehensive security risk assessments, identify control gaps, and drive remediation to completion Evolve and maintain Information Security Management System (ISMS) policies and procedures Execute and refine established internal audit processes for various security domains Oversee annual SOC 2 Type II audits, leveraging our many years compliance history, and coordinate third-party penetration testing engagements Stakeholder Engagement Respond to customer security assessment questionnaires and RFPs with technical accuracy Conduct vendor security assessments and manage third-party risk evaluation processes Lead cross-functional security projects requiring coordination among multiple stakeholders Facilitate security awareness training programs for new hires and annual compliance education Operations & Documentation Participate in periodic security testing activities including penetration tests and disaster recovery exercises Lead security incident response activities and remediation efforts as the primary security point of contact Maintain comprehensive documentation of organizational security procedures and controls Ensure audit documentation remains current and compliant with regulatory requirements Monitor security tools and systems, analyzing alerts and implementing improvements Stay current with emerging threats and security technologies to continuously enhance our security posture Education & Experience Bachelor's or Master's degree in Cybersecurity, Information Technology, Computer Science, Systems Engineering, or related discipline 6+ years of hands-on experience implementing and managing regulatory compliance frameworks (GDPR, ISO 27001, SOC 2, NIST, COBIT) Proven track record conducting internal audits and managing external security audit processes Demonstrated ability to work independently and manage multiple priorities in a fast-paced environment Strong hands-on experience with security tools, technologies, and platforms Technical Expertise Deep understanding of information security terminology, concepts, and IT controls across: Risk assessment methodologies and frameworks Identity and access management (IAM) systems Cloud/SaaS security architectures Application security and secure development practices Data loss prevention and classification Network security and systems operations Incident response and management processes Experience leveraging AI tools for information security operations, vendor assessments, and questionnaire automation Leadership & Communication Demonstrated ability to establish trust and credibility with technical teams, executives, and external stakeholders Excellent written and verbal communication skills with ability to translate complex technical concepts for diverse audiences Strong project management capabilities with experience leading complex, multi-stakeholder security initiatives Independent decision-making skills with ability to operate autonomously while maintaining organizational alignment Self-motivated with strong organizational and time management capabilities Ability to be the "go-to" security expert across all domains while building scalable processes for future growth What We Offer The opportunity to be the security leader at a growing SaaS and AI company, building upon our established SOC 2 compliance track record while working with cutting-edge technologies. You'll have significant autonomy and direct influence in evolving WorkSpan's entire security posture and compliance strategy as we scale to the next level. This role offers exceptional visibility and growth potential as you help build the foundation for expanding the securi

Job Title: Risk Reporting Specialist Location: Remote Experience: 10 -15 Years Job Description The Risk Reporting specialist plays a critical role in ensuring effective risk visibility within the Information Security Group (ISG). This position focuses on streamlining the reporting process and leveraging data driven insights and performance tracking to contribute to the bank’s overall risk management strategy. The role involves conducting comprehensive risk analysis and assessments to identify and highlight key information security risks across the bank. The role will focus on developing, maintaining, and enhancing risk reporting frameworks along with driving the creation and tracking of information security risk register, metrics and monitoring Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs), and reporting on emerging risks to ensure timely and informed decision-making. Key Responsibilites A mid senior level officer with sound knowledge and expertise in information security risk management with experience of managing enterprise projects and of direct and in-direct relationship with senior and executive management. Strong experience and knowledge across the Information Security and Cyber Security domains including governance, policy procedures, compliance management, risk management and security incident response etc. Strong experience in Banking environment with strong understanding on key security frameworks such as ISO27001.XX, NIST 800.xx, PCI-DSS, SWIFT CSP, COBIT etc. Strong analytical skills with the ability to interpret complex data and translate it into actionable insights. Proficiency in data analysis tools (Excel, SQL, etc.) and data visualization platforms (Power BI, Tableau, etc.). Strong knowledge of data aggregation, analysis, and reporting techniques. Experience with reporting automation and process optimization tools Strong interpersonal, analytical, and technical skills with strong decision making and prioritization skills. Sound knowledge of evolving advanced tech stacks and related control and risk universe. Sound knowledge and expertise in conducting risk assessment. Have over 10+ years of rich experience in information security domain and at least 2-3 years of dedicated experience in one of the GRC domains (Policy, Governance and Culture, Cyber Strategy & Program Management and Risk and Compliance). Master’s degree in IT/Information Security Show more Show less

At PwC, our people in audit and assurance focus on providing independent and objective assessments of financial statements, internal controls, and other assurable information enhancing the credibility and reliability of this information with a variety of stakeholders. They evaluate compliance with regulations including assessing governance and risk management processes and related controls. In IT audit at PwC, you will focus on helping to assess and evaluate the design and effectiveness of an organisation's IT systems and controls to provide compliance with regulations and mitigate risks. Enhancing your leadership style, you motivate, develop and inspire others to deliver quality. You are responsible for coaching, leveraging team member’s unique strengths, and managing performance to deliver on client expectations. With your growing knowledge of how business works, you play an important role in identifying opportunities that contribute to the success of our Firm. You are expected to lead with integrity and authenticity, articulating our purpose and values in a meaningful way. You embrace technology and innovation to enhance your delivery and encourage others to do the same. Skills Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to: Analyse and identify the linkages and interactions between the component parts of an entire system. Take ownership of projects, ensuring their successful planning, budgeting, execution, and completion. Partner with team leadership to ensure collective ownership of quality, timelines, and deliverables. Develop skills outside your comfort zone, and encourage others to do the same. Effectively mentor others. Use the review of work as an opportunity to deepen the expertise of team members. Address conflicts or issues, engaging in difficult conversations with clients, team members and other stakeholders, escalating where appropriate. Uphold and reinforce professional and technical standards (e.g. refer to specific PwC tax and audit guidance), the Firm's code of conduct, and independence requirements. Manage and direct the work streams related to IT SOX Compliance covering ITGC and IT Dependencies (ITAC, Interfaces, IPE’s). Provide technical support in the assessment, design and implementation of ITGC requirements. Thorough understanding around ITGC domains such as Logical Access, Change Management, SDLC and Computer Operations. Exposure of testing IT Application Controls (Configurable, Non-configurable), Interfaces, IPE’s, Data Migration and Platform Reviews. Review control evidence for adherence to accuracy, completeness and precision of control execution for all ITGC. Develop, implement and test controls for new acquisitions and in-scope entities. Work with control owners and operators to ensure quality, consistency and operability of new and existing controls. Collaborate and build long-term relationships with key stakeholders in a fast-paced and matrixed work environment. Review test findings, facilitate the remediation of ITGC control gaps, and escalate possible critical issues to senior management of client/Onshore teams. Plan and direct the work to team members, monitor their work, and take corrective action when necessary. Coaches, mentors, and develops direct reports, including overseeing new hire onboarding process and providing career development planning and opportunities; maintains a safe, secure, and legal work environment. Builds and maintains strong peer relationships within the team and across the organization. Coordinates work with External Auditors of the client if needed. Manage the Cyber, Risk & Regulatory (Advisory) team and client portfolio to deliver 8,000 to 12,000 of client hours. Interpersonal Skills Ability to work independently under general supervision with latitude for initiative and independent judgment. Effective verbal and written communications, including active listening skills and skill in presenting findings and recommendations. Ability to establish and maintain effective working relationships with co-workers and external contactors/auditors. Detail-oriented & comfortable working on multiple projects simultaneously. Individuals would be expected to cultivate a strong team environment and promote a positive working relationship amongst their team. Excellent communication skills, written and verbal would be expected. Ensure client service delivery in accordance with the quality guidelines & methodologies. Build and maintain client relationships by understanding and being responsive to client needs and ensuring high quality of deliverables. Contribute to people and knowledge development initiatives by developing training material and conducting training. Demonstrate strong analytical thinking and communication skills including the ability to research and understand complex processes and effectively communicate them to interested parties. Demonstrate superior relationship building and relationship management skills. Client Management Develop strong working relationships with the client and onshore teams. Maintain excellent rapport and proactive communication with the stakeholders and clients. Operational excellence Suggest ideas on improving engagement productivity and identify opportunities for improving client service. Manage engagement budgets and ensure compliance with engagement plans and internal quality & risk management procedures. People related Display teamwork, integrity and leadership. Work with team members to set goals and responsibilities for specific engagements. Foster teamwork and innovation. Utilize technology & tools to continually learn and innovate, share knowledge with team members and enhance service delivery. Conduct workshops and technical training sessions for team members. Contribute to the learning & development agenda and knowledge harnessing initiatives Mentor and coach junior team members, enabling them to meet their performance goals and successfully grow their careers. Qualifications we seek in you: Minimum Qualifications Bachelor’s degree in Information Systems, Computer Science Engineering B.E., B. TECH, M. TECH, MCA, BCA, CA, MBA Experience of business experience in technology audit, risk management, compliance, consulting, or information security including acting in the capacity of a supervisor Excellent knowledge of IT General Controls, automated and security controls Knowledge of security measures and auditing practices within various operating systems, databases and applications Experience in auditing financial applications, cyber security practices, privacy and various infrastructure platforms such as Unix, Linus, Windows, SQL Server, Oracle Databases Knowledge and concepts of auditing of cloud platforms (AWS, Azure and Google Cloud) Experience designing continuous auditing and monitoring tools and techniques is a plus. Good understanding of CoBIT 5 Domains of Access Management, SLDC & Change and Computer Operations and Control Design and Testing of SOX IT General Controls (ITGC) and/or IT Application Controls (ITAC) Experience in identifying control gaps and communicating audit findings and control redesign recommendations to Management/Clients Knowledge of regulations impacting privacy, integrity and availability of clients PII. Functional knowledge of major ERP suites (like SAP, Dynamics, Oracle EBS, Peoplesoft) Understanding of audit concepts and regulations Required overall experience in testing/reviewing and implementation of ITGC controls, CoBit 5 and developing COSO framework Candidates with 6-8 years of relevant experience in similar role, preferably with a “Big 4” or equivalent Chartered Accountant (would be added advantage) Certification(s) Preferred CISA / CISM / CRISC / CISSP / ISO 27001 LA certifications Show more Show less

