IT Analyst - Risk & Compliance

Role Overview: As an Information Systems Auditor, you will be responsible for conducting audits across various applications, databases, and IT infrastructure. Your role will involve performing General IT Controls (GITC) testing on applications like SAP and Oracle, as well as infrastructure components such as operating systems and databases. Additionally, you will evaluate and test IT controls related to SOX compliance and review cloud environments like AWS, Microsoft Azure, and Google Cloud Platform (GCP). Your attention to detail will be crucial in preparing comprehensive audit documentation, risk assessments, and actionable recommendations following industry standards. Collaboration with internal teams and stakeholders will be essential to ensure timely remediation of identified issues. Key Responsibilities: - Conduct information systems audits across applications, databases, and IT infrastructure. - Perform General IT Controls (GITC) testing on applications like SAP and Oracle, and infrastructure components such as operating systems and databases. - Evaluate and test IT controls related to SOX compliance. - Review and audit cloud environments such as AWS, Microsoft Azure, and Google Cloud Platform (GCP). - Prepare comprehensive audit documentation, risk assessments, and actionable recommendations following industry standards. - Collaborate with internal teams and stakeholders to ensure timely remediation of identified issues. Qualifications Required: - Strong knowledge of GITC testing for applications and infrastructure. - Hands-on experience auditing cloud environments (AWS, Azure, GCP). - Solid understanding of SOX ITGC testing processes. - Familiarity with financial services audit. - Understanding of network security and data privacy frameworks. - Knowledge of tools for audit automation and cloud compliance. Certifications: - CISA Certified Information Systems Auditor - ISO 27001: 2002 Lead Auditor Certification - CCSK Certificate of Cloud Security Knowledge - NIST or other relevant industry certifications (Note: The job description did not include any additional details about the company.),