Home
Jobs

546 Cobit Jobs - Page 18

Filter
Filter Interviews
Min: 0 years
Max: 25 years
Min: ₹0
Max: ₹10000000
Setup a job Alert
JobPe aggregates results for easy application access, but you actually apply on the job portal directly.

7.0 - 10.0 years

0 Lacs

Gurugram, Haryana, India

On-site

Linkedin logo

Summary Position Summary ServiceNow Developer — Senior Solution Advisor Deloitte’s Cyber Risk Services help our clients to be secure, vigilant, and resilient in the face of an ever-increasing array of cyber threats and vulnerabilities. Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end-to-end solutions using proven methodologies and tools in a consistent manner. Our services help organizations to address, in a timely manner, pervasive issues, such as identity theft, data security breaches, data leakage, cyber security, and system outages across organizations of various sizes and industries with the goal of enabling ongoing, secure, and reliable operations across the enterprise. Deloitte’s Cyber Risk Services have been recognized as a leader by a number of independent analyst firms. IDC MarketScape named Deloitte as a Leader in the first 2024 for Worldwide Cybersecurity Consulting Services: Global System Integrators/Consultancies . Source: Worldwide Systems Integrators/Consultancies for Cybersecurity Consulting Services 2024 Vendor Assessment, By Cathy Huang, Published January 2024 – ID#US50463423 Work you will do As a Senior Consultant in Governance, Risk, and Compliance ( GRC )/ Integrated Risk Management (IRM) at Deloitte, you will play a pivotal role and be instrumental in helping our clients manage and mitigate risks associated with their governance, risk management, and compliance activities by focusing on delivering continuous, high-quality GRC services to our clients . This role involves a blend of strategic advisory, process improvement, and technology implementation, tailored to ensure continuous compliance and effective risk management strategies are in place. This role also involves ensuring compliance with regulatory requirements and managing risks effectively. The ideal candidate will have a strong background in GRC frameworks, excellent analytical skills and adept in developing workflows in GRC tools like ServiceNow, Archer, Aravo or OneTrust As a Consultant, you would be expected to perform the following activities: Take ownership of SDLC efforts for successful build, test, and rollout of GRC solution into productionuse. Conduct thorough risk assessments and implement solutions to minimize exposure and enhance business resilience. Well versed with the application deployment and configuration baselines, and understanding of how the application environment operates in a secure environment and how exceptions are handled duringoperations; Utilize GRC tools to automate risk management and compliance monitoring tasks. Configure GRC solutions like risk management (enterprise and IT risk), compliance management, issue and corrective action plan management, exception management, policy lifecycle management, privacy management, third party risk management, audit management, threat and vulnerability management, security operations management, business continuity management for clients acrossindustries. Understand the business requirement and define & document user stories, create UI mock-ups and having a roll-up the sleeves approach to execute and make thingshappen. Define, enhance, and implement enterprise risk management frameworks based on industry standards and frameworks (e.g. ISO 27001, COSO, COBIT, PCI, NIST, and HIPAA etc.) on GRC technologies such as Archer, ServiceNow or Aravo. Ensure compliance with all relevant local, national, and international laws and regulations. Regularly update internal policies to align with changing regulatory landscapes to ensure that they are effectively integrated into the clients' operational processes. Provide ongoing support and enhancements to risk management frameworks that align with client objectives and regulatory requirements. Assist in developing GRC governance and operating model for the set up and sustainment of the GRCprogram. Prepare detailed reports on compliance activities, risk assessments, and mitigation plans. Ensure all documentation is accurate and audit ready. The team Want to work at one of the fastest growing and industry leading risk management consulting firms that will give you an enriching experience to build your career and brand? If yes, then look no further, Deloitte’s Cyber Risk Services practice is the place for you. The Cyber Governance, Risk, and Compliance (GRC)/ Integrated Risk Management (IRM) is one of the most rapidly growing market offerings with capability spanning - GRC strategy, design, and implementation of GRC & Security solutions using confluence of ServiceNow, Archer, Aravo and OneTrust. Individuals who take deep personal accountability for their work, have a passion for excellence, driven to achieve their full potential and understand the value of building relationships with clients and the industry, are encouraged to realize our requirement for GRC. The GRC Solution Advisor is expected to have an in- depth understanding of GRC tools as mentioned above, leading practices and have demonstrated experience in the design and implementation of their solutions. Understanding of risk and compliance pain points and how they can be addressed effectively through a scalable and usable GRC technology is key to success in thisrole. This role involves working closely with clients to understand their needs, designing solutions that leverage all the tool’s capabilities to enhance their GRC processes, and ensuring the successful implementation and operation of these solutions. Required: Education: Bachelor’s degree in Computer Science/ Information Technology, or a related field. Experience: Minimum of 7-10 years of experience in implementing GRC solutions and/or in ServiceNow/Archer/Aravo/OneTrust or cyber strategy. Well versed with at least 1 GRC tool such as ServiceNow/Archer/Aravo/OneTrust. Gathering and documenting business requirements and identifying gaps within existing systems and processes. Hands-on experience on at least 2 GRC modules (ERM, ITRM, TPRM, SecOps, Issues Management, Policy & Compliance Management, etc.). Hands-on experience in on-demand and out-of-the-box solution developments, access control, rules & events, notifications, data integrations, UI, reports and dashboards, workflows and other administrative activities in tools like ServiceNow/Archer/Aravo/OneTrust. Experience on Privacy Enhancement and Automation tools such as OneTrust. Proficient in risk management processes and compliance regulations. Proven experience in GRC, particularly within a consulting environment. Proficiency with scripting language in implementing API integrations with external system Must have development experience in more than 2- 3 projects from scratch to till go-live Strong understanding of GRC frameworks such as COBIT, ISO 27001, NIST, etc. Strong analytical and problem-solving skills. Excellent interpersonal and communication skills, capable of working effectively with clients and team members. Flexibility in work hours may be necessary to meet project deadlines and client needs. Preferred: Education: Master’s degree in Business Administration, Cyber Security or a related field GRC Certifications: ServiceNow CSA, Archer Administrator Recruiting tips From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters. Benefits At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you. Our people and culture Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ideas and perspectives, and bring more creativity and innovation to help solve our clients' most complex challenges. This makes Deloitte one of the most rewarding places to work. Our purpose Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities. Professional development From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career. Requisition code: 302575 Show more Show less

Posted 3 weeks ago

Apply

3.0 - 5.0 years

0 Lacs

Pune, Maharashtra, India

On-site

Linkedin logo

Job Summary The Internal Auditor II will coordinate, budget, and execute audit plans designed to identify risk, to mitigate loss, and to protect the people, assets, and cash flow of the company. Essential Duties And Responsibilities Assist manager to develop audit scope using risk assessment techniques. With appropriate approval, create or revise audit programs where necessary to accomplish audit objectives. Coordinate and lead site and project reviews (time and resource budgeting) with the Internal Audit Manager, external auditors, and regulatory agencies. Conduct audits in accordance with approved audit programs while effectively managing time budgets. Prepare audit workpapers documenting each audit step in the audit program. Ensure information is presented clearly, concisely, accurately, in a logical format, and has appropriate audit conclusions. Express ideas and information in a clear and concise manner. Prepare written presentations to management at the conclusion of an audit, discussing deficiencies, recommending corrective actions, and suggesting improvements in internal controls. Maintain updated knowledge of rules, regulations, and standards in the fields of internal audit, accounting, information technology and/or other related matters of interest to the department. Provide timely feedback to the in-charge or Internal Audit Manager about the status of the audit and as issues arise. Elevate real and emerging business control issues/problems to the Internal Audit Manager and local management if needed. Educate functional management in business risk concepts and suggest cost effective approaches to mitigate risk. Complete periodic education to stay informed of emerging issues and maintain a degree of professionalism. Review and compliment external auditing roles and practices. Train and educate other auditors in knowledge of audits using the COSO and/or CobIT frameworks. Demonstrate understanding of Jabil’s goals & business strategy and key industry trends and issues in the markets. Use internal and external data to understand the underlying causes / drivers of issues and opportunities. Gain a basic understanding of the roles and processes of other functional departments. Ability to travel internationally. Adhere to all safety and health rules and regulations associated with this position and as directed by supervisor. Comply and follow all procedures within the company’s various administrative policies including but not limited to security and non-disclosure policies. Ensure all sensitive and confidential information is handled appropriately. May perform other duties and responsibilities as assigned. Job Qualifications KNOWLEDGE REQUIREMENTS Understanding of internal audit standards, procedures, techniques, risk assessment practices, and frameworks such as COSO. Understanding of accounting principles and techniques. Other specialty areas (IT, security, fraud investigation, etc.) are additionally preferred. Basic critical thinking and analytical skills to help evaluate information received and identify critical trends in the information being reviewed. Understanding of the technical aspects of accounting and financial reporting. Proficiency with the Microsoft Office suite of products. Familiarity with AuditBoard and SAP is preferred. Education & Experience Requirements Bachelor’s Degree required preferably in Accounting or related field. Minimum 3 - 5 years related work experience related to audit, accounting, finance and operations. ACA, CA, CPA, CIA, or equivalent preferred. Or an equivalent combination of education, experience and/or training , BE AWARE OF FRAUD: When applying for a job at Jabil you will be contacted via correspondence through our official job portal with a jabil.com e-mail address; direct phone call from a member of the Jabil team; or direct e-mail with a jabil.com e-mail address. Jabil does not request payments for interviews or at any other point during the hiring process. Jabil will not ask for your personal identifying information such as a social security number, birth certificate, financial institution, driver’s license number or passport information over the phone or via e-mail. If you believe you are a victim of identity theft, contact your local police department. Any scam job listings should be reported to whatever website it was posted in. Show more Show less

Posted 3 weeks ago

Apply

5.0 years

0 Lacs

Mumbai Metropolitan Region

On-site

Linkedin logo

Job Description: Cyber Maturity Assessment Consultant Team: Security Consulting Designation : Cyber Maturity Assessment Consultant Job Role: Run Cybersecurity Maturity Assessments (CMA/SMA) and risk evaluations for customers, aligned with industry frameworks to enhance client security posture and operational resilience. Experience: 5+ years in cybersecurity consulting, focused on cyber maturity assessments, risk management, and compliance programs. Job Location: Cyberjaya Shifts : Day Shift. However, flexibility is required to provide extended support and be available on-call when needed. Key Responsibilities Cyber Maturity & Risk Assessments  Conduct comprehensive CCyber Maturity Assessments for clients, aligned with frameworks such as NIST CSF, ISO 27001, CMMI, and COBIT.  Perform risk assessments—both qualitative and quantitative—to prioritize vulnerabilities and recommend mitigation strategies.  Evaluate third-party and supply chain security exposures. Strategy & Advisory  Analyse and Discover gaps in the Cybersecurity Technologies, People and Processes for clients.  Develop cybersecurity roadmaps to improve clients’ maturity and governance structures.  Recommend enhancements to cyber operating models and organizational alignment.  Deliver executive-level reports and gap analyses with clear business impact insights. Client Engagement & Training  Facilitate workshops to train clients on cybersecurity best practices and self-assessment techniques.  Mentor junior consultants on methodologies, report creation, and client communication.  Support business development initiatives, including proposal writing and client presentations. Compliance & Certification  Provide guidance for ISO 27001/20000-1 certification and audit readiness.  Ensure alignment of security programs with standards like NIST 800-30 and ISO 27005. Work Experience  5+ years of hands-on experience in cybersecurity consulting.  Demonstrated history of executing cyber maturity reviews and third-party risk assessments.  Demonstrated success in leading end-to-end client engagements, from scoping to delivery of assessment reports.  Proven ability to work cross-functionally with IT, Risk, and Compliance teams to align cybersecurity efforts with business priorities.  Delivered executive-level briefings translating technical assessment findings into strategic, business-aligned recommendations. Qualifications  Bachelor’s/Master’s degree in Cybersecurity, Information Security, or a related field. Essential Technical Skills  In-depth understanding of NIST CSF, NIST RMF, COBIT, ITIL, and ISO 31000.  Familiarity with cybersecurity governance models and risk assessment tools. Certifications  CRISC, ISO 27001 LA, CC (ISC)², or equivalent certifications. Desired Skills  Strong analytical, communication, and presentation skills.  Experience in financial services, insurance, or critical infrastructure sectors.  Ability to lead and mentor team members effectively. Performance Metrics  Client satisfaction scores and feedback.  Number and quality of assessments completed annually.  Contributions to proposals and business development success. Skills: risk assessment,qualitative risk assessments,risk,quantitative risk assessments,nist csf,cybersecurity,mentoring,ccyber maturity assessments,nist 800-30,cybersecurity training,assessment,cybersecurity governance models,compliance programs,cobit,analytical skills,risk assessment tools,iso 27001 certification guidance,security,maturity assessments,communication skills,iso 27001,cybersecurity maturity assessments,cybersecurity roadmaps,cyber,nist rmf,security assurance,iso 27005,risk management,iso 27001/20000-1 certification,presentation skills,cmmi,cybersecurity roadmap development Show more Show less