NIKE, Inc. does more than outfit the world's best athletes. It is a place to explore potential, obliterate boundaries and push out the edges of what can be. The company looks for people who can grow, think, dream and create. Its culture thrives by embracing diversity and rewarding imagination. The brand seeks achievers, leaders and visionaries. At NIKE, Inc. it's about each person bringing skills and passion to a challenging and constantly evolving game. NIKE is a technology company. From our flagship website and five-star mobile apps to developing products, managing big data and providing leading edge engineering and systems support, our teams at NIKE Global Technology exist to revolutionize the future at the confluence of tech and sport. We invest and develop advances in technology and employ the most creative people in the world, and then give them the support to constantly innovate, iterate and serve consumers more directly and personally. Our teams are innovative, diverse, multidisciplinary and collaborative, taking technology into the future and bringing the world with it. Who Are We Looking For We're looking for an Information Security Analyst to join Nike's Corporate Information Security Governance, Risk, and Compliance (GRC) team, which is responsible for enterprise wide GRC ensuring Nike leadership has the information needed to make strategic risk-based decisions and maintain compliance with international regulations while enabling the achievement of Nike business objectives globally. This role will meet with business and technology teams across Nike and consult with them on their security and compliance requirements. We are looking for an individual who is passionate about GRC, someone with a good working knowledge of industry best practice frameworks, such as ISO, NIST and CoBIT. What Will You Work On If this is you, you'll be working with the GRC team and performing these key tasks: Assess moderately complex platforms against Nike security and configuration standards Evaluate and process exceptions to information security policies and standards Participate in complex internal risk assessments, identifying information security risks through analysis of threats and vulnerabilities, and reporting on those risks to Nike business and technology owners Perform risk assessments of critical third-party vendors and ensure the business objectives align with the type and volume of data used in maintaining a "need to know/use" mindset Utilize your thorough understanding of ITGC's to consult with Technology units on compliance matters Champion information security policies, standards, controls, and processes so that compliance requirements are addressed as part of "business as usual" operations Lead Nike business units in control design and control operations related in support of compliance requirements Perform Compliance control validation testing to determine the operating effectiveness of IT controls for scoped systems Provide analysis and insights into data supporting the effectiveness of technical and process-based cyber security controls and establish automated data pipelines that feed data visualization tools, such as Tableau Collaborate effectively with NIKE leaders, managers, employees, and partners to provide deliberate and thoughtful engagement throughout NIKE Help drive execution of the Information Security training programs. Ensure the workforce stays fully informed on information security through formal trainings and oversee the development and delivery of security training and awareness campaigns Effective, positive verbal and written communication skills and experienced creating and developing high-quality PowerPoint presentations Who Will You Work With You will report into the Governance, Risk and Compliance - India Technology Center Director , in support of global GRC processes and procedures, and will work cross-functionally within the Corporate Information Security (CIS) teams and across Nike. You will regularly meet with Nike business and technology teams. What You Bring Knowledge of information security principles and practices, general procedures and guidelines A general understanding of technology use, trends and risks as it applies in a business context and environment Experience reviewing third party SOC reports Experience/working knowledge with PCI DSS (Former QSA is a benefit). Knowledge of information security principles, frameworks, and best practices (e.g., PCI DSS, COBIT, COSO, NIST and ISO 27000) Excellent collaboration skills - must be eager to work as part of a cohesive team and work as a partner to others within Nike, Inc. both at WHQ and globally Experience with ServiceNow, Confluence or JIRA Show more Show less

Job Overview As an Enterprise Architect, you will lead the design and implementation of a robust enterprise-wide architecture strategy, aligning IT and business objectives. The role requires a deep understanding of industry best practices, including TOGAF architectural principles, and a proactive approach to ensuring technology investments deliver measurable business outcomes. You will oversee the organizations digital transformation journey, focusing on scalability, performance, security, and innovation. Key Responsibilities Strategy & Framework Development Develop a comprehensive Enterprise Architecture Roadmap to support business goals and future scalability. Define, document, and enforce TOGAF-based architectural principles, ensuring alignment with business and IT strategies. Identify and address gaps in the current architecture, aligning solutions with enterprise standards. Technology Evaluation & Adoption Assess emerging technologies for potential business value and alignment with enterprise needs. Develop technology adoption strategies with a focus on cloud-native architectures, AI/ML, and data-driven systems. Ensure the adoption of modular, flexible, and scalable platforms to accommodate future growth. Solution Design & Delivery Collaborate with teams to design solutions adhering to principles like : . Business Continuity : Ensure fault tolerance and high availability. Technology Reusability : Promote reusable components and modular designs. Interoperability : Integrate solutions across departments and business units seamlessly. Data Privacy & Security : Embed robust security protocols and compliance mechanisms. Oversee the implementation of solutions, ensuring adherence to architectural standards. Governance & Compliance Define and enforce enterprise-wide governance frameworks to manage risks, costs, and compliance. Establish review boards and architecture review processes to monitor adherence to standards and principles. Regularly update architecture standards to reflect changes in regulations, technologies, and business priorities. Stakeholder Collaboration & Communication Partner with business leaders to understand strategic objectives and translate them into actionable technical plans. Act as a bridge between technical and non-technical teams, ensuring alignment and clarity. Provide guidance to project teams, aligning them with enterprise goals and best practices. Performance Optimization & Continuous Improvement Monitor the performance of existing architectures and recommend optimizations for improved efficiency. Foster a culture of continuous learning by introducing best practices and innovative technologies. Drive enterprise-wide Agile and DevOps practices, enhancing delivery timelines and quality. Talent Development & Mentorship Provide technical mentorship to solution architects and IT teams. Conduct regular training sessions on architecture frameworks, tools, and methodologies. Develop succession planning strategies to nurture internal talent pipelines. Key Result Areas (KRAs) : of IT and Business Goals : Ensure technology strategies directly support business priorities. Enterprise Architecture Maturity Achieve measurable improvements in architecture governance and adoption across the organization. Cost Optimization Identify opportunities to reduce IT costs through efficient architecture and vendor consolidation. Operational Excellence Deliver consistent, scalable, and high-performing enterprise solutions. Risk Management Mitigate risks related to technology, compliance, and scalability. Innovation Adoption Drive adoption of emerging technologies and best practices to maintain competitive advantage. Qualifications. Education. Bachelors or Masters degree in Computer Science, Information Systems, or related fields. Experience. 10+ years of experience in IT architecture, with at least 5 years as an enterprise architect. Proven track record in leading digital transformation initiatives and technology modernization projects. Certifications TOGAF Certified (Foundation & Practitioner) or equivalent. Cloud certifications (e. , AWS Solutions Architect, Azure Architect). ITIL, COBIT, or PMP certification is a plus. Skills & Expertise Proficiency in enterprise architecture frameworks (TOGAF, Zachman, Gartner EA). In-depth knowledge of cloud computing, microservices, APIs, and containerization. Expertise in enterprise tools : EA repositories, ITSM tools, and DevOps toolchains. Strong analytical, communication, and problem-solving abilities. (ref:hirist.tech) Show more Show less

