Jobs
Interviews

346 Itgc Jobs

Setup a job Alert
JobPe aggregates results for easy application access, but you actually apply on the job portal directly.

5.0 - 9.0 years

0 Lacs

karnataka

On-site

As the IT SOX Compliance Manager, your primary responsibility will be to manage and direct work streams associated with IT SOX Compliance, focusing on IT General Controls (ITGC) and IT Dependencies like ITAC, Interfaces, and IPEs. You will be required to provide technical support for the assessment, design, and implementation of ITGC requirements, ensuring a thorough understanding of key ITGC domains such as Logical Access, Change Management, SDLC, and Computer Operations. Your role will also involve testing IT Application Controls (Configurable, Non-configurable), Interfaces, IPEs, Data Migration, and Platform Reviews, reviewing control evidence for adherence to accuracy, completeness, and precision in control execution across all ITGC. Additionally, you will be responsible for developing, implementing, and testing controls for new acquisitions and in-scope entities. Collaboration with control owners and operators to ensure the quality, consistency, and operability of new and existing controls will be crucial. In a fast-paced, matrixed work environment, you will build long-term relationships with key stakeholders and review test findings, facilitating the remediation of ITGC control gaps and escalating critical issues to senior management of client/Onshore teams when necessary. Furthermore, you will plan and direct the work of team members, monitoring their progress, and taking corrective action as needed. Coaching, mentoring, and developing direct reports, overseeing the onboarding process for new hires, and providing career development planning and opportunities will also be part of your responsibilities. Maintaining a safe, secure, and legal work environment, building and maintaining strong peer relationships within the team and across the organization, and coordinating work with External Auditors of the client if required are additional aspects of this role. Lastly, you will manage the Cyber, Risk & Regulatory (Advisory) team and client portfolio to deliver 8,000 to 12,000 client hours, ensuring efficient and effective operations within the compliance framework.,

Posted 1 day ago

Apply

1.0 - 2.0 years

4 - 9 Lacs

Thane, Maharashtra, India

On-site

Experience Implementation of ISO 27001, GRC ITGC & IT Regulatory compliance Knowledge in ISMS, ITGC Knowledge about regulators RBI, IRDA, SEBI Fresher 2023 /2024 in B. Tech or Cybersecurity Experience: 1 - 2 years

Posted 2 days ago

Apply

1.0 - 2.0 years

4 - 9 Lacs

Navi Mumbai, Maharashtra, India

On-site

Experience Implementation of ISO 27001, GRC ITGC & IT Regulatory compliance Knowledge in ISMS, ITGC Knowledge about regulators RBI, IRDA, SEBI Fresher 2023 /2024 in B. Tech or Cybersecurity Experience: 1 - 2 years

Posted 2 days ago

Apply

4.0 - 9.0 years

15 - 19 Lacs

Pune

Work from Office

Divisional Risk and Control Analyst - TDI Controls Testing & Assurance, AS Infrastructure Chief Operating Office (COO) is responsible for the effective operation of the infrastructure functions, driving operational efficiency whilst supporting the effective delivery of infrastructure services in line with business objectives and control requirements. It also includes oversight of Infrastructure Divisional Control Office (DCO) and Trade Settlement and Confirmations Operations (TSCO). Infrastructure Divisional Control Office (IDCO) as part of Infrastructure COO, provides services to multiple functions in infrastructure. The IDCO function is a dedicated risk, control, and regulatory oversight function, with prime responsibility for managing and proactively mitigating risk across the full breadth of the Technology and Infrastructure organization. Function also provides a consolidated view and central coordination of (non-financial) risks, as well as effective, efficient, and consistent standards and policies. (Technology Data & Innovation) TDI Control Testing & Assurance team part of IDCO identifies, tracks and reports control testing & assurance activities, conducts independent controls testing (design and operating effectiveness) on different risk types in line with the Control Testing Standards. The team also focuses on regulatory and risk-based assurance requirements. This role is within TDI Control Testing & Assurance team. Your key responsibilities Perform Control Testing in line with Control Testing methodology/minimum standard Identify control deficiencies (findings), risks related to elements of controls, participate in findings agreement with stakeholders, escalate potential issues and exception items noted during the testing to senior management for discussion and further investigation, if deemed necessary Prepare Control Testing workpapers for senior management detailing testing results, document findings with highest quality Track Control Testing identified findings, perform required follow-up on open findings Consider regulatory and internal firm policy requirements as well as established best practices for control assurance. Support controls assurance activities Support in monitoring Control testing teams adherence to Control Testing methodology/minimum standards Support, contribute in managing Control Testing vendor resources, where applicable Track testing related effort/budget Plan Vs. Actuals throughout the testing lifecycle Build and maintain solid working relationships with key stakeholders such as within the DCO, IDCO, TSCO, GTI and other Testing Teams including Divisions/sub-divisions, 2 LoD and Group Audit (GA) Your skills and experience University degree preferably in Computer Science, Mathematics, Engineering or a related subject or equivalent qualification in the areas of information security. Professional/industry recognized qualifications e.g., CISA, CISSP, CISM, CRISC are beneficial. Experience in Cloud Security audit/testing, GCP (Google Cloud Platforms) or Professional/industry recognized qualifications e.g., CCSP, CCSK will be an advantage Good knowledge of auditing IT application controls, e.g., from IT audits or IT risk management. Understanding of the relationship between IT risk and underlying business process risk. Knowledge of regulations governing financial institutions is beneficial. Strong written and verbal communication skills and the ability to communicate effectively in conflict situations. Strong organizational skills and attention to detail. Ability to work under pressure, multi-task and prioritize workload. Strong analytical skills and structured thought process with the ability to clearly articulate control deficiencies and related risk Flexible, proactive, and innovative mind set with strong organizational skills to take ownership and responsibility for agreed targets and to meet them within budget to enable a timely and efficient completion of projects. This is an IC (individual contributor) role.