Posted 3 weeks ago

Apply

0 years

0 Lacs

Gurgaon, Haryana, India

On-site

Linkedin logo

Job Description KPMG in India, a professional services firm, is the Indian member firm affiliated with KPMG International and was established in September 1993. Our professionals leverage the global network of firms, providing detailed knowledge of local laws, regulations, markets, and competition. KPMG has offices across India in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, and Vadodara. KPMG in India offers services to national and international clients in India across sectors. We strive to provide rapid, performance-based, industry-focused, and technology-enabled services, which reflect a shared knowledge of global and local industries and our experience of the Indian business environment KPMG Advisory professionals provide advice and assistance to enable companies, intermediaries, and public sector bodies to mitigate risk, improve performance, and create value. KPMG firms provide a wide range of Risk Advisory and Financial Advisory Services that can help clients respond to immediate needs as well as put in place the strategies for the longer term. Projects in IT Advisory focus on the assessment and/or evaluation of IT systems and the mitigation of IT-related business risks. They are either IS audit, SOX reviews, Internal audit engagements, IT infrastructure review and/or risk advisory including but not limited to IT audit supports in nature. Responsibilities Perform testing of IT Application Controls, IPE, and Interface Controls through code reviews, IT General Controls review covering areas such as Change Management, Access Management, Backup Management, Incident and Problem Management, SDLC, Data Migration, Batch Job scheduling/monitoring and Business Continuity and Disaster Recovery Perform Risk Assessment, identification, and Evaluation of Controls, prepare process flow diagrams and document the same in Risk & Control Matrix. Perform business process walkthrough and controls testing for IT Audits. Performing planning and executing audits, including - SOX, Internal Audits, External Audits Conducting controls assessment in manual/ automated environment Prepare/Review of Policies, Procedures, SOPs Maintain relationships with client management and the project Manager to manage expectations of service, including work products, timing, and deliverables. Demonstrate a thorough understanding of complex information systems and apply it to client situations. Use extensive knowledge of the client's business/industry to identify technological developments and evaluate impacts on the work to be performed. Coordinate effectively and efficiently with the Engagement manager and the client management keeping both constantly updated regarding project’s progress. Collaborate with other members of the engagement team to plan the engagement and develop relevant workpapers/deliverables. Perform fieldwork and share the daily progress of fieldwork, informing supervisors of engagement status. Qualifications IT Audit + SAP experience with knowledge of IT governance practices Prior IT Audit knowledge in areas of ITGC, ITAC (application/automated controls) SOX 404, SOC-1 and SOC-2 Audits Good to have knowledge of other IT regulations, standards and benchmarks used by the IT industry (e.g. NIST, PCI-DSS, ITIL, OWASP, SOX, COBIT, SSAE18/ISAE 3402 etc.) Technical Knowledge of IT Audit Tools with excellent knowledge of IT Audit process and methodology Exposure to Risk Management and Governance Frameworks/ Systems will be an added advantage Exposure to ERP systems will be added advantage Strong project management, communication (written and verbal) and presentation skills Knowledge of security measures and auditing practices within various applications, operating systems, and databases. Strong self-directed work habits, exhibiting initiative, drive, creativity, maturity, self-assurance, and professionalism Preferred Certifications – CISA/CISSP//CISM Exposure to automation Data Analytics tools such as QlikView/Qlik sense, ACL, Power BI will be an advantage Proficiency with Microsoft Word, Excel, Visio, and other MS Office tools Equal Employment Opportunity Information KPMG India has a policy of providing equal opportunity for all applicants and employees regardless of their color, caste, religion, age, sex/gender, national origin, citizenship, sexual orientation, gender identity or expression, disability or other legally protected status. KPMG India values diversity and we request you to submit the details below to support us in our endeavor for diversity. Providing the below information is voluntary and refusal to submit such information will not be prejudicial to you. Show more Show less

Posted 3 weeks ago

Apply

4.0 - 8.0 years

12 - 16 Lacs

Bengaluru

Work from Office

Naukri logo

About The Role Manager - Technology Risk Assessment Team - Technology Risk & Compliance ,Compliance Location - Bangalore The PhonePe Technology Risk and Compliance team plays a critical role in the successful execution of the firm's compliance mission. The Tech Risk and Compliance function ensures the development and maintenance of a strong compliance culture by developing and maintaining program infrastructure that identifies, measures and monitors compliance with applicable laws, regulations and rules that govern our business globally. Compliance teams work closely with Engineering, SREs, business, legal and other functions to provide expertise on regulatory compliance matters; assess and measure compliance and related risks and monitor and test the adequacy of the firm's compliance control environment. Roles and Responsibilities: To review PhonePe products, processes and environment from the perspective of security, regulatory compliance and best practices. To conduct due diligence on new and existing technology implementations across business units at PhonePe. To provide support to internal departments in areas of compliance with regulatory bodies (i.e. RBI, NPCI, SEBI, IRDAI, UIDAI), and implementation of security related requirements from circulars issued by regulators. To collaborate with product/business/engineering teams to implement compliance plans to mitigate risks in the early stage of product development To create control frameworks in guidance of the team and conduct gap assessment against security practices, various regulatory guidelines and compliance requirements Must Haves: 7 to 9 years of relevant work experience, B. Tech Prior people management experience. Strong understanding of ITGC domains and business processes. Experience in managing audits and implementing cyber security controls, NIST, PCI DSS standards, ISMS etc., Certifications such as ISO 27001 / CISA / CISM / CISSP preferred. High ethical standards and are able to work diligently to complete your duties. Analytical mind able to see the complexities of procedures and regulations. Demonstrate the ability to plan and execute projects with minimal management support. PhonePe Full Time Employee Benefits (Not applicable for Intern or Contract Roles) Insurance Benefits - Medical Insurance, Critical Illness Insurance, Accidental Insurance, Life Insurance Wellness Program - Employee Assistance Program, Onsite Medical Center, Emergency Support System Parental Support - Maternity Benefit, Paternity Benefit Program, Adoption Assistance Program, Day-care Support Program Mobility Benefits - Relocation benefits, Transfer Support Policy, Travel Policy Retirement Benefits - Employee PF Contribution, Flexible PF Contribution, Gratuity, NPS, Leave Encashment Other Benefits - Higher Education Assistance, Car Lease, Salary Advance Policy

Posted 3 weeks ago

Apply

5.0 - 7.0 years

8 - 13 Lacs

Mumbai, Nagpur, Thane

Work from Office

Naukri logo

Are you ready to accelerate your potential and make a real difference within life sciences, diagnostics and biotechnology At Pall Corporation, one of Danaher s 15+ operating companies, our work saves lives and we re all united by a shared commitment to innovate for tangible impact. You ll thrive in a culture of belonging where you and your unique viewpoint matter. And by harnessing Danaher s system of continuous improvement, you help turn ideas into impact - innovating at the speed of life. As a global leader in high-tech filtration, separation, and purification, Pall Corporation thrives on helping our customers solve their toughest challenges. Our products serve diverse, global customer needs across a wide range of applications to advance health, safety and environmentally responsible technologies. From airplane engines to hydraulic systems, scotch to smartphones, OLED screens to paper everyday Pall is there, helping protect critical operating assets, improve product quality, minimize emissions and waste, and safeguard health. For the exponentially curious, Pall is a place where you can thrive and amplify your impact on the world. Find what drives you on a team with a more than 75-year history of discovery, determination, and innovation. Learn about the Danaher Business System which makes everything possible. The Analyst, IT Compliance is responsible for hands-on SOX control testing activities and responsible to ensure assigned processes are compliant with SOX program requirements and deadlines This position reports to the Sr. Manager - IT Compliance and is part of the IT Compliance team located in Pune and will be an on-site role. Perform SOX control testing, process walkthroughs, and documentation reviews, including SOPs and policies. Identify, document, and communicate control issues and audit findings to control owners in a timely manner. Escalate control deficiencies to the IT Compliance Manager and participate in remediation planning with process owners. Support control owners in timely remediation of deficiencies and perform retesting for design and operational effectiveness. Maintain accurate records of controls and testing results to support reporting to senior management and Audit Committee. Contribute to continuous improvement of IT compliance and audit processes. Assist in preparing reports and updates for leadership on compliance testing progress and status The essential requirements of the job include: 5+ years of experience in SOX IT Controls testing and review enterprise applications across the IT ecosystem. Strong independent problem solving, project management and analytical skills in finance, accounting, or auditing related areas SAP application experience desirable Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate Sox-related concepts to technical and nontechnical audiences in all levels of the organization, up to and including Executive Management. Bachelor s Degree or equivalent It would be a plus if you also possess previous experience in: Strong hands-on experience with SAP IT General Controls (ITGCs) - including user access management, change management, and IT operations within SAP landscapes (e.g., ECC, S/4HANA). Proven ability to implement, test, and remediate SOX controls in SAP environments. Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), or other relevant certifications preferred - with a strong understanding of control frameworks (e.g., COBIT, NIST) and how they apply to SAP systems. Exhibit excellent analytic skills, the ability to manage multiple projects under strict timelines, and to work well in a demanding, dynamic environment and meet overall objectives. Pall Corporation, a Danaher operating company, offers a broad array of comprehensive, competitive benefit programs that add value to our lives. Whether it s a health care program or paid time off, our programs contribute to life beyond the job. Check out our benefits at Danaher Benefits Info . At Pall we believe in designing a better, more sustainable workforce. We recognize the benefits of flexible, remote working arrangements for eligible roles and are committed to providing enriching careers, no matter the work arrangement. This position is eligible for a remote work arrangement in which you can work remotely from your home. Additional information about this remote work arrangement will be provided by your interview team. Explore the flexibility and challenge that working for Pall can provide. Join our winning team today. Together, we ll accelerate the real-life impact of tomorrow s science and technology. We partner with customers across the globe to help them solve their most complex challenges, architecting solutions that bring the power of science to life. For more information, visit www.danaher.com . At Danaher, we value diversity and the existence of similarities and differences, both visible and not, found in our workforce, workplace and throughout the markets we serve. Our associates, customers and shareholders contribute unique and different perspectives as a result of these diverse attributes.