POSITION SUMMARY STATEMENT: This role is a global role that will support the Internal Controls and SOX Compliance Sr. Director in the scoping, design, and support of IT related controls. This position will be key in supporting Herbalife s integrated approach to the internal control environment. Candidates must possess a strong knowledge of the underlying principles for scoping and designing controls including a solid working knowledge of the COBIT, COSO, and NIST frameworks. Candidates must be excellent communicators skilled at influencing without authority and partnering with key stakeholders across the business. DETAILED RESPONSIBILITIES/DUTIES: Assist in the completion of the annual enterprise IT risk assessment to ensure appropriate scoping and risk mitigation and support the enterprise s integrated internal control environment. Work with application owners to document IT SOX narratives and related workflow diagrams. Work with control owners to identify, design and conduct the management assessment of IT application controls, Key Reports and General IT Controls. Support control owners in the preparation and execution of the annual SOX testing plan. Review, assess, and evaluate reported deficiencies, root causes, and planned corrective actions. Review and assess significance of reported deficiencies and identify compensating controls. Coordinate with the IT system owners in the implementation and improvement of controls and processes including the design, update and streamlining of the IT control environment. Provide support and assistance to groups performing SOX functions throughout the Company. Establish and maintain good working relationship with business groups and help address internal control related issues. Assess processes, risks, and controls to identify control gaps and improvement opportunities. Support process improvement and control optimization projects. Providing advice and counsel to management on internal controls including SOX and cybersecurity. Skills: Required Solid understanding of SOX testing methodologies, risk assessment practices, and the COBIT, COSO, and NIST frameworks Experience in Oracle Ability to effectively work in cross functional teams Solid ability to analyze problems to identify the root cause and propose workable solutions Strong oral and written communication skills Able to multi-task and organize Able to prioritize and meet (formal and self-imposed) due dates with minimal supervision Self-reliant and has initiative to carry out assigned tasks or improve processes Able to independently solve practical problems Strong proficiency in Excel, Word, PowerPoint and Visio Able to work in team environment Maintain positive attitude and influence Able to maintain professionalism at all times Experience: Required 5+ years SOX, internal or external audit Big 4 Accounting or publicly traded company International or Fortune 500 company Experience in planning, project management, and analysis Strong work ethic and capacity, ability to work collaboratively with a sense of urgency and commitment Education: Bachelor s Degree in Information Systems, Accounting, Finance, or equivalent CISA

Risk Management Develop and implement risk assessment models and frameworks. Identify potential threats and vulnerabilities and assess their potential impact on business operations. Monitor and report on risk indicators, risk appetite thresholds, and key risk metrics. Collaborate with cross-functional teams to develop risk mitigation plans. Compliance Management Ensure the MSIL s compliance with legal, regulatory, and internal policy requirements. Conduct regular audits and compliance reviews; report findings and recommend corrective actions. Stay up to date on relevant laws, regulations, and best practices (e.g., NIST, CSI, xx). Develop, implement, and maintain compliance training programs for employees. Incident Response Reporting Liaise with Security Operation Team, IT Team, IS Governance Team and contribute towards investigation, compliance breaches and risk incidents. Liaise with Information Cybersecurity Incident Response Team, perform root-cause analysis, and implement corrective actions. Prepare regular risk and compliance reports for executive leadership and the MSIL Board. Skill Requirements 1.Cybersecurity Fundamentals 2.IT Infrastructure Knowledge 3. Risk Assessment frameworks Tools - Proficiency in tools like RSA Archer, ServiceNow GRC, or MetricStream. 4. Data Privacy Protection - Knowledge of data handling standards like GDPR, HIPAA, and ISO/IEC 27001. 5. Regulatory Frameworks - Deep understanding of SOX, PCI-DSS, NIST, COBIT, and other relevant standards 6.Audit Management - Ability to conduct internal audits, manage external audits, and respond to findings. 7.Policy Development - Experience in drafting, implementing, and updating IT compliance policies.4. Assertiveness and negotiation skill 8.Problem-Solving and Decision-Making 9.Communication - Clear reporting to stakeholders and translating technical risks into business language. 10.Managing cross-functional teams and training staff on compliance best practices.

