2600 It Audit Jobs - Page 8

Designation : Consultant -GRC Certifications,Qualification and Experience : Bachelor / PG degree with any of the certifications - ISO 27001, CBCP, CISA, CISM, CRISC, CISSP 2 years to 20 years of applied work experience in cyber security programs, audits, assessments, risk, remediation, or cyber security compliance management. JobDescription: Implements security controls, risk assessment framework (ISO 31000, NIST), and program that align to regulatory requirements, ensuring documented and sustainable compliance that aligns and advances client business objectives. Evaluates risks and develops security standards, procedures, and controls to manage risks. Improves client security positioning th...

Role & responsibilities ITAC - Finance Sector A Bachelor's degree in engineering and approximately 5 years of related work experience; or a masters or MBA degree in business, computer science, information systems, engineering Experience in performing IT audits of banking/financial sector applications Good to have knowledge of other IT regulations, standards and benchmarks used by the IT industry (e.g., NIST, PCI-DSS, ITIL, OWASP, SOX, COBIT, SSAE18/ISAE 3402 etc.) Technical Knowledge of IT Audit Tools Experience in carrying out OS/DB/Network reviews Exposure to Risk Management and Governance Frameworks/ Systems will be an added advantage Exposure to multiple ERP systems will be added advanta...

Position Purpose Description of the environment RISK Operational Risk Management (RISK ORM), created early 2021 to oversee operational risks within the mandate of the RISK function, is organised, under the responsibility of the Group Chief Operational Risk Officer (Group CORO), around 3 Poles: RISK ORM Framework, RISK ORM Technology & Transversal Risks and RISK ORM Network. RISK ORM Network is made up of all the Operational Risk Officers (OROs) acting as the second line of defence (LoD2) within the Groups operational entities (Poles, Business Lines, Functions, Transversal Activities). In this context, the Head of RISK ORM ICT & COE , whose missions are presented below, reports hierarchically...

Job Description SENIOR ASSOCIATE SOC (Technology Risk Consulting) Risk Consulting helps clients across various industries by addressing the increasingly complex strategic, operational, compliance, and governance challenges faced by those responsible for managing or overseeing dynamic businesses. Risk Consulting major offerings includes AML & Regulatory Compliance; ERP Advisory; Automation and Analytics; Enterprise Risk Management; Internal Audit; SOX Advisory; Contract Compliance; Credit Reviews; Information & Technology Audits; Cybersecurity risk management; Third-party risk management; IT due diligence; SOC1 / SOC2; Security and Privacy Risk; Governance Risk and Compliance; PCI; Cyber Tran...

Job Description SENIOR ASSOCIATE IT SOX(Technology Risk Consulting) Risk Consulting helps clients across various industries by addressing the increasingly complex strategic, operational, compliance, and governance challenges faced by those responsible for managing or overseeing dynamic businesses. Risk Consulting major offerings includes AML & Regulatory Compliance; ERP Advisory; Automation and Analytics; Enterprise Risk Management; Internal Audit; SOX Advisory; Contract Compliance; Credit Reviews; Information & Technology Audits; Cybersecurity risk management; Third-party risk management; IT due diligence; SOC1 / SOC2; Security and Privacy Risk; Governance Risk and Compliance; PCI; Cyber Tr...

Opportunity alert! RSM US Integrated Services India Private Limited - Walk-in Drive (face to face) at our Gurugram office. Dear Candidate, We are conducting a walk-in drive at our Gurugram office on 9 th November2025. If this opportunity aligns with your career goals, we'd love to see your profile. If you're interested, please share your updated resume to chetan.n@rsmus.com. Job Description SENIOR ASSOCIATE SOC/SOX (Technology Risk Consulting) Risk Consulting helps clients across various industries by addressing the increasingly complex strategic, operational, compliance, and governance challenges faced by those responsible for managing or overseeing dynamic businesses. Risk Consulting major...

Quest is seeking a motivated self-starter with excellent interpersonal, communication, and presentation skill to join the IT Security Risk and Assurance team to work with internal and external customers to address IT Audit and assurance related requests in the areas of IT, IT security and privacy and compliance. This role will be primarily responsible for responding to, coordinating, and managing IT Security assessment and audit inquiries from our clients and regulators.