Posted 3 weeks ago

Apply

8.0 years

0 Lacs

Bengaluru, Karnataka, India

On-site

Linkedin logo

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Portfolio Compliance Enablement Leader Today’s world is fueled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of over 1000 people who collaborate to support the business of EY by protecting EY and client information assets! Our Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond to security events as they happen. Together, the efforts of our dedicated team help protect the EY brand and build client trust. Within Information Security we blend risk strategy, digital identity, cyber defense, application security and technology solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting and enabling the business through innovative, secure solutions that provide speed to market and business value. The Opportunity As an Assistant Director in the Information Security Portfolio Compliance Enablement function, you will work closely with our service line and function technologists from across the globe to support EY's digital services by ensuring compliance with Information Security policies. You will work with business teams to enhance their risk posture and partner with leaders to uphold policy compliance across global, regional, and country-based assets and systems. Your role includes maintaining the security and technology compliance posture through governance and oversight, ensuring data protection, privacy, and software development practices meet legal and regulatory standards. Key Responsibilities This position in the Information Security Portfolio Compliance Enablement function will focus on these pillars: Risk Management and Reduction: Assisting with managing the Portfolio or Service Line of security risk and compliance, engaging directly with key EY stakeholders to mitigate and reduce risks and provide insights on top risks impacting the security posture of the businesses. Trend Identification and Remediation: Gather information and report on security risk trends and themes that require a comprehensive approach to remediation. Proactive Security Initiatives: Proactively seeking out and identifying security risks, weaknesses, and potential vulnerabilities in systems and processes before they can be exploited. Improve compliance with security standards and policies though continuous improvement and innovation in security practices. Governance, Risk, and Compliance (GRC) Management: Assist with managing the end-to-end workflow of security compliance of risk findings in our Governance, Risk, and Compliance (GRC) tool to ensure continuity and compliance with security policies, standards and regulations. Key responsibilities include: Lead and contribute to projects that improve EY's risk posture. Develop and implement compliance strategies and remediation plans. Collaborate with Service Line and business stakeholders to reinforce policies, control ownership, and compliance responsibilities and support the communication of security findings and recommendations. Contribute to proactive security initiatives and continuous improvement of security practices. Translate technical vulnerabilities into business risk terms. Maintain and enhance compliance assessment toolkits. Conduct assessments and evaluate compliance effectiveness for technology infrastructure, applications, and third-party dependencies. Identify policy enforcement gaps and propose improvements. Skills And Attributes For Success Proven experience in compliance management within Information Security. Ability to balance security needs with business impact. Strong leadership and organizational skills. Capable of building relationships and facilitating compliance to security policies. Experience in risk assessments and recommending remediation strategies. Ability to develop and oversee enforcement protocols. Proficient in communicating complex issues and negotiating solutions. Knowledgeable in technical infrastructure and applications. Ability to team well with others to facilitate and enhance the understanding & compliance to security policies. Assist with metrics to evaluate the effectiveness of policy enforcement and generate regular reports. Ability to maintain a high level of integrity, trustworthiness and confidence to represent the company and security leadership with professionalism To Qualify for the Role, You Must Have At least 8 years of experience in Cyber Security or a related field ( At least 3 years of experience in a leadership role managing a team. A degree in Cybersecurity, Information Security, Computer Science, or related discipline; or equivalent work experience. One or more of the following or equivalent certifications: Certified Risk and Information Systems Control (CRISC), Certified Information Systems Security Processional (CISSP), Certified Information Security Manager (CISM), Certified Information System Auditor (CISA), Certified Internal Auditor (CIA), Global Information Assurance Certification (GIAC) in related area, CIPP, CIPT Familiarity with security standards like ISO 27001/27002, NIST, PCI DSS, ITIL, COBIT. Understanding of governance, risk, and compliance (GRC) frameworks. Experience with regulatory requirements such as PCI, SOX, HIPAA, GDPR, GLBA. Proven ability to identify and mitigate security risks proactively. Capable of working with diverse teams and promoting an enterprise-wide, collaborative security culture Experience in managing communication and recommendations to IT project teams. Strong English language communication skills and the ability to work with diverse teams. Ideally, You’ll Also Have Good judgment, tact, and decision-making ability. Familiarity with local and regional regulatory requirements. Flexibility to adapt to changing priorities. Strong management, interpersonal, communication, organizational, and decision-making skills. Experience with GRC platforms like RSA Archer or IBM Open Pages. What We Look For We are looking for individuals with a passion for information security and demonstrated ability to apply their knowledge to new and emerging technologies that are supporting the growth strategy of a global professional services firm. What We Offer As part of this role, you will work in a highly coordinated, globally diverse team with the opportunity and tools to grow, develop and drive your career forward. Here, you can combine global opportunity with flexible working. The EY benefits package goes above and beyond too, focusing on your physical, emotional, financial and social well-being. Your recruiter can talk to you about the benefits available in your country. Here’s a snapshot of what we offer: Continuous learning: You will develop the mindset and skills to navigate whatever comes next. Success as defined by you: We will provide the tools and flexibility, so you can make a significant impact, your way. Transformative leadership: We will give you the insights, coaching and confidence to be the leader the world needs. Diverse and inclusive culture: You will be accepted for who you are and empowered to use your voice to help others find theirs. EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

Posted 3 weeks ago

Apply

8.0 years

0 Lacs

Gurugram, Haryana, India

On-site

Linkedin logo

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Portfolio Compliance Enablement Leader Today’s world is fueled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of over 1000 people who collaborate to support the business of EY by protecting EY and client information assets! Our Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond to security events as they happen. Together, the efforts of our dedicated team help protect the EY brand and build client trust. Within Information Security we blend risk strategy, digital identity, cyber defense, application security and technology solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting and enabling the business through innovative, secure solutions that provide speed to market and business value. The Opportunity As an Assistant Director in the Information Security Portfolio Compliance Enablement function, you will work closely with our service line and function technologists from across the globe to support EY's digital services by ensuring compliance with Information Security policies. You will work with business teams to enhance their risk posture and partner with leaders to uphold policy compliance across global, regional, and country-based assets and systems. Your role includes maintaining the security and technology compliance posture through governance and oversight, ensuring data protection, privacy, and software development practices meet legal and regulatory standards. Key Responsibilities This position in the Information Security Portfolio Compliance Enablement function will focus on these pillars: Risk Management and Reduction: Assisting with managing the Portfolio or Service Line of security risk and compliance, engaging directly with key EY stakeholders to mitigate and reduce risks and provide insights on top risks impacting the security posture of the businesses. Trend Identification and Remediation: Gather information and report on security risk trends and themes that require a comprehensive approach to remediation. Proactive Security Initiatives: Proactively seeking out and identifying security risks, weaknesses, and potential vulnerabilities in systems and processes before they can be exploited. Improve compliance with security standards and policies though continuous improvement and innovation in security practices. Governance, Risk, and Compliance (GRC) Management: Assist with managing the end-to-end workflow of security compliance of risk findings in our Governance, Risk, and Compliance (GRC) tool to ensure continuity and compliance with security policies, standards and regulations. Key responsibilities include: Lead and contribute to projects that improve EY's risk posture. Develop and implement compliance strategies and remediation plans. Collaborate with Service Line and business stakeholders to reinforce policies, control ownership, and compliance responsibilities and support the communication of security findings and recommendations. Contribute to proactive security initiatives and continuous improvement of security practices. Translate technical vulnerabilities into business risk terms. Maintain and enhance compliance assessment toolkits. Conduct assessments and evaluate compliance effectiveness for technology infrastructure, applications, and third-party dependencies. Identify policy enforcement gaps and propose improvements. Skills And Attributes For Success Proven experience in compliance management within Information Security. Ability to balance security needs with business impact. Strong leadership and organizational skills. Capable of building relationships and facilitating compliance to security policies. Experience in risk assessments and recommending remediation strategies. Ability to develop and oversee enforcement protocols. Proficient in communicating complex issues and negotiating solutions. Knowledgeable in technical infrastructure and applications. Ability to team well with others to facilitate and enhance the understanding & compliance to security policies. Assist with metrics to evaluate the effectiveness of policy enforcement and generate regular reports. Ability to maintain a high level of integrity, trustworthiness and confidence to represent the company and security leadership with professionalism To Qualify for the Role, You Must Have At least 8 years of experience in Cyber Security or a related field ( At least 3 years of experience in a leadership role managing a team. A degree in Cybersecurity, Information Security, Computer Science, or related discipline; or equivalent work experience. One or more of the following or equivalent certifications: Certified Risk and Information Systems Control (CRISC), Certified Information Systems Security Processional (CISSP), Certified Information Security Manager (CISM), Certified Information System Auditor (CISA), Certified Internal Auditor (CIA), Global Information Assurance Certification (GIAC) in related area, CIPP, CIPT Familiarity with security standards like ISO 27001/27002, NIST, PCI DSS, ITIL, COBIT. Understanding of governance, risk, and compliance (GRC) frameworks. Experience with regulatory requirements such as PCI, SOX, HIPAA, GDPR, GLBA. Proven ability to identify and mitigate security risks proactively. Capable of working with diverse teams and promoting an enterprise-wide, collaborative security culture Experience in managing communication and recommendations to IT project teams. Strong English language communication skills and the ability to work with diverse teams. Ideally, You’ll Also Have Good judgment, tact, and decision-making ability. Familiarity with local and regional regulatory requirements. Flexibility to adapt to changing priorities. Strong management, interpersonal, communication, organizational, and decision-making skills. Experience with GRC platforms like RSA Archer or IBM Open Pages. What We Look For We are looking for individuals with a passion for information security and demonstrated ability to apply their knowledge to new and emerging technologies that are supporting the growth strategy of a global professional services firm. What We Offer As part of this role, you will work in a highly coordinated, globally diverse team with the opportunity and tools to grow, develop and drive your career forward. Here, you can combine global opportunity with flexible working. The EY benefits package goes above and beyond too, focusing on your physical, emotional, financial and social well-being. Your recruiter can talk to you about the benefits available in your country. Here’s a snapshot of what we offer: Continuous learning: You will develop the mindset and skills to navigate whatever comes next. Success as defined by you: We will provide the tools and flexibility, so you can make a significant impact, your way. Transformative leadership: We will give you the insights, coaching and confidence to be the leader the world needs. Diverse and inclusive culture: You will be accepted for who you are and empowered to use your voice to help others find theirs. EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

Posted 3 weeks ago

Apply

0 years

0 Lacs

Gurugram, Haryana, India

On-site

Linkedin logo

Role Profile Job Title Internal: Operational Risk & Control - Senior Analyst External: Risk Analyst Location India Reports to Head of Operational Risk & Resilience For advertising: About FNZ Who We Are FNZ Group is an established and rapidly growing company in the financial technology sector. We partner with the entire industry to make wealth management accessible to more people. Today, we partner with over 650 financial institutions and 12,000 wealth management firms, enabling over 20 million people across all wealth segments to invest in the things they care the most about, on their own terms. We have over 30+ offices globally with 5000+ employees (and growing!). To learn more about us and our journey, check out our careers site. Role Description What our Senior Risk Analysts do: Our Senior Risk Analysts are analytical thinkers who have excellent attention to detail skills. They are deadline driven and understand complex edicts, regulation guidelines, wealth products, and financial legislation. They have technical knowledge in product life cycle, market risk solutions, fixed income products, credit risk and attributions. Our Senior Risk Analysts are excellent communicators with a proven ability to influence and challenge. They use their previous experience to support an effective risk management function in Operations. Responsibilities This Senior Risk Analyst is a critical role on our North America Operations team reporting into the Head of Operational Risk & Resilience. That person is required to support the implementation and application of the Risk Management Framework responsibilities, including but not limited: Performs technology risk assessments for applications and infrastructure assets. Conducts Business Impact Analysis and apply the enterprise risk methodology to determine criticality. Works with the Operations function to develop and maintain business continuity plans. Exercise the business continuity plans periodically. Address lessons learned from the exercise to continuously improve business resiliency. Work across the business to ensure timely and accurate recording and reporting of Risk Events, providing challenge to content and cause of the Event to ensure it is factually accurate. Ensure delivery of quality, accurate Risk Events to clients in a timely manner, with appropriate assessment of regulatory impact. Identifying efficiencies and improvements in the process related to quality and timeliness. Root Cause and thematic analysis along with working with the business to improve the control environment to reduce the volume of Risk Events. Lead or assist in driving quality action plans (events and audits), with appropriate ownership and oversight to ensure completion on schedule thereby mitigating FNZ risk exposure. Lead or support first line of defence with any technology Risk Event related enquiries. Design and deliver technology and business continuity Risk training. Acts as a resource for team members with less experience. Broader work or accountabilities may be assigned as needed. Experience Required Typically, between 3-5 years of relevant experience in the financial services industry. Experience working in banking, wealth management, asset management, or technology providers to those industries. Good knowledge of IT risk management and IT security concepts, including COBIT, NIST and ISO 27001. Excellent written and verbal communication skills at a variety of levels within a regulated environment, both internally and externally. Ability to build and maintain relationship with clients. Ability to take initiatives and work under pressure. Experience Preferred Related professional or industry qualifications with Audit, Compliance or Risk Management certification. Business continuity/resiliency experience. Opportunities What We Offer Be part of a highly successful, rapidly growing, global business that is leading the delivery of financial services. A competitive base salary, uncapped bonus, and paid time off. Flexibility in working hours for better work-life balance. Fulfilling mentor and leadership opportunities. Working with purpose and making an impact together. A positive work environment with a sense of purpose to share knowledge and skills amongst other colleagues. Inclusion At FNZ, we recognise that diversity, equity, and inclusion are important factors contributing to our success. We embrace the unique perspective and capabilities of our current and future employees, which will help us continue to drive innovation and achieve our business goals. Recruitment decisions at FNZ are made in a non-discriminatory manner without regard to gender, ethnicity/race, faith, age, nationality, gender identity, sexual orientation, marital status, socio-economic background, disability, or military veteran status where all applicants and employees are valued and respected. In addition, we want to ensure accessibility needs are well supported, if you require specific support, please advise us. About FNZ FNZ is committed to opening up wealth so that everyone, everywhere can invest in their future on their terms. We know the foundation to do that already exists in the wealth management industry, but complexity holds firms back. We created wealth’s growth platform to help. We provide a global, end-to-end wealth management platform that integrates modern technology with business and investment operations. All in a regulated financial institution. We partner with over 650 financial institutions and 12,000 wealth managers, with US$1.5 trillion in assets under administration (AUA). Together with our customers, we help over 20 million people from all wealth segments to invest in their future. Show more Show less