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Cyber Governance Risk and Compliance Consultant - Senior The opportunity This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, designing security and privacy controls, advising client stakeholders, facilitating workshops and supporting business development. Your Key Responsibilities As a Cyber GRC Professional in our Cyber Security practice, you will be occupied in the following domains: a) Strategy, b) Risk, c) Compliance. As part of our team strategy you will be expected to take on responsibility and initiative early, providing you with real experience working with a wide range of major clients in EY. You will be taking responsibility for the quality of your work, while continually developing your personal and professional skills through formal training, hands-on experience and coaching. Skills And Attributes For Success To qualify for the role, you must have: Degree, or equivalent, in Information Security, Cyber Security, Information Technology, Informatics, or other similar and technical areas Evidence of self-motivation to continuously develop in the areas of cybersecurity Good organizational and time management skills with the ability to prioritize and complete multiple complex projects under tight deadlines Ability to translate security issues into business risks Excellent interpersonal skills and ability to work effectively within a team at all hierarchical levels Willingness to research client inquiries and emerging issues, including regulations, industry practices, and new technologies Experience, knowledge and strong interest in information and cyber security domains are essential for this role Experience on Cyber Governance, Risk & Compliance (GRC), Cyber risk assessments & management methodologies Experience on assessing, designing and implementing security strategies, governance frameworks over processes and controls, allowing organisations to optimally manage cyber security Experience on design and implementation of security policies, procedures, standards and controls in line with regulation and/or current standards, such as ISO27001, NIST, SANS etc. Experience in data classification exercises and controls / mechanisms enforcement Working knowledge of control frameworks such as ISO 27001/27002, COBIT, NIST, ITIL, etc. Ability to conduct Security regulatory and compliance assessment independently Hands on with assessment report preparation and presenting to senior technical and business stakeholders Hand on knowledge of excel, PowerPoint and word Articulative and confident in presentation to senior stakeholders Ability to lead workstreams or dedicated portions of projects Cyber maturity assessments, recommendations, roadmap and strategy creation knowledge of use of and risks related to modern and emerging technologies Cybersecurity audit Ability to plan and deliver cyber security training and awareness Ideally, you’ll also have: Security-related qualifications / certifications such as CISSP, SSCP, CISM, ISO27001 lead implementer or auditor, CompTIA Security+, are desirable Experience in Third Party Risk Management (TPRM) and / or vendor risk assessment engagements Experience in design and implementation of Information Security Management Systems (i.e. security policies, procedures and guidelines) according to leading International Standards Security-related vendor / technology certifications are desirable EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Cyber Risk and Compliance Consultant - Senior The opportunity This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, designing security and privacy controls, advising client stakeholders, facilitating workshops and supporting business development. Your Key Responsibilities As a Cyber GRC Professional in our Cyber Security practice, you will be occupied in the following domains: a) Strategy, b) Risk, c) Compliance. As part of our team strategy you will be expected to take on responsibility and initiative early, providing you with real experience working with a wide range of major clients in EY. You will be taking responsibility for the quality of your work, while continually developing your personal and professional skills through formal training, hands-on experience and coaching. Skills And Attributes For Success To qualify for the role, you must have: Degree, or equivalent, in Information Security, Cyber Security, Information Technology, Informatics, or other similar and technical areas Evidence of self-motivation to continuously develop in the areas of cybersecurity Good organizational and time management skills with the ability to prioritize and complete multiple complex projects under tight deadlines Ability to translate security issues into business risks Excellent interpersonal skills and ability to work effectively within a team at all hierarchical levels Willingness to research client inquiries and emerging issues, including regulations, industry practices, and new technologies Experience, knowledge and strong interest in information and cyber security domains are essential for this role Experience on Cyber Governance, Risk & Compliance (GRC), Cyber risk assessments & management methodologies Experience on assessing, designing and implementing security strategies, governance frameworks over processes and controls, allowing organisations to optimally manage cyber security Experience on design and implementation of security policies, procedures, standards and controls in line with regulation and/or current standards, such as ISO27001, NIST, SANS etc. Experience in data classification exercises and controls / mechanisms enforcement Working knowledge of control frameworks such as ISO 27001/27002, COBIT, NIST, ITIL, etc. Ability to conduct Security regulatory and compliance assessment independently Hands on with assessment report preparation and presenting to senior technical and business stakeholders Hand on knowledge of excel, PowerPoint and word Articulative and confident in presentation to senior stakeholders Ability to lead workstreams or dedicated portions of projects Cyber maturity assessments, recommendations, roadmap and strategy creation knowledge of use of and risks related to modern and emerging technologies Cybersecurity audit Ability to plan and deliver cyber security training and awareness Ideally, you’ll also have: Security-related qualifications / certifications such as CISSP, SSCP, CISM, ISO27001 lead implementer or auditor, CompTIA Security+, are desirable Experience in Third Party Risk Management (TPRM) and / or vendor risk assessment engagements Experience in design and implementation of Information Security Management Systems (i.e. security policies, procedures and guidelines) according to leading International Standards Security-related vendor / technology certifications are desirable EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Cyber Risk and Compliance Consultant - Senior The opportunity This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, designing security and privacy controls, advising client stakeholders, facilitating workshops and supporting business development. Your Key Responsibilities As a Cyber GRC Professional in our Cyber Security practice, you will be occupied in the following domains: a) Strategy, b) Risk, c) Compliance. As part of our team strategy you will be expected to take on responsibility and initiative early, providing you with real experience working with a wide range of major clients in EY. You will be taking responsibility for the quality of your work, while continually developing your personal and professional skills through formal training, hands-on experience and coaching. Skills And Attributes For Success To qualify for the role, you must have: Degree, or equivalent, in Information Security, Cyber Security, Information Technology, Informatics, or other similar and technical areas Evidence of self-motivation to continuously develop in the areas of cybersecurity Good organizational and time management skills with the ability to prioritize and complete multiple complex projects under tight deadlines Ability to translate security issues into business risks Excellent interpersonal skills and ability to work effectively within a team at all hierarchical levels Willingness to research client inquiries and emerging issues, including regulations, industry practices, and new technologies Experience, knowledge and strong interest in information and cyber security domains are essential for this role Experience on Cyber Governance, Risk & Compliance (GRC), Cyber risk assessments & management methodologies Experience on assessing, designing and implementing security strategies, governance frameworks over processes and controls, allowing organisations to optimally manage cyber security Experience on design and implementation of security policies, procedures, standards and controls in line with regulation and/or current standards, such as ISO27001, NIST, SANS etc. Experience in data classification exercises and controls / mechanisms enforcement Working knowledge of control frameworks such as ISO 27001/27002, COBIT, NIST, ITIL, etc. Ability to conduct Security regulatory and compliance assessment independently Hands on with assessment report preparation and presenting to senior technical and business stakeholders Hand on knowledge of excel, PowerPoint and word Articulative and confident in presentation to senior stakeholders Ability to lead workstreams or dedicated portions of projects Cyber maturity assessments, recommendations, roadmap and strategy creation knowledge of use of and risks related to modern and emerging technologies Cybersecurity audit Ability to plan and deliver cyber security training and awareness Ideally, you’ll also have: Security-related qualifications / certifications such as CISSP, SSCP, CISM, ISO27001 lead implementer or auditor, CompTIA Security+, are desirable Experience in Third Party Risk Management (TPRM) and / or vendor risk assessment engagements Experience in design and implementation of Information Security Management Systems (i.e. security policies, procedures and guidelines) according to leading International Standards Security-related vendor / technology certifications are desirable EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

At PwC, our people in risk and compliance focus on maintaining regulatory compliance and managing risks for clients, providing advice, and solutions. They help organisations navigate complex regulatory landscapes and enhance their internal controls to mitigate risks effectively. As a risk management generalist at PwC, you will provide advisory and practical support to teams across a wide range of specialist risk and compliance areas. Focused on relationships, you are building meaningful client connections, and learning how to manage and inspire others. Navigating increasingly complex situations, you are growing your personal brand, deepening technical expertise and awareness of your strengths. You are expected to anticipate the needs of your teams and clients, and to deliver quality. Embracing increased ambiguity, you are comfortable when the path forward isn’t clear, you ask questions, and you use these moments as opportunities to grow. Skills Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to: Respond effectively to the diverse perspectives, needs, and feelings of others. Use a broad range of tools, methodologies and techniques to generate new ideas and solve problems. Use critical thinking to break down complex concepts. Understand the broader objectives of your project or role and how your work fits into the overall strategy. Develop a deeper understanding of the business context and how it is changing. Use reflection to develop self awareness, enhance strengths and address development areas. Interpret data to inform insights and recommendations. Uphold and reinforce professional and technical standards (e.g. refer to specific PwC tax and audit guidance), the Firm's code of conduct, and independence requirements. Candidates require experience and knowledge in the following key areas: Cybersecurity Risk identification and security control integration as part of Cloud transformation and enterprise infrastructure Cloud security principles, cloud governance and cloud computing concepts in context of cloud infrastructure and/or cloud applications. Required previous experience includes cloud security audits/reviews, and assessments and/or design of cloud infrastructure. Experience with cloud solutions such as MS Azure or AWS Cloud is preferred. Experience of performing assessment using NIST CSF, ISO 27xxx, NIST 800-53. Implementation and/or assurance experience with IT governance frameworks (e.g. COBIT, NIST, ISO) Experience based knowledge of commonly used operating systems, security devices and their hardened configuration with operational knowledge of Identity and Access management using AD/Azure AD Experience in researching attempted breaches of data security, rectifying security weaknesses and vulnerability reviews. Knowledge of data protection regulations and security standards/frameworks Hands-on skills in WAF, DLP, Security Certificate Management, EDR, DNS Filtering, Identity & Access Management and Spam Filtering. Experience of having worked on implementation or assessment of the Information Security Management System of world class enterprises. Candidates require strong leadership skills working in dynamic and cross-functional teams for large-scale and multi-national engagements with excellent communication skills. Provide high performance (e.g. clear vision/objectives/purpose, open communication, promoting flexibility, collaboration and accountability) to deliver high quality to clients and a rewarding experience to staff Demonstrable ability to assist in management of multiple client projects simultaneously Technical designations such as CISSP, CISA, CRISC, CEH, CGEIT, PCI QSA, CIPP / C, TOGAF, or CISM. Education in the domain of Information Security, Computer Science, Engineering, Cybersecurity Experience in working in a consulting environment would be an asset. A demonstrated commitment to valuing differences and working alongside diverse people and perspective Show more Show less