Professional certification such as ISO 27001:2022 Lead Auditor and Implementer. Minimum of 2 years of experience in ISMS, ITGC, and GITC audits. In-depth knowledge of ISO 27001, Cybersecurity Framework, and other relevant standards. Strong understanding of IT infrastructure, network security, and information security best practices. Excellent analytical and problem-solving skills with attention to detail. Effective communication skills to present findings and interact with stakeholders at all levels. Ability to work independently and manage multiple priorities in a dynamic environment. ISO 27001:2022 Lead Auditor / Implementer certified

Hiring for ITGC Role Location: Noida (WFO Only) Notice period :15 Days to 30 Days only Total IT Experience: 4 to 6 years Job Description: Timely completion of information technology and information security audits in a manner that is consistent with the professional standards Adequately analyze and document all information technology and related controls and develop an appropriate audit program to test the controls identified. Evaluate the adequacy of security and processing controls as they relate to each audit, and the effectiveness of general IT controls within the IT environment. Monitor the project status of new systems development, disaster recovery testing, and the clients business co...

As a Senior Digital Risk Advisor at Swiss Re, your role involves overseeing the first-line digital & technology operations risk and control activities. You will be responsible for identifying risks, applying controls, and monitoring, measuring, and reporting performance to technology and business leaders. In this role, you will: - Support Applications and Business stakeholders with applying digital risk governance principles and standards - Contribute to the implementation of the digital risk framework as the trusted digital risk partner - Ensure understanding of IT threats and risks, timely handling of issues, and effective design and operation of IT controls - Collaborate with digital & te...

Work with the company s external auditor in leading walkthroughs, test of design and operational effectiveness of IT general controls; Coordinate and perform SOX program testing/auditing of IT General Controls with control owners and management; Evaluate IT General Control deficiencies for impact and perform risk assessments and root cause analysis to determine appropriate management actions. Monitor management s associated remediation efforts to closure, including review of supporting evidence; Createand maintain supporting documentation for SOX compliance testing; Engage and deliver appropriate workpapers timely to external auditors; Engage, develop relationships and maintain open communic...

About The Role Project Role : Security Delivery Lead Project Role Description : Leads the implementation and delivery of Security Services projects, leveraging our global delivery capability (method, tools, training, assets). Must have skills : Security Architecture Design Good to have skills : NAMinimum 7.5 year(s) of experience is required Educational Qualification : 15 years full time education Summary :As a Security Delivery Lead, you will be responsible for overseeing the implementation and delivery of Security Services projects. A typical day involves collaborating with various teams to ensure that projects are executed efficiently, utilizing global delivery capabilities, and ensuring ...

About The Role Project Role : Security Delivery Lead Project Role Description : Leads the implementation and delivery of Security Services projects, leveraging our global delivery capability (method, tools, training, assets). Must have skills : Security Compliance Management Good to have skills : Security Architecture DesignMinimum 5 year(s) of experience is required Educational Qualification : 15 years full time education Summary :We are seeking a skilled and detail-oriented Security Architect/ Security Compliance professional specialized in ITGC and Control Testing Professional to join our team. The ideal candidate will have a strong background in IT audit, internal controls, and risk mana...

Line of Service Advisory Industry/Sector Not Applicable Specialism Risk Management Level Senior Associate Job Description & Summary At PwC, our people in audit and assurance focus on providing independent and objective assessments of financial statements, internal controls, and other assurable information enhancing the credibility and reliability of this information with a variety of stakeholders. They evaluate compliance with regulations including assessing governance and risk management processes and related controls. Those in internal audit at PwC help build, optimise and deliver end-to-end internal audit services to clients in all industries. This includes IA function setup and transform...

Location: Mumbai Designation: Consultant As a Consultant in our Cyber Strategy & Transformation Team you ll build and nurture positive working relationships with teams and clients with the intention to exceed client expectations. Our services help our clients tackle the many security challenges they face daily and develop effective solutions using people, processes and technology, while enabling better security and risk decisions, and reducing costs related to managing security risks. Desired qualifications Knowledge of cyber / information security concepts, risk and controls concepts. Strong understanding of security-related operational processes in IT environments. Strong knowledge of both...

Coordinate withbusiness and IT process owners to initiate, scope, plan, and conduct periodic controls assessments to identify areas of risk by evaluating the design andoperating effectiveness of Information Technology General Controls (ITGC) overapplications, operating systems, and databases as we'll as the networkinfrastructure including cybersecurity controls Planning,testing, documentation and reporting Communicateissues to process owners, ensuring their understanding of associated risks andthe actions needed to remediate those risks Prepare reportsbased on the adequacy and effectiveness of controls evaluated/tested Track andMonitors open issues and conducts follow-up to evaluate the adeq...