Posted 3 weeks ago

Apply

0 years

0 Lacs

Mumbai, Maharashtra, India

On-site

Linkedin logo

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Career Family - Analysis Role Type - Business Analysis Career Framework Role Description Evaluates business models, processes and operations to develop a good understanding of business needs and requirements. Analyses and evaluates business requirements and translates these into technical requirements and specifications, providing insights on system and technical components to incorporate into the technical design. Interacts with business stakeholders to gather, understand, document, and analyse business requirements. Analyses reports and assessments to provide insights on whether a solution/technology being implemented is meeting business requirements. Responsibilities Reviews materials and supports in meetings and workshops with business stakeholders to understand and gather business / functional requirements, undertaking client assessments and building relationships with business stakeholder. Builds relationships and collaborates with the wider team to understand business requirements and translates these into complex technical requirements. Produces technical specifications to guide system architectural design and development and conducts quality assurance tasks to ensure completeness of requirements, peer reviewing the work of more junior members of the team. Monitors and reports on potential risks/opportunities of emerging technologies, and forms recommendations for system and technical components based on understanding of business requirements, reviewing and supporting with process modelling and improvement. Contributes to the design and review of test cases to ensure tests adequately meet the requirements and coordinates with infrastructure and operations teams to resolve system issues, contributing to moderately complex aspects of a project. Provides insights on whether solutions and technologies being implemented are meeting business requirements. Contributes to business case development and completes RFP responses, exploring and experimenting with new and existing data to tackle defined business problems. Technical Skills & Knowledge Proven experience gathering and interpreting business requirements. Proven experience developing technical requirements and specifications, including knowledge of software engineering methodologies, reporting tools, modelling and testing. Proven understanding of Lean Six Sigma and Business Process Modelling and Notation. Knowledge on application building using Python would be an added advantage. Experience Sound relevant experience in either an internal or external business analysis role and/or software / technical analysis role or similar, evidenced by adding business value through identifying, analysing and articulating problems and solutions. Developed technical knowledge and experience in delivering IT solutions, providing technical advice and understanding user requirements. Some stakeholder management experience. Typical Education Business Administration Business Management Computer Science Data Science Engineering IT Statistics Mathematics Similar Titles in the Market Oracle Functional Consultant Oracle GRC Consultant Oracle Risk Management Consultant Business Analyst – Oracle ERP Senior Business Analyst - Oracle ERP Leadership Capabilities LEAD: Gold Standard Definitions Available Technical Learning Business Analysis Skills And Capabilities Preferably CA/MBA/B.E/B.Tech with 1 to 3 years of implementation and advisory experience on Oracle Cloud ERP/EBS security and controls. Ability to drive risk and control programs for Oracle EBS/ERP Cloud, with a focus on the following: Segregation of duty concerns in an ERP environment along with an ability to design SoD (Segregation of Duties) risk libraries, and preparation of remediation roadmaps. System role-design, build security and troubleshoot security defects. Design risk control matrices by conducting workshops with business process owners. Review Oracle ERP IT Application Controls (ITAC) for test of design and test of effectiveness. Identify potential opportunities to automate current ITDM/manual controls leveraging Oracle EBS/ERP Cloud. Deep understanding of regulatory frameworks like COSO, COBIT. Knowledge and audit experience across regulations like SOX, GDPR, CCPA. Functional knowledge on Oracle EBS/ERP Cloud Financials, Procurement, Supply chain management, Projects and HRMS is a pre-requisite. Ability to simplify data and explain trends through Excel spreadsheets, dashboards, power-point presentations is highly desirable. Knowledge of Oracle GRC (Governance, Risk & Compliance) & Oracle Risk Management Cloud (RMC) is highly desirable. Working knowledge on Peoplesoft, NetSuite, MS Dynamics and Workday would be an added advantage. Willing to learn and work on different ERPs and CRM solutions. Technologies and Tools Oracle Fusion Cloud Financials, SCM modules, Projects and HCM. Oracle EBS Financials, SCM modules, Projects and HRMS. SQL /PLSQL, Python. SpotFire/ PowerBI. PeopleSoft, NetSuite, MS Dynamics and Workday. EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

Posted 3 weeks ago

Apply

0 years

0 Lacs

Bengaluru, Karnataka, India

On-site

Linkedin logo

FICO (NYSE: FICO) is a leading global analytics software company, helping businesses in 100+ countries make better decisions. Join our world-class team today and fulfill your career potential! The Opportunity “FICO is seeking Cyber Security Engineer to join our growing GRC Team. This is a full-time regular position (hybrid), and a great opportunity for an individual with strong PCI, ISO 27001, SOC2 audit skills or great interest in security Compliance and Risk Management frameworks and grow in exciting field of GRC". – Cyber Security - Director What You’ll Contribute Applicable work experience, in performing and running audits, certification programs and control assessments, including but not limited to scope planning, defining control procedures based on requirements, policies and standards, control testing, mapping issues to risks and socializing results. Coordinate audit-related tasks to ensure the readiness of managers and their teams for audit testing and facilitate the timely resolution of any audit findings. Strong knowledge of common security legal and regulatory requirements. (e.g., PCI, SOC, CSA STAR, NIST, ISO/IEC 27001, COBIT, etc.) Work on compliance initiatives to ensure operational effectiveness with applicable laws and regulations, as well as internal policies and procedures. Monitor activities of assigned IT areas to ensure compliance with internal policies and standards. Assist Corporate Compliance and the Business with all required compliance/security-related documentation. Facilitate for external audits to ensure compliance with all industry-mandated regulations. Participate in the development and implementation of new business initiatives to ensure functionality required to support compliance. Provide guidance to business functions on compliance/security-related matters. Good understanding of IT concepts, including Cloud hosting, containerization, encryption, networking, operating systems, databases, middleware, and applications. Knowledge of or experience working with, Cloud technologies/environments, AWS or other related cloud experience is required. Ability to effectively communicate to all levels of the organization, including senior management, and other stakeholders that influence the security and compliance posture of FICO. Ability to assess the nature of controls and identify automation opportunities for increased monitoring and scaling coverage. What We’re Seeking Bachelor’s degree in the field of Information Security, Computer Science or discipline and/or certifications. (e.g., ISO 27001 LI/LA, ISA/QSA, CISSP, CISA, CISM, and related GIAC.) Demonstrated ability to apply IT-related knowledge and experience in solving compliance issues. Experience implementing cloud security and compliance standards, frameworks, and controls (ISO/IEC 27001, SOC 2, PCI, NIST) for cloud service delivery models (IaaS, PaaS, SaaS). AWS Certifications (added advantage). Experience or understanding of governance, risk and compliance (GRC) processes and solutions. Background in security controls, auditing, network and system security. Ability to express technical concepts in business terms. Able to work well under deadlines in a changing environment and complete multiple projects effectively and concurrently. Evaluate effectiveness of the internal security control framework and recommend adjustments as business needs change. Regularly interact with all levels of management to present and discuss audit results and obtain gap remediation status. Our Offer to You An inclusive culture strongly reflecting our core values: Act Like an Owner, Delight Our Customers and Earn the Respect of Others. The opportunity to make an impact and develop professionally by leveraging your unique strengths and participating in valuable learning experiences. Highly competitive compensation, benefits and rewards programs that encourage you to bring your best every day and be recognized for doing so. An engaging, people-first work environment offering work/life balance, employee resource groups, and social events to promote interaction and camaraderie. Why Make a Move to FICO? At FICO, you can develop your career with a leading organization in one of the fastest-growing fields in technology today – Big Data analytics. You’ll play a part in our commitment to help businesses use data to improve every choice they make, using advances in artificial intelligence, machine learning, optimization, and much more. FICO makes a real difference in the way businesses operate worldwide: Credit Scoring — FICO® Scores are used by 90 of the top 100 US lenders. Fraud Detection and Security — 4 billion payment cards globally are protected by FICO fraud systems. Lending — 3/4 of US mortgages are approved using the FICO Score. Global trends toward digital transformation have created tremendous demand for FICO’s solutions, placing us among the world’s top 100 software companies by revenue. We help many of the world’s largest banks, insurers, retailers, telecommunications providers and other firms reach a new level of success. Our success is dependent on really talented people – just like you – who thrive on the collaboration and innovation that’s nurtured by a diverse and inclusive environment. We’ll provide the support you need, while ensuring you have the freedom to develop your skills and grow your career. Join FICO and help change the way business thinks! Learn more about how you can fulfil your potential at www.fico.com/Careers FICO promotes a culture of inclusion and seeks to attract a diverse set of candidates for each job opportunity. We are an equal employment opportunity employer and we’re proud to offer employment and advancement opportunities to all candidates without regard to race, color, ancestry, religion, sex, national origin, pregnancy, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. Research has shown that women and candidates from underrepresented communities may not apply for an opportunity if they don’t meet all stated qualifications. While our qualifications are clearly related to role success, each candidate’s profile is unique and strengths in certain skill and/or experience areas can be equally effective. If you believe you have many, but not necessarily all, of the stated qualifications we encourage you to apply. Information submitted with your application is subject to the FICO Privacy policy at https://www.fico.com/en/privacy-policy Show more Show less

Posted 4 weeks ago

Apply

0 years

0 Lacs

Chennai, Tamil Nadu, India

On-site

Linkedin logo

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Risk Consulting - Protect Tech – Senior - IT audit – General skills Key Responsibilities Your key responsibilities will include: Consistently deliver quality client services. Drive high-quality work products within expected timeframes and on budget. Monitor progress manage risk and ensure key stakeholders are kept informed about progress and expected outcomes. Foster relationships with client personnel to analyse, evaluate, and enhance information systems to develop and improve security at procedural and technology levels. Use knowledge of the current IT environment and industry trends to identify engagement and client service issues and communicate this information to the engagement team and client management through written correspondence and verbal presentations. Stay abreast of current business and industry trends relevant to the client's business. Demonstrate deep technical capabilities and professional knowledge. Demonstrate ability to quickly assimilate to new knowledge. Skills And Attributes For Success You will leverage your proven track record of IT Audit experience and strong personal skills, to effectively deliver quality results in the assessment, design, and support implementation of controls, security and IT risk solutions. To qualify for the role, you must have A bachelor’s or master’s degree and approximately 3-6 years of related work experience At least 2-4 years of experience in IT Risk and Compliance Design IT Risk Controls framework such as IT SOX Implementation and Testing of internal controls such as IT general controls, IT application controls, IPE related controls, interface controls etc. Identify control gaps, weaknesses and areas of improvements. Conducting IT internal control reviews, and review of SOC1 or SOC2 reports Knowledge of IT risk, information security or cyber security frameworks such as COSO, COBIT, ISO, NIST etc. IT Compliance and regulatory assessments – IT Risk and Controls assessment with exposure of any of the technologies such as SAP, Oracle, Workday, MS Dynamics or emerging technologies such as Cloud, RPA, AI/ML IT Infrastructure and Architecture risk assessments including data quality and data migration reviews, data privacy reviews, OS DB reviews etc. Strong exposure working in client facing roles, collaborate with cross functional teams including internal audits, IT security and business stakeholders to assess control effectiveness and facilitate remediation activities. Excellent communication, documentation and report writing skills. Good to have relevant industry certifications such as CISA, CISM, CISSP, CRISC, CCSK, ISO 27001, and others (as relevant) EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