Job Description: As the Risk & Control Register Senior Specialist within the AT&T Technology Risk team, you will be responsible for maintaining the risk and control register for AT&T Technology Services (ATS). Increasing levels of regulatory requirements demand additional risk management rigor, and we must implement highly resilient, dependable, and effective solutions that meet and, in some cases, exceed performance standards found in other information rich industries. Reporting to AT&T’s Director of Technology Risk Identification and Assessment, you will ensure that our risk and control registers accurately reflect the current technology risk environment. You will collaborate with stakeholders across Technology Risk (e.g., program and risk lead teams) to monitor and update the registers. In addition, you will have the opportunity to engage in strategic initiatives which further our ability to strengthen Technology Risk’s capabilities. You will be part of a team working to ensure that AT&T has the right methodologies, processes, technology, and reporting capabilities to enable effective insight into technology risks and provide senior leadership with areas of heightened residual risk exposure. Responsibilities: Document technology risks and controls in the applicable registers. Regularly coordinate with stakeholders across Technology Risk (US and India) for efficient intake and updates to registers. Provide input to GRC team on risk and control register business requirements. Identify enhancement opportunities in related areas (assessments, taxonomies, etc.). Monitor registers for accuracy and completeness. Participate in strategic initiatives related to Technology Risk. Qualifications: 8+ years of work experience in technology, operational risk management, or a related discipline at a global company. 8+ years of work experience in risk, control, and governance disciplines (e.g., Risk Management, Audit, Information Security, Regulatory Compliance). 5+ years of direct experience with risk and control documentation. Strongly rated skills in: Documentation, Verbal and written communication, Organization, Critical thinking, Team organization. Experience with the following technologies preferred: ServiceNow GRC capabilities (e.g., Integrated Risk Management). Knowledge of information and technology risk management policies, methods, standards, frameworks, tools, and processes (e.g., COBIT, NIST, ITIL) as well as knowledge of compliance, legal, internal / external audit & regulatory requirements (e.g., SOX, PCI). Effective at navigating large corporations and governance structures. Ability to work collaboratively and contribute to high performing teams. Bachelor’s degree in any discipline. Weekly Hours: 40 Time Type: Regular Location: Hyderabad, Andhra Pradesh, India It is the policy of AT&T to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, AT&T will provide reasonable accommodations for qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made. Job ID R-67098 Date posted 05/15/2025 Benefits Your needs? Met. Your wants? Considered. Take a look at our comprehensive benefits. Paid Time Off Tuition Assistance Insurance Options Discounts Training & Development

Main Purpose of Job Inchcape Shipping Services is currently in the process of a large-scale, multi-year digital transformation program. As part of this, we are looking for a candidate to manage the early life support model to ensure a smooth transition into production. This is a crucial and fulfilling role - we are on a fascinating journey and need a visionary, strategic thinker to manage and run our early life support team. An exciting challenge for the role will be to engage our transformation teams and customers to ensure a fit-for-purpose hypercare model can be deployed to deliver the applications into production at speed. As the Hypercare Application Support Analyst, you will oversee service support, specifically investigation and identifying problems and reporting on defects within the hypercare process, and engaging with product and development teams to ensure products are in a fit state to transition into business-as-usual support. This is a great opportunity to work with a technology portfolio that’s modern and constantly developing, furthering your knowledge of AI, Cloud, Big Data, and other emerging technologies. You will be joining a business where collaboration, knowledge sharing, and growth are valued, and your input will be listened to. This is an exciting, dynamic role that requires agility of thought, adaptability, with the ability to turn technical solutions and jargon into plain language for staff and communications. Role Requirements Acting as the primary subject matter expert for hypercare critical business applications, for day-to-day operations, troubleshooting complex issues, and ensuring the smooth functioning of applications by proactively identifying and resolving potential problems, while collaborating closely with other IT teams and business stakeholders to align application support with strategic goals. Deep understanding of specific business applications, including their functionalities, architecture, data flows, and integration points, acting as the go-to person for complex technical issues. Excellent in applying analytical, logical, and systematic troubleshooting skills to diagnose complex technical issues and identify root causes. Follow the process of identifying, investigating, and resolving critical application issues, including escalation to higher-level support or vendors when needed. Implement and oversee application monitoring systems to proactively detect potential issues and take preventative measures to minimize downtime. Collaborate with development teams on application updates and deployments, ensuring a smooth transition and minimal disruption to users. Develop and maintain comprehensive application documentation, including user guides, troubleshooting procedures, and knowledge base articles. Act as a liaison between the hypercare application support team and business stakeholders, understanding their needs and communicating effectively regarding application issues and updates. Monitor key performance indicators (KPIs) related to application uptime, resolution times, and user satisfaction to identify areas for improvement. Available out of hours for incident support and changes such as deployments and hotfixes. Strong verbal and written communication skills to effectively interact with technical teams, business users, and senior management. Participating in application upgrades, patches, and releases, ensuring smooth transition and minimal disruption to users. Working closely with application developers to communicate user feedback, report bugs, and contribute to application improvements. Excellent verbal and written communication to effectively explain technical concepts to non-technical users and collaborate with cross-functional teams Ability to provide exceptional customer service to end-users, addressing their concerns promptly and professionally . Key Deliverables Provide support to new products during pilot, go-live, and handover to BAU support. Document run-books ready for handover. Assist in entry and exit criteria for hypercare. Ensure that services can be managed, operated, and supported in accordance with constraints specified during the service design stage of the service lifecycle. Manage service components to ensure they meet business needs and performance targets. Contribute to the implementation of remedies and preventative measures. Investigate problems in systems, processes, and services, with an understanding of the level of a problem (for example, strategic, tactical,l or operational) Identify process optimisation opportunities with guidance and contribute to the implementation of proposed solutions. Essential 5 Years of ITIL Experience – In Incident, Problem, and Change processes. 7+ years of experience in IT Application Support and Service delivery Excellent written and verbal communication and negotiation skills, including the ability to relate effectively. to users at all levels, and careful attention to detail.Flexible In meeting the demands of the role, as the role may involve some evening and occasional weekend work, as well as being on call for incident management. Experience in creating and maintaining a project plan Excellent analysis and problem-solving skills Knowledge on SAAS integration Expertise in PostgreSQL and SQL Server. Exposure to any middleware platforms like MuleSoft, WebMethods, or Dell Boomi will be an added advantage. Agile product management tools like Jira, Confluence, etc. Education to degree level or able to offer the equivalent in terms of professional training and experience. This role requires out-of-hours support and on-call. Desirable Knowledge of the shipping/port agency domain. IT application Early Life Support experience. Experience in global organizations and services. IT partner/vendor management. Experience in Zoho Service Desk. Accreditation or qualification in a computing discipline. Have demonstrable experience and aptitude in working in a matrix organisation where effective and robust negotiating and influencing skills are used successfully while maintaining good working relationships with members of that organisation. Sufficient technical background to understand the different architectures of the core systems, and to understand the impact of new technologies; experience with enterprise-level applications will be an advantage. Six Sigma/Lean Green Belt. COBIT certified. ITIL Certification Show more Show less