Reviews, IT Internal Audits, Controls Testing, Compliance Reviews, ISO 27001 Reviews, HIPAA/ HITRUST Reviews Responsibilities Strong understanding of IT General Controls domains such as Change Management ,User Access Management, IT Operations, Back and Recovery Management etc Strong understanding of the thirdparty risk management Implementation and assessment knowledge of various industry standards, frameworks, and compliances such as ISO 27001, HIPAA, HITRUST, ISO 22301, ISO 27701 etc Understanding of the IT Risk Assessment methodologies and ability to comprehend and apply the knowledge during IT assessment lifecycle Interview client stakeholders and conducts walkthrough meetings and develo...

Now we arelooking for a Junior Information Security Analyst , you will be a part ofour Global Finance Team. Role Overview: We are seeking a motivated and detail-oriented Junior Information Security Analyst to support our Information Security Governance Manager in maintaining andexpanding our compliance programs, with a primary focus on ISO 27001:2022(Information Security Management) and ISO 22301:2019 (Business Continuity Management). These certifications are essential to our ability to maintainclient trust, meet regulatory obligations, and qualify for public sector bids. Your Impact on the Mission: Assist in maintaining the Information Security Management System (ISMS) and Business Continui...

Responsibilities Conduct comprehensive vulnerability assessments and penetration testing on networks, applications, and systems. Identify and report on security weaknesses and potential threats. Provide detailed recommendations to address identified vulnerabilities. Work closely with IT teams to implement security solutions and remediation plans. Stay informed about the latest security threats, tools, and techniques. Generate detailed security assessment reports for technical and non-technical stakeholders. Ensure compliance with industry standards, regulations, and best practices

Role: Manager-Cyber Security Total Experience: 10-15 Years Industry Experience Relevant Experience: 8 Years Qualification: Any Graduate. Location: Pune, India Technical Know-How: Hands-on experience in conducting IT Internal or External Audits , including evidence review and preparation of detailed audit reports. Strong understanding of fundamentals and standard procedures across key IT functions , such as Server Management, Network Management, Antivirus, Patch Management, SOC, VAPT, Access Management, and ITIL processes . Job description : Lead enterprise-wide information security strategy and compliance programs. Design Companys policy and procedure. Ensuring Design effectiveness and opera...

Role & responsibilities The IT Systems & Operations Associate helps manage Sibros internal IT systems and global hardware operations. Youll keep employee devices and networks running smoothly while building the processes that track and manage our hardware worldwide. This role bridges IT, Operations, and Accounting, ideal for someone early in their IT career whos ready to learn, take ownership, and grow into systems administration and automation. Hardware Management (Product & Rental Equipment) Work with leadership to build and manage the end-to-end process for Sibros hardware (sold and rented units). Track orders, shipments, and returns; coordinate with Operations on logistics and with Accou...

PerformingSecurity Risk Assessment and Threat Analysis for various application bycovering various domain of ITGC, NIST and ISO 27001 standards SecurityArchitecture review, Application Design and Workflow review, VAPT Report, UserAccess Management, BCP / DR, Backup and Recovery report, 3 rd party SecurityReports etc. Review ofApplication and underline infrastructure with respect to ITGC/ NIST andInternal controls Formulatingchecklist and baseline for performing the assessment Supporting andcoordinating with various team for remediation of observations raised Presenting thedashboard to management and explaining the risk posture Supporting team by conducting various training ontools

As an Information Security Consultant, you will be responsible for performing a variety of IT audit activities for SaaS start-up companies including planning, fieldwork, and reporting. You will have the opportunity to work with a diverse group of clients and industry sectors while developing your technical and professional skills. - Assist with the planning and execution of information security audits - Identify and evaluate information security risks, controls, and business processes - Understand and evaluate the impact of emerging technologies on client operations - Communicate audit findings and recommendations to clients and management - Contribute to the development of audit methodologi...

At EY, youll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you And were counting on your unique voice and perspective to help EY become even better, too Join us and build an exceptional experience for yourself, and a better working world for all, As part of our EY GRC Tech team youll contribute technically to IT Risk and Assurance client engagements and as part of Transformation projects An important part of your role will be to actively establish, maintain and strengthen internal and external relationships Youll also identify potential business opportunities for Ernst & Young within exis...

Requisition Id: 1653620 As a global leader in assurance, tax, transaction and advisory services, we hire and develop the most passionate people in their field to help build a better working world This starts with a culture that believes in giving you the training, opportunities and creative freedom At EY, we don't just focus on who you are now, but who you can become We believe that its your career and ?Its yours to buildwhich means potential here is limitless and we'll provide you with motivating and fulfilling experiences throughout your career to help you on the path to becoming your best professional self, The opportunity : Consultant-TMT-Assurance-ASU TR Technology Risk Bangalore TMT : ...