Posted 4 weeks ago

Apply

10 years

0 Lacs

Mumbai, Maharashtra, India

On-site

Linkedin logo

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Risk Consulting – Senior Manager or Associate Director (IT and Cyber Compliance) The opportunity: your next adventure awaits. Are you a tech-savvy professional with a risk mindset who is passionate about building a better working world through the power of people, technology, and innovation? We have an incredible opportunity for you to join our dynamic Technology Risk team and make a real impact in the rapidly evolving world we live in. Within Risk Consulting, you will focus in the areas of areas of IT Risk Management, IT SOX, IT Regulatory Compliance, IT Audits, IT and Digital Transformations (including ERP and Cloud transformations), while enabling technology to better manage risk. As a member of our team, you will have the chance to work with industry leaders and help transform businesses by tackling the most complex challenges with our clients. This is client-facing role in a rapidly growing practice, where you’ll build client relationships with key stakeholders, including management executives for some of the most globally recognized brands. It makes this the perfect place to gain a deeper understanding of complex businesses transactions, all the while recommending solutions to some of the most pressing business challenges and process inefficiencies. You will also team up with our global professionals in multidisciplinary engagements, helping major global clients transform and sustain business performance. You will be leveraging emerging technologies like AI, ML, to build and enhance new solutions and actively work in building multiple tools and assets for efficient and effective client delivery. By plugging into our market-leading global network, you'll gain the experience you need to become an exceptional IT Risk Advisor Your Key Roles And Responsibilities Market Leadership and client management Executive-level skills in client relationship management and the hold conversations with senior executives. Partnering with onshore teams to understand client’s business & related industry issues / trends for global clients. Contribute to new solution development basis the industry trends and client’s problem statement in the areas of IT Risk Management Conduct knowledge sharing discussions & contribute to EY thought leadership. Participate in go to market, create proposals and respond to RFPs, client orals etc. Identify opportunities for cross-selling to current clients/introduce colleagues from other service lines. Identify buyers, influencers & stakeholders in existing client engagements and build strong relationships. Identify opportunities for cross-selling to current clients/introduce colleagues from other service lines. Assist Partners/Directors in driving the account management agenda by focusing on high impact opportunities. Create innovative insights for clients, adapts methods & practices to fit operational team needs & contributes to thought leadership documents. Delivery and Team management Understanding our clients’ overall technology strategy to effectively manage risk while transforming their business. Plan & schedule client engagements. Determine and deploy the right team with adequate skill sets for executing engagements and periodically review status of engagements and work products. Lead large engagements in the areas of IT Risk Management, IT SOX, IT Regulatory Compliance, IT Audits Actively contribute to improving operational efficiency on projects & internal initiatives by leveraging on lessons learned from other projects. Monitor engagement economics & ensure timely billing of invoices & actively follow-up on collections by managers/seniors. Manage a team of Managers and Seniors (across locations) to manage delivery of engagements for multiple processes across clients and conduct comprehensive risk assessments to identify and prioritize potential IT risks against technology strategies, business applications and platforms, and digital transformations. Maintain a strong client focus by effectively serving client needs and developing productive working relationships with client personnel. Stay abreast of current business and economic developments and new pronouncements/standards relevant to the client's business. Demonstrate subject matter & industry expertise (deep understanding of the industry, emerging trends, issues/challenges, key players & leading practices). Stay up to date with emerging industry trends and technologies, suggest innovative solutions to engagement teams and provide recommendations to clients on potential risks and opportunities. Operational Excellence Suggest ideas on improving engagement productivity and identify opportunities for improving client service. Manage engagement budgets and ensure compliance with engagement plans and internal quality & risk management procedures. People related Display teamwork, integrity and leadership. Work with team members to set goals and responsibilities for specific engagements. Foster teamwork and innovation. Utilize technology & tools to continually learn and innovate, share knowledge with team members and enhance service delivery. Understand EY and its service lines. Actively encourage team members to contribute ideas. Conduct workshops and technical training sessions for team members. Contribute to the learning & development agenda and knowledge harnessing initiatives. To qualify for the role, you must have Chartered accountant (CA) or Master's degree in Management, Information Systems/ Technology, Computer Science, Business Analytics, Cybersecurity, or a related discipline Passion for technology and an ardent desire to work in risk management. Minimum 12 years of a “Big 4” or professional firm or professional industry experience in risks & controls, with more than 10 years of experience in IT Risk Management, IT & Cyber Compliance areas such as Risk Assessment – Assessment of internal processes to identify security findings, vulnerabilities, and control gaps/deviations identified on applications and infrastructure. Develop risk control matrix in line with COBIT, ISO, NIST and ITIL Best Practice and recommendations. Control Monitoring- Understanding of Cyber and compliance standards like PCI, ISO27001, perform test the design and operational effectiveness of the controls. Control Automation – Identify controls automation opportunities through analytics platform to monitor the operational effectiveness on the regular basis. Defect / Gap Identification: Identify the confidentiality, integrity and the availability related deficiencies in the client environment and evaluate against industry standards. IT Risk and Controls assessment with exposure of any of the technologies such as SAP, Oracle, Workday, MS Dynamics or emerging technologies such as Cloud, RPA, AI/ML Knowledge of IT risk, information security or cyber security frameworks such as COSO, COBIT, ISO, NIST etc. Strong exposure working in client facing roles, collaborate with cross functional teams including internal audits, IT security and business stakeholders to assess control effectiveness and facilitate remediation activities. Good to have relevant industry certifications such as CISA, CISM, CISSP, ISO 27001, and others (as relevant) Cognitive problem-solving capabilities, quick decision-making skills and ability to handle complex situations with a calm demeanor Exceptional interpersonal, written, and verbal communication skills Effective organization and time management skills with the ability to work under pressure and adhere to project deadlines. Globally mobile and flexible to travel to onsite locations. Team player with strong interpersonal skills Ability to think differently and innovate Ideally, you’ll also have Responsible for the performance and appraisal of direct reports, including training and developing necessary skill sets to enable them to grow in their careers. Mentor and coach junior team members, enabling them to meet their performance goals and successfully grow their careers. EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

Posted 4 weeks ago

Apply

3 - 8 years

0 Lacs

Ahmedabad, Gujarat, India

On-site

Linkedin logo

Role: Internal Auditor Gender: Female candidates (mandate) Experience: 3 to 8 Years Qualification: CA (mandate) Budget: upto 18 LPA Notice Period: immediate to 30 days (preferred) Location: Ahmedabad (wfo) Shift timings: UK Shift Roles & Responsibilities: The Internal Auditor will execute internal audits under the direction of the Internal Audit Senior Manager and Zone Audit Director. The Senior Internal Auditor based in Ahmedabad will perform audits cross multiple zones, including Europe, Middle East and Africa, Asia pacific, and potentially certain global audits. Key responsibilities include:  Support the Internal Audit manager to conduct the audit engagements, including the budgeting and staffing assignments for the different areas of review, ensuring that adequate documentation and timely execution of the tasks to successfully complete each project'  Lead business process reviews to evaluate the design and operating effectiveness of internal controls over the business cycles, as well as the efficiency and effectiveness of operations;  Lead reviews to assess the accuracy of the financial statements;  Lead reviews to evaluate IT applications and the adequacy/efficiency of accounting, financial and operating procedures established for IT control purposes;  Determine compliance with established Finance and/or IT policies and Sarbanes Oxley legislation;  Prepare reports based upon audit results, audit documentation, and management action plans defined to address observations noted;  Maintain business management timely informed on audit progress, including road blocks, and observations via update meetings and closing conferences.  Update Audit Manager and Zone Audit Director as needed on audit progress and potential issues in a timely manner.  Be part a global Internal Audit Competency Center of selected business process. As such, work closely the Internal Audit Manager responsible for the area of expertise to analyze issues with global/regional/local impacts, develop trend analysis and compile best practices to be shared through the organization for adoption.  Assess the efficiency and effectiveness of actions implemented to address audit issues. Communication:  Communicate effectively verbally and in writing by adopting appropriate communication style to individuals at all levels of the organization and remaining open to disagreement or new ideas.  Articulate understanding of business areas under review, and demonstrates thorough test work and solid rationale for potential audit issues.  Update Audit Manager and Zone Audit Director as needed on audit progress and potential issues in a timely manner. Leadership:  Develop an open and honest working relationship with those being audited and maintain a professional approach at all times.  Share best practices, tools and testing methodologies with other team members, and contribute to departmental projects.  Will be leading an audit team, and will be the key point of contact with those being audited.  Displays leadership and project management skills to complete quality work on time with budgeted resources. Qualifications & Skills:  Undergraduate degree in Finance/Business Administration, Accounting and/or in Computer Science, MIS, or other relevant field;  3-4 plus years of professional experience in an audit related role within a Big-4 accounting firm and/or large corporation’s internal audit department preferred. Additional finance experience would be a plus  General knowledge of risk/control frameworks (COSO, COBIT) required;  A professional accounting/audit certification (CPA, CIA, etc.) or IT (CISA, CIA, CISM, etc.) certification preferred.  FMCG/Manufacturing experience preferred;  Sarbanes-Oxley experience preferred;  US GAAP/IFRS experience preferred;  SAP knowledge preferred;  Goal-oriented and outgoing with strong interpersonal and teamwork skills;  Strong written and verbal communication skills;  Ability to think and work analytically;  Ability to develop strong and lasting relationships with all levels of management.  Willingness to travel (50%);  Must fluently speak English (Asian/European languages are plus) The qualified candidate must be able to work with multiple organizations and teams, consistently meet deadlines and work well under time constraints and be able to quickly learn and understands diverse business areas/systems. Show more Show less

Posted 4 weeks ago

Apply

0 years

0 Lacs

Kolkata, West Bengal, India

On-site

Linkedin logo

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Risk Consulting - Protect Tech – Senior - IT audit – General skills Key Responsibilities Your key responsibilities will include: Consistently deliver quality client services. Drive high-quality work products within expected timeframes and on budget. Monitor progress manage risk and ensure key stakeholders are kept informed about progress and expected outcomes. Foster relationships with client personnel to analyse, evaluate, and enhance information systems to develop and improve security at procedural and technology levels. Use knowledge of the current IT environment and industry trends to identify engagement and client service issues and communicate this information to the engagement team and client management through written correspondence and verbal presentations. Stay abreast of current business and industry trends relevant to the client's business. Demonstrate deep technical capabilities and professional knowledge. Demonstrate ability to quickly assimilate to new knowledge. Skills And Attributes For Success You will leverage your proven track record of IT Audit experience and strong personal skills, to effectively deliver quality results in the assessment, design, and support implementation of controls, security and IT risk solutions. To qualify for the role, you must have A bachelor’s or master’s degree and approximately 3-6 years of related work experience At least 2-4 years of experience in IT Risk and Compliance Design IT Risk Controls framework such as IT SOX Implementation and Testing of internal controls such as IT general controls, IT application controls, IPE related controls, interface controls etc. Identify control gaps, weaknesses and areas of improvements. Conducting IT internal control reviews, and review of SOC1 or SOC2 reports Knowledge of IT risk, information security or cyber security frameworks such as COSO, COBIT, ISO, NIST etc. IT Compliance and regulatory assessments – IT Risk and Controls assessment with exposure of any of the technologies such as SAP, Oracle, Workday, MS Dynamics or emerging technologies such as Cloud, RPA, AI/ML IT Infrastructure and Architecture risk assessments including data quality and data migration reviews, data privacy reviews, OS DB reviews etc. Strong exposure working in client facing roles, collaborate with cross functional teams including internal audits, IT security and business stakeholders to assess control effectiveness and facilitate remediation activities. Excellent communication, documentation and report writing skills. Good to have relevant industry certifications such as CISA, CISM, CISSP, CRISC, CCSK, ISO 27001, and others (as relevant) EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