IT Audit Consultant Clark Schaefer Consulting a division of Clark Schaefer Hackett At Clark Schaefer Consulting, a division of Clark Schaefer Hackett, we pride ourselves on delivering impeccable accounting, operational, control, and technology services to our high-profile clientele, comprised of public and private entities. We are acknowledged for our unwavering commitment to excellence, marked by a proven track record as trusted advisors effectuating transformative results. Guided by our cornerstone values of integrity, quality, respect, and innovation, we provide consistent and superior service to our clients while also nurturing these values within our team. This role allows the flexibility of remote working, primarily serving clients across Ohio, Kentucky, and Indiana, with potential engagement on a national scale. While occasional travel might be required, it is more an exception than a norm. If you seek an enriching experience that values diversity, encourages personal growth, and welcomes you to an esteemed community, look no further. We invite skilled professionals to join our IT Risk & Cybersecurity team and help us further our exceptional work. Responsibilities Engage with diverse organizations of varying sizes across multiple industries. Deliver consulting and audit services related to IT and cybersecurity to meet specific engagement requirements. Support audit project plan, methodology, and work program development. Conduct IT audits in accordance with established audit plans. Evaluate the design and effectiveness of IT and information security controls. Identify areas of potential risk and recommend corrective actions or enhancements to mitigate risks. Prepare comprehensive audit reports detailing findings, recommendations, and management responses. Lead control walkthroughs, clearly document test procedures/results, and effectively communicate audit progress and findings. Commit to continual professional development and continuous growth. Collaborate effectively with a team of high-caliber professionals to complete assignments and deliver top-quality work. Advise clients on state and federal agency security and privacy requirements. Stay current and adaptable with emerging technologies within the cybersecurity domain. Competencies Exceptional problem-solving abilities, with a knack for thinking on your feet. Strong communication skills, with an ability to explain complex concepts to non-technical stakeholders. Team player, able to work collaboratively with diverse team members and clients. Adaptable and flexible in the face of changing client needs or new information. Self-driven in a remote working environment. Education / Work Experience A Bachelor’s degree in IT, Cybersecurity, or a related field is preferred. Minimum of 1-3 years of experience in IT Auditing. Demonstrable experience with security and compliance frameworks such as COBIT, SOX, MAR, NIST, ISO 27001/2, FFIEC, etc. Highly Desirable Certifications CISA (Certified Information Systems Auditor), CRISC (Certified in Risk and Information Systems Control), CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager) Location - Mumbai (Goregaon) Working days - Monday to Friday (Hybrid) Working hours - 12:00 noon-9:00pm Show more Show less

Job Description: Cyber Maturity Assessment Consultant Team: Security Consulting Designation : Cyber Maturity Assessment Consultant Job Role: Run Cybersecurity Maturity Assessments (CMA/SMA) and risk evaluations for customers, aligned with industry frameworks to enhance client security posture and operational resilience. Experience: 5+ years in cybersecurity consulting, focused on cyber maturity assessments, risk management, and compliance programs. Job Location: Cyberjaya Shifts : Day Shift. However, flexibility is required to provide extended support and be available on-call when needed. Key Responsibilities Cyber Maturity & Risk Assessments  Conduct comprehensive CCyber Maturity Assessments for clients, aligned with frameworks such as NIST CSF, ISO 27001, CMMI, and COBIT.  Perform risk assessments—both qualitative and quantitative—to prioritize vulnerabilities and recommend mitigation strategies.  Evaluate third-party and supply chain security exposures. Strategy & Advisory  Analyse and Discover gaps in the Cybersecurity Technologies, People and Processes for clients.  Develop cybersecurity roadmaps to improve clients’ maturity and governance structures.  Recommend enhancements to cyber operating models and organizational alignment.  Deliver executive-level reports and gap analyses with clear business impact insights. Client Engagement & Training  Facilitate workshops to train clients on cybersecurity best practices and self-assessment techniques.  Mentor junior consultants on methodologies, report creation, and client communication.  Support business development initiatives, including proposal writing and client presentations. Compliance & Certification  Provide guidance for ISO 27001/20000-1 certification and audit readiness.  Ensure alignment of security programs with standards like NIST 800-30 and ISO 27005. Work Experience  5+ years of hands-on experience in cybersecurity consulting.  Demonstrated history of executing cyber maturity reviews and third-party risk assessments.  Demonstrated success in leading end-to-end client engagements, from scoping to delivery of assessment reports.  Proven ability to work cross-functionally with IT, Risk, and Compliance teams to align cybersecurity efforts with business priorities.  Delivered executive-level briefings translating technical assessment findings into strategic, business-aligned recommendations. Qualifications  Bachelor’s/Master’s degree in Cybersecurity, Information Security, or a related field. Essential Technical Skills  In-depth understanding of NIST CSF, NIST RMF, COBIT, ITIL, and ISO 31000.  Familiarity with cybersecurity governance models and risk assessment tools. Certifications  CRISC, ISO 27001 LA, CC (ISC)², or equivalent certifications. Desired Skills  Strong analytical, communication, and presentation skills.  Experience in financial services, insurance, or critical infrastructure sectors.  Ability to lead and mentor team members effectively. Performance Metrics  Client satisfaction scores and feedback.  Number and quality of assessments completed annually.  Contributions to proposals and business development success. Skills: mentoring,auditing,nist csf,cybersecurity governance models,nist 800-30,risk management,risk assessment tools,risk,cybersecurity,cmmi,maturity assessments,security,qualitative risk assessments,cybersecurity technologies,iso 27001 certification guidance,compliance programs,iso 27005,cybersecurity roadmaps,assessment,cobit,analytical skills,iso 27001/20000-1 certification,risk assessment,cybersecurity roadmap development,ccyber maturity assessments,cybersecurity maturity assessments,communication skills,security assurance,training,iso 27001,nist rmf,quantitative risk assessments,cyber,presentation skills,cybersecurity training Show more Show less