Posted 4 weeks ago

Apply

0 years

0 Lacs

Greater Hyderabad Area

On-site

Linkedin logo

Job Description As an IT Operations Technical Program Manager (TPM), you will lead the management and execution of complex projects that span across IT operations and supply chain systems. You will ensure the alignment of business systems, platforms, and tools with SCM objectives to streamline business operations and improve supply chain efficiency. This role involves working closely with cross-functional teams, including IT operations, planning, sourcing, logistics, procurement, and business stakeholders, to deliver high-impact projects. Key Responsibilities Lead IT Projects: Drive end-to-end management of key projects related to Supply Chain Management (SCM) systems, such as Anaplan, OTM, Fourkites, RPA solutions. Cross-functional Collaboration: Work closely with supply chain, Biz systems, engineering teams, and external vendors to define project requirements, timelines, and success criteria. Stakeholder Communication: Regularly communicate project progress, milestones, risks, and outcomes to senior leadership and business stakeholders. Process Optimization: Identify opportunities for process improvement and automation across SCM IT systems, leading initiatives to streamline workflows and increase efficiency. Risk Management: Proactively identify risks within projects and operations, develop risk mitigation strategies, and ensure timely delivery of projects. Vendor Management: Manage relationships with external vendors, ensuring service-level agreements (SLAs) and performance standards are met. Compliance and Security: Ensure that SCM systems comply with industry standards, data protection regulations (e.g., GDPR), and internal security protocols. Documentation and Reporting: Develop and maintain comprehensive project documentation, including project plans, roadmaps, risk assessments, and status reports. Required Qualifications Bachelor’s degree in Computer Science, Information Technology, Supply Chain Management, Engineering, or a related field (or equivalent work experience). Experience in technical program management with a focus on SCM IT systems, IT operations, or related fields. Proven experience managing complex SCM IT projects, including system implementations, upgrades, and integrations. Deep understanding of Supply Chain Management processes, including procurement, logistics, warehousing, transportation, and distribution. Familiarity with cloud platforms (AWS, Microsoft Azure, GCP) and their integration with SCM tools. Project management expertise, with knowledge of Agile, Scrum, Waterfall, or hybrid methodologies. Strong problem-solving skills with the ability to translate technical challenges into actionable solutions. Excellent communication and stakeholder management skills, with experience working with senior executives, technical teams, and non-technical business stakeholders. Preferred Qualifications Master’s degree in a technical or business-related field (e.g., MBA, MS in Supply Chain, or IT). PMP, Scrum Master, or similar project management certifications. Experience in cloud-based SCM systems, automation technologies, and DevOps practices. Experience in implementing AI, machine learning, or IoT technologies in supply chain operations. Knowledge of ITIL, COBIT, or other IT service management frameworks. Familiarity with supply chain analytics and data-driven decision-making in IT operations. At Nextracker, we are leading in the energy transition, providing the most comprehensive portfolio of intelligent solar tracker and software solutions for solar power plants, as well as strategic services to capture the full value of solar power plants for our customers. Our talented worldwide teams are transforming PV plant performance every day with smart technology, data monitoring and analysis services. For us at Nextracker, sustainability is not just a word. It's a core part of our business, values and our operations. Our sustainability efforts are based on five cornerstones: People, Community, Environment, Innovation, and Integrity. We are creative, collaborative and passionate problem-solvers from diverse backgrounds, driven by our shared mission to provide smart solar and software solutions for our customers and to mitigate climate change for future generations. Culture is our Passion Show more Show less

Posted 4 weeks ago

Apply

3 - 5 years

12 - 16 Lacs

Bengaluru

Work from Office

Naukri logo

locationsBangalore RMZ-ECO WORLDposted onPosted 3 Days Ago time left to applyEnd DateJune 13, 2025 (27 days left to apply) job requisition idR171411 , India Job Family Group: Information Technology (IT) Worker Type: Regular Posting Start Date: May 13, 2025 Business unit: Experience Level Early Careers About The Role What is the Role? As an ITGC Testing Analyst, you will support management in assessing the IT control environment. You will identify and report control weaknesses, track remediation action plans, and monitor the quality of remediation efforts.. More specifically, your role will include: ITGC Testing Conduct testing of IT General Controls (ITGCs) to ensure compliance and effectiveness. ITC Testing Perform testing of IT Components (ITCs) to validate data integrity and accuracy. Test Scripts Developing and executing test scripts, documenting test procedures, and evaluating results to identify control gaps. Documentation Maintain detailed documentation of testing procedures, findings, and recommendations. Reporting Ensure adherence to the approved assurance plan and provide regular updates on progress. Issue Management Advise IT operations on risk management and contribute to remediation plans for deficient controls. Collaboration Work with the offshore testing team to assess the design and effectiveness of IT controls. Stakeholder Communication Communicate effectively with stakeholders to ensure understanding and alignment with assurance processes and risk management strategies. Tool Management Oversee tools and reports used by the team and stakeholders, ensuring accuracy and updates based on business needs. What We Need from You? Experience: IT Audit Expertise 3+ years of experience in ITGC testing Education: Academic Background Bachelors Degree in Technology is highly desirable. Certifications Preferred certifications include those in IT security and Risk Management. Technical Skills: Certifications Relevant certifications like ISO 27001, CISA, CISM, and CRISC or having a strong desire to work towards obtaining such certifications. Information Risk Management Good understanding of information risk management and associated processes. Application Proficiency Experience with widely used applications such as SAP, Power Platform, and Cloud technologies is desirable. Continuous Improvement A mindset geared towards continuous improvement and project management experience. Soft Skills: Team Player Should be a strong team player and display the same by volunteering where one can extend support. Proactive Problem-Solving Skilled in identifying potential challenges and proposing effective solutions. Learner Mindset Demonstrates professional curiosity and a strong desire to learn. Team Collaboration Highly motivated team player who volunteers support and collaborates effectively. Work Schedule: Mid-Shift Working hrs will be IST 12 noon to 9 pm. Shift allowance will be eligible per organization policy. - COMPANY DESCRIPTION Shell is a global group of energy and petrochemicals companies with over 90,000 employees in more than 70 countries and territories. We deliver energy responsibly; operate safely with respect to our neighbours and work to minimize our environmental impact. We are in search of remarkable people who will thrive in a diverse and inclusive work environment to deliver exciting projects locally and globally. People who are passionate about exploring new frontiers. Innovators and pioneers. People with the drive to help shape our future. Because remarkable people achieve remarkable things. An innovative place to work Theres never been a more exciting time to work at Shell. Everyone here is helping solve one of the biggest challenges facing the world todaybringing the benefits of energy to everyone on the planet, whilst managing the risks of climate change. Join us and youll add your talent and imagination to a business with the power to shape the future whether by investing in renewables, exploring new ways to store energy or developing technology that helps the world to use energy more efficiently. An inclusive place to work To power progress together, we need to attract and develop the brightest minds and make sure every voice is heard. Here are just some of the ways were nurturing an inclusive environment one where you can express your ideas, extend your skills and reach your potential Were creating a space where people with disabilities can excel through transparent recruitment process, workplace adjustments and ongoing support in their roles. Feel free to let us know about your circumstances when you apply and well take it from there. Were closing the gender gap whether thats through action on equal pay or by enabling more women to reach senior roles in engineering and technology. Were striving to be a pioneer of an inclusive and diverse workplace, promoting equality for employees regardless of sexual orientation or gender identity. We consider ourselves a flexible employer and want to support you finding the right balance. We encourage you to discuss this with us in your application. A rewarding place to work Combine our creative, collaborative environment and global operations with an impressive range of benefits and joining Shell becomes an inspired career choice. Were huge advocates for career development. Well encourage you to try new roles and experience new settings. By pushing people to reach their potential, we frequently help them find skills they never knew they had, or make career moves they never thought possible. DISCLAIMER: Please noteWe occasionally amend or withdraw Shell jobs and reserve the right to do so at any time, including prior to the advertised closing date. Before applying, you are advised to read our data protection policy. This policy describes the processing that may be associated with your personal data and informs you that your personal data may be transferred to Shell/Shell Group companies around the world. The Shell Group and its approved recruitment consultants will never ask you for a fee to process or consider your application for a career with Shell. Anyone who demands such a fee is not an authorised Shell representative and you are strongly advised to refuse any such demand. Shell is an Equal Opportunity Employer.

Posted 4 weeks ago

Apply

0 years

0 Lacs

Pune, Maharashtra, India

On-site

Linkedin logo

Job Summary JOB DESCRIPTION If you are a cyber security professional looking for an opportunity to grow, Emerson has an exciting opportunity for you! You will be responsible for coordinating and promoting product security activities across multiple product development teams. The Product Security Engineer is responsible for awareness and adoption of secure development methods that achieve secure products services, and solutions. The Product Security Engineer is a business unit central point of coordination for secure product development processes, policy and standards implementation, and compliance. This includes establishing, cultivating, participating in, and managing communities of practices supporting product security and organizing activities and meetings with decision makers. This position will also coordinate with Emerson Enterprise Product Security resources to ensure compliance with Emerson’s Product Security requirements for all product development activities, processes, and tools. In This Role, Your Responsibilities Will Be: Coordinate and handle the implementation of secure development lifecycle efforts. Participate in new product development process audits and assessments. Participate in key projects as the product security functional representative. Work with business units to inventory products and assist in prioritizing risk. Organize and handle product risk assessments and threat modeling efforts. Assist in organizing activities including the Product Security Board, Product Security Team, and program meetings to expand and sustain efforts across business units, groups. Create, organize and participate in cross functional and business unit communities to promote the adoption of secure development and product security standard processes. Maintain artifacts and a central repository of communications and information for Emerson Product Security functions and teams. Assist with analyzing product security market and technology trends. Assist with training and development needs for various organizational functions specific to product security related roles and functions. Maintain familiarity with industry standards such as IEC 62443 (ISA99), IEC 29147, IEC 30111, ISO/IEC 27001, and NIST SP 800-218. Support the organizational Product Security Incident Response Team and vulnerability management activities. Establish and enhance strong relationships with business unit team members, organizational functions, and business partners. Who You Are: You pursue everything with energy, drive, and the need to finish. You always keep the end in sight and put in extra effort to meet deadlines. You create teamwork allowing others across the organization to achieve shared objectives. You partner with others to get work done. You achieve gained trust and support of others. You ask the right questions to accurately analyze situations. You evaluate pros and cons, risks and benefits of different solution options. For This Role, You Will Need: Bachelor's degree or equivalent experience and/or equivalent years of relative experience. validated experience and familiarity with product security standards and initiatives or practical work experience related to the implementation of products, services, and solutions. Experience in secure by design principles, standard processes and the integration of security into preexisting development practices. Familiar with concepts such as secure development lifecycle, secure by design, and defense in depth. Familiar with Microsoft Office tools for effective communications and information management. Ability to prioritize, prepare and make compelling presentations. Self-motivated and able to work under timeline. Strong problem solving / interaction management skills. Strong organizational and collaboration skills. Preferred Qualifications that Set You Apart: Risk Management Framework and Processes experience. Experience with standards and risk management frameworks (e.g. IEC 62443, IEC 27001, NIST SP 800-218, COBIT, NIST). Knowledge of technology trends and current product security issues, including those specific to control systems and related products. Experience with project management and development processes. Experience working with recognized security related standards and technologies. Experience with software bills of material (SBOM). Our Culture & Commitment to You At Emerson, we prioritize a workplace where every employee is valued, respected, and empowered to grow. We foster an environment that encourages innovation, collaboration, and diverse perspectives—because we know that great ideas come from great teams. Our commitment to ongoing career development and growing an inclusive culture ensures you have the support to thrive. Whether through mentorship, training, or leadership opportunities, we invest in your success so you can make a lasting impact. We believe diverse teams, working together are key to driving growth and delivering business results. We recognize the importance of employee wellbeing. We prioritize providing competitive benefits plans, a variety of medical insurance plans, Employee Assistance Program, employee resource groups, recognition, and much more. Our culture offers flexible time off plans, including paid parental leave (maternal and paternal), vacation and holiday leave. About Us WHY EMERSON Our Commitment to Our People At Emerson, we are motivated by a spirit of collaboration that helps our diverse, multicultural teams across the world drive innovation that makes the world healthier, safer, smarter, and more sustainable. And we want you to join us in our bold aspiration. We have built an engaged community of inquisitive, dedicated people who thrive knowing they are welcomed, trusted, celebrated, and empowered to solve the world’s most complex problems — for our customers, our communities, and the planet. You’ll contribute to this vital work while further developing your skills through our award-winning employee development programs. We are a proud corporate citizen in every city where we operate and are committed to our people, our communities, and the world at large. We take this responsibility seriously and strive to make a positive impact through every endeavor. At Emerson, you’ll see firsthand that our people are at the center of everything we do. So, let’s go. Let’s think differently. Learn, collaborate, and grow. Seek opportunity. Push boundaries. Be empowered to make things better. Speed up to break through. Let’s go, together. Accessibility Assistance or Accommodation If you have a disability and are having difficulty accessing or using this website to apply for a position, please contact: idisability.administrator@emerson.com . About Emerson Emerson is a global leader in automation technology and software. Through our deep domain expertise and legacy of flawless execution, Emerson helps customers in critical industries like life sciences, energy, power and renewables, chemical and advanced factory automation operate more sustainably while improving productivity, energy security and reliability. With global operations and a comprehensive portfolio of software and technology, we are helping companies implement digital transformation to measurably improve their operations, conserve valuable resources and enhance their safety. We offer equitable opportunities, celebrate diversity, and embrace challenges with confidence that, together, we can make an impact across a broad spectrum of countries and industries. Whether you’re an established professional looking for a career change, an undergraduate student exploring possibilities, or a recent graduate with an advanced degree, you’ll find your chance to make a difference with Emerson. Join our team – let’s go! No calls or agencies please. Show more Show less

Posted 4 weeks ago

Apply

0 years

0 Lacs

Gurugram, Haryana, India

On-site

Linkedin logo

Over the past 15 years, Medanta has created an unrivalled impact in delivering world class multi-specialty care for patients in India. We have hospitals in Gurgaon, Lucknow, Patna, Indore and Ranchi. In addition, we have clinics in Defence Colony (South Delhi), Cybercity & Subhash Chowk (Gurgaon), and at the Delhi Airport. Medanta is constantly growing and has also ventured in Retail vertical through Diagnostics (Laboratory Services) and Pharmacies. We also have also launched homecare services. We further plan to scale up existing facilities and expand into a few more geographical areas and also identify new avenues (Academics - Medical College) within the Healthcare eco-system. As we continue to scale and grow into new geographies, explore innovative methods of healthcare delivery, we are looking to hire exceptional talent to help us achieve our vision and grow in the process to achieve their professional aspiration. Roles & Responsibilities Leverage the existing cybersecurity tools and capable to identify open-source tools to discover threat agent actions. Identify potential threats and mitigation strategies to enable a proactive defense mechanism before an actual security incident. Design and implement a security incident response process. Act as the primary control point during significant information security incidents, manage the development of incident response plans and generate detailed reports. Identify and propose the implementation of the key information security initiatives, plans, practices and tools to the management. Proactive support on the approved information security projects, internal/external security audits, internal audits, application security assessment and reviews and compliance. Identify and understand potential and emerging information security threats and vulnerabilities and implement an effective communication channel across the appropriate teams. Detect and respond to cyber security threats and implement remediation controls. Perform Network vulnerability assessment and penetration testing (automated and manual) of infrastructure and hardening reviews of endpoints, networks and servers. Manage security compliance for end points, networks, servers, databases, etc. Proficient in operating cyber security solutions to protect IT Infrastructure and data it hold What we are looking for Bachelor’s degree specializing in Information Security, Computer Science, Information Management Systems, or relevant work experience. Minimum 10 years of experience in Cyber Security. Individual Contributor and capable of working independently. Strong technical skills relevant to Information Security such as secure coding standards, ethical hacking techniques, security operations, cloud security architecture, SEIM, operating system security, network access security, end point protection, vulnerability and threat management. An excellent knowledge and deep understanding of the complex network security principles and concepts such as (Anti-malware/Virus/Ransomware, web secure gateways, email protection gateway, http proxy, VLANs, ACL, DMZ, VPN, firewalls, IDS/IPS etc). Hands-on experience with analysing high volumes of logs, network data (e.g., NetFlow, FPC), and other security breach attacks. Practical knowledge of operating systems (such as: Windows, Linux, Hypervisors). Detailed experience with vulnerability scanning solutions. Ability to identify and mitigate network vulnerabilities and an understanding of their remediation. Required to assist with root cause identification for incident management. Should be acquainted with Information Security Industry standards/best practices and relevant regulations (such as: SSAE16, SOC 2, PCI DSS, HIPAA, GLBA, FISMA, NIST, ISO27000, CobiT, ISF, OWASP, SANS). Must have proficient analytical, technical research and detail-oriented skills Work days: 6 days Location: Gurgaon Show more Show less

Posted 4 weeks ago

Apply

0 years

0 Lacs

Pune, Maharashtra, India

On-site

Linkedin logo

Job Description In This Role, Your Responsibilities Will Be: Participate in new product development process audits and assessments. Participate in key projects as the product security functional representative. Work with business units to inventory products and assist in prioritizing risk. Organize and handle product risk assessments and threat modeling efforts. Assist in organizing activities including the Product Security Board, Product Security Team, and program meetings to expand and sustain efforts across business units, groups. Create, organize and participate in cross functional and business unit communities to promote the adoption of secure development and product security standard processes. Maintain artifacts and a central repository of communications and information for Emerson Product Security functions and teams. Assist with analyzing product security market and technology trends. Assist with training and development needs for various organizational functions specific to product security related roles and functions. Maintain familiarity with industry standards such as IEC 62443 (ISA99), IEC 29147, IEC 30111, ISO/IEC 27001, and NIST SP 800-218. Support the organizational Product Security Incident Response Team and vulnerability management activities. Establish and enhance strong relationships with business unit team members, organizational functions, and business partners. Who You Are: You pursue everything with energy, drive, and the need to finish. You always keep the end in sight and put in extra effort to meet deadlines. You create collaboration allowing others across the organization to achieve shared objectives. You partner with others to get work done. You achieve gained trust and support of others. You ask the right questions to accurately analyze situations. You evaluate pros and cons, risks and benefits of different solution options. For This Role, You Will Need: Bachelor's degree or equivalent experience and/or equivalent years of relative experience. validated experience and familiarity with product security standards and initiatives or practical work experience related to the implementation of products, services, and solutions. Experience in secure by design principles, standard processes and the integration of security into preexisting development practices. Familiar with concepts such as secure development lifecycle, secure design, and defense in depth. Familiar with Microsoft Office tools for effective communications and information management. Ability to prioritize, prepare and make compelling presentations. Self-motivated and able to work under timeline. Strong problem solving / interaction leadership skills. Strong organizational and collaboration skills. Preferred Qualifications that Set You Apart: Risk Management Framework and Processes experience. Experience with standards and risk management frameworks (e.g. IEC 62443, IEC 27001, NIST SP 800-218, COBIT, NIST). Knowledge of technology trends and current product security issues, including those specific to control systems and related products. Experience with project management and development processes. Experience working with recognized security related standards and technologies. Experience with software bills of material (SBOM). Our Culture & Commitment to You At Emerson, we prioritize a workplace where every employee is valued, respected, and empowered to grow. We foster an environment that encourages innovation, collaboration, and diverse perspectives—because we know that great ideas come from great teams. Our commitment to ongoing career development and growing an inclusive culture ensures you have the support to thrive. Whether through mentorship, training, or leadership opportunities, we invest in your success so you can make a lasting impact. We believe diverse teams, working together are key to driving growth and delivering business results. We recognize the importance of employee wellbeing. We prioritize providing competitive benefits plans, a variety of medical insurance plans, Employee Assistance Program, employee resource groups, recognition, and much more. Our culture offers flexible time off plans, including paid parental leave (maternal and paternal), vacation and holiday leave. About Us WHY EMERSON Our Commitment to Our People At Emerson, we are motivated by a spirit of collaboration that helps our diverse, multicultural teams across the world drive innovation that makes the world healthier, safer, smarter, and more sustainable. And we want you to join us in our bold aspiration. We have built an engaged community of inquisitive, dedicated people who thrive knowing they are welcomed, trusted, celebrated, and empowered to solve the world’s most complex problems — for our customers, our communities, and the planet. You’ll contribute to this vital work while further developing your skills through our award-winning employee development programs. We are a proud corporate citizen in every city where we operate and are committed to our people, our communities, and the world at large. We take this responsibility seriously and strive to make a positive impact through every endeavor. At Emerson, you’ll see firsthand that our people are at the center of everything we do. So, let’s go. Let’s think differently. Learn, collaborate, and grow. Seek opportunity. Push boundaries. Be empowered to make things better. Speed up to break through. Let’s go, together. Accessibility Assistance or Accommodation If you have a disability and are having difficulty accessing or using this website to apply for a position, please contact: idisability.administrator@emerson.com . About Emerson Emerson is a global leader in automation technology and software. Through our deep domain expertise and legacy of flawless execution, Emerson helps customers in critical industries like life sciences, energy, power and renewables, chemical and advanced factory automation operate more sustainably while improving productivity, energy security and reliability. With global operations and a comprehensive portfolio of software and technology, we are helping companies implement digital transformation to measurably improve their operations, conserve valuable resources and enhance their safety. We offer equitable opportunities, celebrate diversity, and embrace challenges with confidence that, together, we can make an impact across a broad spectrum of countries and industries. Whether you’re an established professional looking for a career change, an undergraduate student exploring possibilities, or a recent graduate with an advanced degree, you’ll find your chance to make a difference with Emerson. Join our team – let’s go! No calls or agencies please. Show more Show less

Posted 4 weeks ago

Apply

0 years

0 Lacs

Gurugram, Haryana, India

On-site

Linkedin logo

Job Description: About Us At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being. Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization. Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us! Global Business Services Global Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations. Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence and innovation. In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non-banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services. Process Overview* The Incident and Change Management function is responsible for identifying, mitigating/resolving and managing risk and impacts from change, technology and non-technology events and ensures the integrity and stability of service delivery channels through strict adherence and enforcement of incident and change management principles, thereby minimizing the overall impact to our customers and associates. Job Description* The individual needs to work as an Incident manager for Incident and Continuity Management line of business which is engaged in providing contingency management services to its supported LoBs. From an incident management point of view, the primary job requirement is to identify and mitigate impacts and risks for our customers as well as associates arising out of technology and non-technology related events. As a change manager the individual will be acting as a voting member of multiple Change Advisory Boards (CAB) where planned or expedited technology & facility changes are presented for approval. Role of an ICM consultant is to review all change requests concerning our supported LoBs from an impact perspective and accordingly approve/reject the request. Responsibilities* Resource will be responsible for real time incident & change management for all technology and non-technology incidents impacting the production environment Escalate issues impacting multiple users that cannot be easily resolved to technology teams, including creating incident tickets, opening bridge lines, paging support teams, and kicking off triage efforts. Engage in the triage efforts for impacting issues and drive technology teams to provide restoral as quickly as possible. Act as the liaison between contact centers and technology, provided key information about incidents to technology teams to assist with triage as well as providing direction to the business (contact centers) about estimated restoral times and actions that should be taken to minimize impact during the triage. Represent the supported businesses in a CAB (Change Advisory Board) meeting to ensure that planned events do not disrupt or adversely impact their operational stability. Continually assess the severity of an incident with respect to the impacts caused by it and regularly communicate the same to all stakeholders. Monitor, identify, track, report and mitigate impacts (wherever possible) and risks arising from an incident or a change Demonstrates business and/or technical acumen to recommend and implement solutions that protect the bank's assets. Requirements* Education* Graduates / Post-graduates with good track record/academic scores Certifications if any- ITIL V4 foundations, ITIL Intermediate – Service Operations, Business Continuity Planning and Crisis Management, COBIT 5, Industry certification like CCNA, BCP, MCP etc will be highly regarded. Experience Range* 8-10 years Foundational skills* Hands on experience in incident/problem management Excellent communication skills, both written and verbal, is a non-negotiable requirement In depth knowledge of the ITSM processes Desired skills* Familiarity with ITIL/ITSM methodologies Proficient with Remedy, Microsoft Access, SharePoint and contact center applications (IEX, NICE, etc.) Good understanding of the contact center environment Work Timings* 6:30am to 10:30 pm (Rotational) Job Location* Gurugram Show more Show less