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. SAP Controls Review (SAP ITGC and SAP ITAC) – Manager As part of our Technology Risk team, you will be part of the team performing IT Audits (IT General Controls and IT Application Control testing) delivering audit and control review services for various clients across the MENA region. An important part of your role will be to actively establish, maintain and strengthen internal and external relationships. You’ll also involve in identifying potential business opportunities for EY within existing engagements and escalate these as appropriate. Similarly, you’ll anticipate and identify risks within engagements and share any issues with senior members of the team. The opportunity We’re looking for Managers with expertise in SAP Controls Review to join the group of our IT Audit team. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of our service offering. Your Key Responsibilities Manage and lead a team of staff and seniors on SAP control review projects, ensuring adherence to project timelines and quality standards. Leading the team members with the SAP related queries, latest updates on relevant applicable standards. Preparing and sharing the proposal & pursuits for SAP engagements. Regular connects with onshore counterparts to ensure the deliverables are meeting expectations & standards, creating opportunities basis skill sets. Perform control testing for both ITAC & ITGC as per the client scope and requirement. Contribute to the Risk Consulting team as a key member and assist with facilitating practice wide training (SAP ITGC/ SAP ITAC /SAP Pre & Post Implementation) curriculum. Work closely with onshore, cross-functional teams and develop strong relationships across the organization, especially with Onsite team. Stay updated with and promote awareness of updated ERP versions & its functionalities, industry best practices. Active team member executing project management/ stakeholders’ management (Client, Assurance, onshore) Provide quality deliverables with value addition on the engagements and is known as SMR across organization. Skills And Attributes For Success Candidate must have minimum 8 – 12 years of experience in SAP IT Audit with knowledge of IT governance practices. Should have completed at least 5-6 Risk & Control engagements covering pre-& post implementation reviews, assessments, control design and testing for SAP ECC and/or S4 HANA landscape. Perform SAP audits, focusing on system integrity and data accuracy. Design and assess SAP S4 controls, identifying gaps and recommending improvements. Familiarity with key business process such as Order To Cash, Procure To Pay, and Record To Report and utilize functional knowledge of key business processes to enhance control frameworks. Experience in reviewing and testing of SAP S4 Hana / SAP ECC IT general controls (ITGC) for key domains such as access management, change management, computer operations, SDLC (System Development Life Cycle) Experience in reviewing and testing SAP S4 Hana / SAP ECC security & configurations such as debugging, client settings, etc. Experience in performing pre & post implementation reviews in SAP S4 Hana / SAP ECC environment and have been through S4 Hana/ ECC lifecycle & performing migration testing. Knowledge and understanding of the T-Code, tables used to extract the data from SAP S4 Hana / SAP ECC with relation to ITGC and ITAC testing. Knowledge and understanding of SAP S4 Hana / SAP ECC user access security architecture (Roles, profiles, Authorization objects) Experience in testing of firefighter controls in SAP S4 Hana / SAP ECC and GRC. Experience in reviewing and testing the Operating System (OS) and Hana Database (DB) controls in SAP S4 Hana / SAP ECC environment. Experience of working with other SAP applications such as GRC, Fiori, BW, BI, Ariba, Concur, Success Factor, VIM, Vistex. Experience in evaluation and testing of sensitive access and SOD (Segregation of Duties) across key business and IT process in SAP S4 Hana / SAP ECC and GRC environment. Experience in SAP GRC access control (AC) & process control (PC), financial compliance management (FCM). Experience in performing the walkthrough (Test of design) directly with the client, Operating Effectiveness and have knowledge of the financial statement’s assertions. Experience in reviewing and interpretation the ABAP codes with relation to the control testing for ITGC’s and ITAC’s in SAP S4 Hana / SAP ECC environment. Experience in reviewing and testing the key reports ensuring the risks (completeness & accuracy) related to IPE’s (Information Produced by Entity) are addressed. Knowledge of SAP S4 Hana / SAP ECC standard functionalities in relation to business and IT controls. Experience in reviewing and testing the key business process configurations (ITAC’s) in SAP S4 Hana / SAP ECC environment. Having strong knowledge of SAP S4 Hana / SAP ECC configurations (e.g., 3-way match, copy controls) is must. Experience in testing of interface controls between multiple systems and middleware controls. Knowledge and understanding of common IT governance, control, and assurance industry frameworks, including COBIT and ISACA best practices 8 – 12 years of experience in SAP IT Application control reviews/audit with knowledge of IT governance practices. Excellent project management, time management, managerial and leadership skills. Proven experience in SAP Risk and Controls projects. Strong SAP Functional & Technical controls understanding of SAP ECC & S4 HANA environments. Ability to communicate complex ideas effectively, both verbally and in writing. Good to have exposure in SAP Basis testing & SAP ITGC testing will be preferable Candidate with professional consulting experience in technology risk management ideally with a Big 4 or similar large consulting firm will be preferred. Ideally, you’ll also have A bachelor's or master's degree (B.TECH/B.E/M.TECH/MBA-Finance) SAP S4 Hana / SAP ECC functional modules/ ABAP/ Security Certification (Preferred) CISA certified (Preferred) ISO 27001:2013 certified (Preferred) Any other relevant certification (Preferred) Excellent communication skills with consulting experience preferred A valid passport for travel. What Working At EY Offers At EY, we’re dedicated to helping our clients, from start–ups to Fortune 500 companies — and the work we do with them is as varied as they are. You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer: Support, coaching and feedback from some of the most engaging colleagues around Opportunities to develop new skills and progress your career The freedom and flexibility to handle your role in a way that’s right for you EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. SAP Controls Review (SAP ITGC and SAP ITAC) – Manager As part of our Technology Risk team, you will be part of the team performing IT Audits (IT General Controls and IT Application Control testing) delivering audit and control review services for various clients across the MENA region. An important part of your role will be to actively establish, maintain and strengthen internal and external relationships. You’ll also involve in identifying potential business opportunities for EY within existing engagements and escalate these as appropriate. Similarly, you’ll anticipate and identify risks within engagements and share any issues with senior members of the team. The opportunity We’re looking for Managers with expertise in SAP Controls Review to join the group of our IT Audit team. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of our service offering. Your Key Responsibilities Manage and lead a team of staff and seniors on SAP control review projects, ensuring adherence to project timelines and quality standards. Leading the team members with the SAP related queries, latest updates on relevant applicable standards. Preparing and sharing the proposal & pursuits for SAP engagements. Regular connects with onshore counterparts to ensure the deliverables are meeting expectations & standards, creating opportunities basis skill sets. Perform control testing for both ITAC & ITGC as per the client scope and requirement. Contribute to the Risk Consulting team as a key member and assist with facilitating practice wide training (SAP ITGC/ SAP ITAC /SAP Pre & Post Implementation) curriculum. Work closely with onshore, cross-functional teams and develop strong relationships across the organization, especially with Onsite team. Stay updated with and promote awareness of updated ERP versions & its functionalities, industry best practices. Active team member executing project management/ stakeholders’ management (Client, Assurance, onshore) Provide quality deliverables with value addition on the engagements and is known as SMR across organization. Skills And Attributes For Success Candidate must have minimum 8 – 12 years of experience in SAP IT Audit with knowledge of IT governance practices. Should have completed at least 5-6 Risk & Control engagements covering pre-& post implementation reviews, assessments, control design and testing for SAP ECC and/or S4 HANA landscape. Perform SAP audits, focusing on system integrity and data accuracy. Design and assess SAP S4 controls, identifying gaps and recommending improvements. Familiarity with key business process such as Order To Cash, Procure To Pay, and Record To Report and utilize functional knowledge of key business processes to enhance control frameworks. Experience in reviewing and testing of SAP S4 Hana / SAP ECC IT general controls (ITGC) for key domains such as access management, change management, computer operations, SDLC (System Development Life Cycle) Experience in reviewing and testing SAP S4 Hana / SAP ECC security & configurations such as debugging, client settings, etc. Experience in performing pre & post implementation reviews in SAP S4 Hana / SAP ECC environment and have been through S4 Hana/ ECC lifecycle & performing migration testing. Knowledge and understanding of the T-Code, tables used to extract the data from SAP S4 Hana / SAP ECC with relation to ITGC and ITAC testing. Knowledge and understanding of SAP S4 Hana / SAP ECC user access security architecture (Roles, profiles, Authorization objects) Experience in testing of firefighter controls in SAP S4 Hana / SAP ECC and GRC. Experience in reviewing and testing the Operating System (OS) and Hana Database (DB) controls in SAP S4 Hana / SAP ECC environment. Experience of working with other SAP applications such as GRC, Fiori, BW, BI, Ariba, Concur, Success Factor, VIM, Vistex. Experience in evaluation and testing of sensitive access and SOD (Segregation of Duties) across key business and IT process in SAP S4 Hana / SAP ECC and GRC environment. Experience in SAP GRC access control (AC) & process control (PC), financial compliance management (FCM). Experience in performing the walkthrough (Test of design) directly with the client, Operating Effectiveness and have knowledge of the financial statement’s assertions. Experience in reviewing and interpretation the ABAP codes with relation to the control testing for ITGC’s and ITAC’s in SAP S4 Hana / SAP ECC environment. Experience in reviewing and testing the key reports ensuring the risks (completeness & accuracy) related to IPE’s (Information Produced by Entity) are addressed. Knowledge of SAP S4 Hana / SAP ECC standard functionalities in relation to business and IT controls. Experience in reviewing and testing the key business process configurations (ITAC’s) in SAP S4 Hana / SAP ECC environment. Having strong knowledge of SAP S4 Hana / SAP ECC configurations (e.g., 3-way match, copy controls) is must. Experience in testing of interface controls between multiple systems and middleware controls. Knowledge and understanding of common IT governance, control, and assurance industry frameworks, including COBIT and ISACA best practices 8 – 12 years of experience in SAP IT Application control reviews/audit with knowledge of IT governance practices. Excellent project management, time management, managerial and leadership skills. Proven experience in SAP Risk and Controls projects. Strong SAP Functional & Technical controls understanding of SAP ECC & S4 HANA environments. Ability to communicate complex ideas effectively, both verbally and in writing. Good to have exposure in SAP Basis testing & SAP ITGC testing will be preferable Candidate with professional consulting experience in technology risk management ideally with a Big 4 or similar large consulting firm will be preferred. Ideally, you’ll also have A bachelor's or master's degree (B.TECH/B.E/M.TECH/MBA-Finance) SAP S4 Hana / SAP ECC functional modules/ ABAP/ Security Certification (Preferred) CISA certified (Preferred) ISO 27001:2013 certified (Preferred) Any other relevant certification (Preferred) Excellent communication skills with consulting experience preferred A valid passport for travel. What Working At EY Offers At EY, we’re dedicated to helping our clients, from start–ups to Fortune 500 companies — and the work we do with them is as varied as they are. You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer: Support, coaching and feedback from some of the most engaging colleagues around Opportunities to develop new skills and progress your career The freedom and flexibility to handle your role in a way that’s right for you EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