Posted 4 weeks ago

Apply

0 years

0 Lacs

Kochi, Kerala, India

On-site

Linkedin logo

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Risk Consulting - Protect Tech – Senior - IT audit – General skills Key Responsibilities Your key responsibilities will include: Consistently deliver quality client services. Drive high-quality work products within expected timeframes and on budget. Monitor progress manage risk and ensure key stakeholders are kept informed about progress and expected outcomes. Foster relationships with client personnel to analyse, evaluate, and enhance information systems to develop and improve security at procedural and technology levels. Use knowledge of the current IT environment and industry trends to identify engagement and client service issues and communicate this information to the engagement team and client management through written correspondence and verbal presentations. Stay abreast of current business and industry trends relevant to the client's business. Demonstrate deep technical capabilities and professional knowledge. Demonstrate ability to quickly assimilate to new knowledge. Skills And Attributes For Success You will leverage your proven track record of IT Audit experience and strong personal skills, to effectively deliver quality results in the assessment, design, and support implementation of controls, security and IT risk solutions. To qualify for the role, you must have A bachelor’s or master’s degree and approximately 3-6 years of related work experience At least 2-4 years of experience in IT Risk and Compliance Design IT Risk Controls framework such as IT SOX Implementation and Testing of internal controls such as IT general controls, IT application controls, IPE related controls, interface controls etc. Identify control gaps, weaknesses and areas of improvements. Conducting IT internal control reviews, and review of SOC1 or SOC2 reports Knowledge of IT risk, information security or cyber security frameworks such as COSO, COBIT, ISO, NIST etc. IT Compliance and regulatory assessments – IT Risk and Controls assessment with exposure of any of the technologies such as SAP, Oracle, Workday, MS Dynamics or emerging technologies such as Cloud, RPA, AI/ML IT Infrastructure and Architecture risk assessments including data quality and data migration reviews, data privacy reviews, OS DB reviews etc. Strong exposure working in client facing roles, collaborate with cross functional teams including internal audits, IT security and business stakeholders to assess control effectiveness and facilitate remediation activities. Excellent communication, documentation and report writing skills. Good to have relevant industry certifications such as CISA, CISM, CISSP, CRISC, CCSK, ISO 27001, and others (as relevant) EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

Posted 4 weeks ago

Apply

0 years

0 Lacs

Kochi, Kerala, India

On-site

Linkedin logo

🚀 We're Hiring: IT Auditor at Difinity Digital 📍 Locations: Chennai | Coimbatore | Kochi At Difinity Digital, we are pioneers in transforming business operations with advanced process automation and data-driven analytics. Our mission is to accelerate your growth by harnessing the power of artificial intelligence to optimize processes and unlock actionable insights. Elevate your business operations and harness the full potential of AI with Difinity Digital. Connect with us today to explore how our expertise in process automation and analytics can drive your success. 🔍 Role: IT Auditor 🔑 Key Responsibilities: Audit & Compliance: Conduct regular audits of IT systems, networks, and applications to ensure effectiveness and compliance with industry standards, policies, and regulations (e.g., SOX, GDPR, HIPAA, ADHICS2.0, ISO27001). Risk Assessment: Assess IT infrastructure and internal controls to identify vulnerabilities, inefficiencies, and areas for improvement. GRC Frameworks: Develop, implement, and conduct GRC frameworks, policies, and strategies to align IT systems with regulatory requirements and industry standards. Stakeholder Collaboration: Collaborate with stakeholders to ensure compliance with relevant laws, regulations, and frameworks (e.g., ISO 27001, NIST, COBIT, COSO framework). Process Improvement: Lead initiatives to increase effectiveness and efficiency in service delivery, such as digital shifts and standardization of workpapers. Engagement Management: Undertake internal risk management and client engagement procedures, including Internal Audit and Internal Controls over Financial Reporting (ICOFR). Business Development: Support engagement managers and partners in business development initiatives, including pre-engagement activities, contracting, and setting up meetings with prospective clients. Quality Assurance: Obtain an in-depth understanding of engagement management, quality, and risk management policies to streamline processes specific to consulting Show more Show less

Posted 4 weeks ago

Apply

0 years

0 Lacs

Thiruvananthapuram, Kerala

Remote

Indeed logo

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. EY Technology: Technology has always been at the heart of what we do and deliver at EY. We need technology to keep an organization the size of ours working efficiently. We have 250,000 people in more than 140 countries, all of whom rely on secure technology to be able to do their job every single day. Everything from the laptops we use, to the ability to work remotely on our mobile devices and connecting our people and our clients, to enabling hundreds of internal tools and external solutions delivered to our clients. Technology solutions are integrated in the client services we deliver and is key to us being more innovative as an organization. EY Technology supports our technology needs through three business units: Client Technology (CT) - focuses on developing new technology services for our clients. It enables EY to identify new technology-based opportunities faster, and pursue those opportunities more rapidly. Enterprise Technology (ET) – ET supports our Core Business Services functions and will deliver fit-for-purpose technology infrastructure at the cheapest possible cost for quality services. ET will also support our internal technology needs by focusing on a better user experience. Information Security (Info Sec) - Info Sec prevents, detects, responds and mitigates cyber-risk, protecting EY and client data, and our information management systems. The opportunity The role of the IT Risk Analyst is to enable the conduct of business, through proactive identification, assessment, and mitigation, of IT risks facing EY personnel, facilities, and operations around the globe. This individual partners with the Information Security IT Risk Leader and other key EY Technology stakeholders to manage IT risks and compliance requirements to enable critical service delivery & operational processes. Your key responsibilities The IT Risk Management function creates and maintains EY Technologies’ risk management framework, processes, tooling, and strategy. Our primary objectives are to enable EY Technology to build a risk-aware culture, reduce IT risk, defend against internal and external threats, and protect client and EY data. As a Senior Associate in the IT Risk Management team, you will participate in the management of IT risks & compliance requirements across EY Technology including the management/remediation of information and technology risks, compliance tracking and enforcement of key IT controls. You will partner closely with the Information Security IT Risk Leader and broader Global IT Risk Management team to execute on the vision, strategy, goals, and objectives for IT Risk Management. The primary objectives for this role are to enable compliance & processes integration around IT Risk Management requirements also contributing to build a risk-aware culture, reduce IT risk, defend against internal and external threats, and protect client and EY data. You will aid the organization in understanding the importance of making risk-aware business decisions by supporting risk, compliance and security knowledge and championing the need for risk interventions and plans. You will also be critical to strengthening our risk and compliance position and continuous improvements to support business objectives and strategies. Under direct supervision of the Information Security IT Risk Leader, the IT Risk Analyst is responsible for: Building and maintaining an understanding of the EY Technology organization and key players within it to facilitate quick and accurate communications to appropriate teams. Subject matter expertise in IT risk assessment & compliance methodologies. Evangelizing a risk-aware culture and executing on IT Risk Management defined education and awareness plans. Improving data quality across the relevant data repositories. Assisting with compliance and risk mitigation process improvement. Understanding of eGRC system and associated reporting. Understanding of risk management practices, including audits, assessments, controls, and risk registers. Skills and attributes for success We’re on the hunt for someone with a keen analytical mind, a deep curiosity in how processes and technologies work, and the confidence to suggest how we can make things better. Patience and understanding how to build consensus are key elements for success, as is the grit to perform work that’s been overlooked in the past. To qualify for the role you must have Risk management experience AND compliance experience. An operational understanding of ISO 27002, ISO 27001, ISO 31000. An operational understanding of Data Privacy regulations requirements Familiarity with local and regional regulatory requirements and how they impact IT policies Experience with RSA Archer or other GRC systems. Clear communication skills. Solid ability to guide or develop actionable roadmaps and to implement in an efficient way to drive all risk management directives. An ability to utilize core risk and controls skills in a broad range of projects both in a traditional internal audit and in advisory projects aimed at assisting in the implementation of controls /improvements. Experience in developing and executing reporting strategies Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change Demonstrated ability to multitask and prioritize in a fast-paced environment Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change Outstanding interpersonal, communication, organizational, and decision-making skills Strong judgment and analytical ability Ability to communicate and gain support for initiatives Strong English language skills; excellent writing, presentation, interpersonal, and communication skills are required Ability to understand and integrate cultural differences and motives and to lead cross cultural teams. An ability to utilize core risk and controls skills in a broad range of projects both in a traditional internal audit and in advisory projects aimed at assisting in the implementation of controls / improvements. Professional; quickly establishes personal credibility and demonstrates expertise. 2 or more years of experience in the Information Technology, Information Security and/or IT Risk Management field(s). An advanced degree in Computer Science, Information Security or a related discipline, or equivalent work experience. One or more of the following or equivalent certifications preferred: Certified Risk and Information Systems Control (CRISC), Certified Information Systems Security Processional (CISSP), Certified Information Security Manager (CISM), Certified Information System Auditor (CISA), Certified Internal Auditor (CIA), Global Information Assurance Certification (GIAC) in related area, CIPP, CIPT Ideally, you’ll also have Experience in IT Risk Management and/or Information Security disciplines Experience in communicating to all levels of management, clients and vendors A working knowledge of policy frameworks such as ISO, COBIT and unified compliance framework Ability to appropriately balance internal functional needs with business impact and benefit Skilled in executive level presentations and briefings Solid knowledge and working experience in governance, risk and compliance as applies to technology Proactively maintains a comprehensive knowledge of the core business and financial drivers of EY’s service lines as well as the operating environment within IT. Works with peers and others in service specific IT groups to support the proper recognition of risk issues or to proactively position risk mitigation and other service improvement opportunities or to engage with others in the area of continuous improvement. Good appreciation of the business benefits of internal control and good risk management and not just for compliance purposes (i.e., not limited to SOX, PCI or other regulatory mainstay drivers). What working at EY offers We offer a competitive remuneration package where you’ll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions. Plus, we offer: Support, coaching and feedback from some of the most engaging colleagues around Opportunities to develop new skills and progress your career The freedom and flexibility to handle your role in a way that’s right for you EY is committed to being an inclusive employer and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service whilst allowing you to build your career without sacrificing your personal priorities. While our client-facing professionals can be required to travel regularly, and at times be based at client sites, our flexible working arrangements can help you to achieve a lifestyle balance. EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

Posted 4 weeks ago

Apply

0 years

0 Lacs

Bengaluru East, Karnataka, India

On-site

Linkedin logo

 Work closely with the IT and project teams in getting a thorough understanding on the requirement, review from the security standpoint and recommend relevant solutions.  Responsible for effective coordination and prompt & proactive communication with the relevant teams involved in the requirements.  Leads the design and development of security architectures for different types of cloud and cloud/hybrid systems.  Knowledge of industry recognized Enterprise Architecture principles and frameworks such as ToGAF, COBIT, etc.  Knowledge of various cloud environments, cloud security stack and cloud deployment models.  Evaluate the security offerings related to cloud security and recommend appropriate controls.  Knowledge on different CSP platforms like AWS, Azure, GCP and other related cloud services/provider.  Understanding of security solutions in cloud environments across various security domains like Identity & Access Management, Security Monitoring, data protection (encryption, tokenization).  Knowledge on Networks: LAN, WAN, SDN, NFV, Network Capacity Planning, Routing, Proxy Servers, wired and wireless Infrastructure, Network Infrastructure Services (DNS, DHCP, CA, Directory Services), Load Balancing, VPN technologies, SSL certificates and Firewalls.  Knowledge on BYOD concepts, including EMM, MAM and MDM related solutions and polices.  Preferred to have Cyber Security certifications such as SANS, OWASP, CCSK (Cloud Security Alliance), CISSP or any other standard institutes or certification bodies.  Network Certifications such as CCNA/CCNP. Show more Show less

Posted 4 weeks ago

Apply
cta

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

Featured Companies