Job Description Some careers shine brighter than others. If you’re looking for a career that will help you stand out, join HSBC, and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further. HSBC is one of the largest banking and financial services organizations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realize their ambitions. We are currently seeking an experienced professional to join our team in the role of Sr. Associate Director, Data and Analytics Key Responsibilities: SME and Advisory Role: Serve as the primary control advisory for the CTO Data Technology organization, ensuring alignment with enterprise control expectations. Represent CTO Data Technology in all Control Owner forums to understand evolving control requirements and ensure consistent communication with ITSOs. Control Implementation Support: Educate and guide ITSOs in implementing relevant technology controls. Partner with control owners and technology teams to ensure consistent interpretation and application of control standards. Drive the implementation of assigned Technology Risk and Control Bow (TRCB) activities across CTO Data Tech aligned services and platforms. Audit & Assurance: Support ITSOs in internal, external, and regulatory audits by ensuring accurate, complete, and timely submission of evidence and responses. Coordinate with CCO, auditors and compliance teams to facilitate smooth audit walkthroughs and findings validation. Remediation Planning & Execution: Assist ITSOs in building actionable remediation plans for audit findings, KCIs, and control gaps. Monitor progress and ensure on-time delivery of all remediation commitments. Risk & Control Visibility: Provide regular visibility to CTO Data Technology sub-verticals on their control and risk posture. Publish dashboards, heat maps, and risk summaries highlighting gaps, timelines, and ownership. Tracking & Reporting: Maintain comprehensive tracking of all open audit issues, control gaps, and Key Control Indicators (KCIs). Drive regular reporting to senior stakeholders on risk metrics, remediation status, and emerging control themes. Solutioning & Risk Mitigation: Collaborate with central technology and control design teams to recommend or build control solutions where standard tools or processes are lacking. Contribute to the continuous improvement of control frameworks and tooling. Requirements Qualifications – External To be successful in this role you should meet the following requirements: Bachelor’s degree in computer science engineering or related field. 15+ years of experience in technology risk management, control assurance, IT audit, or compliance functions within a global enterprise. Deep understanding of IT controls, risk frameworks (e.g., COBIT, NIST, ISO 27001), and regulatory expectations. Proven experience in audit management and control remediation within complex technology environments. Strong stakeholder management and influencing skills across technology, risk, and compliance domains. Excellent communication, analytical, and problem-solving capabilities. Experience working with service owners, infrastructure, and application teams in large-scale IT organizations. Familiarity with control tools, risk dashboards, GRC systems, and reporting platforms is a plus. Preferred Certifications: CISA, CRISC, CISSP, or equivalent risk/control-related certifications. You’ll achieve more when you join HSBC. www.hsbc.com/careers HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working, and opportunities to grow within an inclusive and diverse environment. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website. Issued by – HSBC Software Development India Show more Show less

Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : Google Chronicle SIEM Good to have skills : NAMinimum 5 year(s) of experience is required Educational Qualification : 15 years full time education Summary :The SIEM SME leads in architectural design, specification, and maintenance of Splunk/Google Chronicle Security products and services.Candidates must have backgrounds in network planning and design, implementation, and operations. SIEM SMEs apply business and technology skills with structured methodologies to deliver complex solutions to the customer. Roles & ResponsibilitiesAnalyze potential infrastructure security incidents to determine if incident qualifies as a legitimate security breachPerform network incident investigations, determining the cause of the security incident and preserving evidence for potential legal actionInterface with technical personnel and others teams as requiredMake recommendations on the appropriate corrective action for incidentsConfigure and manage Infrastructure Security and SIEM solutions.Design, develop and create correlation rules within the Security Information and Event Management (SIEM) platformMonitor devices and correlation tools for potential threatsInitiate escalation procedure to counteract potential threats/vulnerabilitiesExperience building and maintain security incident correlation content (hands-on)Experience with reverse engineering tools and techniques as it pertains to network traffic collection and analysisOperational knowledge of system and network security engineering best practices and architectureWillingness to engage hands-on from inception to complete and audit to SIEMs deploymentProvide guidance and insight, as well as follow directives as necessary to complete accelerated deployment of the SIEMsCapable and willing to integrate multiple security control production into the SIEMs platformAppropriately inform and advise management on incidents and incident preventionEncourages and implements continuous improvement measures on day-to-day basisLeverages extensive knowledge of communications in a manner that provides business value to the IT OrganizationRequired to identify, assess, and resolve complex issues/problems within own area of responsibilityProvide Incident remediation and prevention documentationDocument and conform to processes related to security monitoringParticipate in knowledge sharing with other analysts and develop solutions efficientlyCoordinate or participate in individual or team projectsWrite technical articles for internal knowledge baseProvide performance metrics as necessaryDevelop and optimize technical processes and coordinate procedure documentation. Professional & Technical Skills: Must have working experience in Google Chronicle SIEM/SOAR as SME. At least 8+ years of experience in Information Security, Risk Management, Infrastructure Security and ComplianceSecurity device installations, configuration and troubleshooting (e.g., firewall, IDS, etc.)Hands on experience in supporting AWS and Azure Assets, especially supporting Splunk deployment in AWS/Splunk ES as a serviceExperience in deploying different type of forwarders and AppsDeep knowledge in AWS services and serverless architectureExpertise in UNIX, Linux, and Windows - able to tear down and rebuild a host systemExperience with Database installation and configuration is required and Oracle experience is a plusExploit and detection analysis skills, including ability to analyze logs for useful information and patternsInstall, configure, tune, and maintain the Splunk SIEM componentsPrimarily focus on content creation regarding advanced threat analysis (rules, variables, trending, watch lists, etc) of incoming data and for self-monitoring of the solution itself.Perform supporting tasks such as system hardening, high availability configurations, and developing backup strategies.Assist with the creation of detailed deployments plans, architectural drawings and operation manuals.Assist with event source auditing configurations, integration with various security platforms, network devices, and systemsExpert in development of Regular Expression (REGEX)Good understanding of Infrastructure Security and its impact on Security Operations, Vulnerabilities, Reporting, Analytics and Monitoring.Good understanding and experiences with Infrastructure Security, Risk assessment and Security Information and Event Management.A solid understanding of frameworks such as ISO 27001/27002, COBIT, and other relevant compliance such PCI, HIPAA, SOX, FISMA, and others those are required for Security Information and Event Management. Experience working in a diversified, virtual environment.Administrational tool development and maintenance.Desirable to have some certifications such as CISSP, ITIL, CISA, CISM and GIAC-GCIADesirable to have some advanced Certification from SIEM vendor on products such as HP ArcSight or RSA envision. Additional InformationBachelors and above degree in Computer Science, Information & Technology, MIS, Engineering. Qualification 15 years full time education