Posted 4 days ago

Apply

3.0 - 6.0 years

7 - 15 Lacs

Ahmedabad

Work from Office

About BDO ITRA Leveraging our global expertise and experience, our team of subject matter experts and industry professionals work across sectors and industries to help our clients respond to the changing business environment. With deep analytic skills and state-of-the art technologies, our professionals deliver customised and innovative solutions to clients across geographies. We at BDO, engage in transforming data into insights, our professionals guide clients through a crisis, fraud, regulatory investigations, etc. and advise them on strategies to prevent and mitigate the disruption arising from these complex matters. Details: Position Title Assistant Manager Department BAS -IT Risk Assurance Reporting Manager Manager Experience At least 3+ years of relevant experience into IT Risk Audit, ITGC, etc Qualification CA / B.Tech / MBA (IT) / CISA / DISA Core ITRA Roles & Responsibilities: Responsible for executing client related engagements in the areas ITGC, process reviews, IT Application Controls, standard operating procedures review, SOCR (SOC 1, SOC 2), SOX 404 Audits. Determine that the work delivered is of high quality. Anticipate and identify engagement related risks and escalate issues as appropriate. Actively establish & strengthen client (functional heads & key influencers) and internal relationships. Assist seniors & managers in developing new methodologies and internal initiatives. Create a positive learning culture, coaches, counsels and develops junior team members. Identify & escalate potential business opportunities for the firm on existing client engagements. Should be a team player with a proactive and result oriented approach. Ability to prioritize, work on multiple assignments, and manage ambiguity. Should have good presentation & communication skills. Should also be well versed with MS office tools. Should be open and honest in communication with clients and colleagues. Fluency in written & verbal English. Managing engagement teams for optimum delivery, ability to articulate audit findings and convincing mid to senior level client management and coaching & mentoring staff on the engagements. High on personal integrity and work ethics and can be trusted without micro-level supervision from seniors Qualified CA, MBA, BTech/BE. (Preferred CISA or equivalent certifications) Competencies: Analytical Thinking Collaboration IT Skills (Excel, PPT, Word, Outlook) Communication Skills Interpersonal Relationship & Respect Innovation

Posted 4 days ago

Apply

1.0 - 5.0 years

2 - 7 Lacs

Pune

Work from Office

About The Role : Job Title- I&A On-boarding Information Security Analyst, Associate Location- Pune, India Role Description: As I&A On-boarding Information Security Analyst you will be part of Access Lifecycle On-boarding global family which includes access management for application end user recertification On-boarding, user access for request & approval, user provision On-boarding and Functional Taxonomy SoD On-boarding & maintenance as well as IDAHO (Access concept) SME as central DB services. Deutsche Bank is looking for bright and open-minded individuals to support Business Identity & Access Services within Access Lifecycle Solution On-boarding team for application end user request & approval as well as end user access provision central service On-boarding. A key success factor of the Access Lifecycle Solution On-boarding team is the quick understanding of complex application set ups for Identity & Access Management and support Information Security Officer (ISO) and IT Application Owner (ITAO) along end-to-end central solution On-boarding process across DB. You will gain insights into the complete Identity & Access Management lifecycle as you will learn about the roles and entitlements and their set up, segregation of duties, application authentication and authorization process. What well offer you 100% reimbursement under childcare assistance benefit (gender neutral) Sponsorship for Industry relevant certifications and education Accident and Term life Insurance Your key responsibilities As I&A On-boarding Information Security Analyst you will be responsible to perform On-boarding assessments if an IT asset is applicable for end user application access for request & approval and business requirement gathering (based on existing KOP ID Admin procedures) to identify, how future user provisioning (ID Admin via automated connector or manual, centrally or decentral managed) will be set up between central request & approval platform and to be on-boarded application in adhering to Information Security (IS) internal and regulatory requirements. Efficiently engage, manage, and influence the main stakeholders, along with application On-boarding process including Information Security Officer, IT Application Owner, Engineering and Operations teams Provide process improvement inputs to various stakeholders involved. Proactively seek ways to improve upon existing practices and processes. Display insight and ability in identifying issues and develop successful solutions. Report and escalate potential risks to the management to help avoid / minimize the impact. Work with multiple, distributed teams (across different locations) Support develops key operational procedures where necessary and ensure adherence to all such defined policies. Comfortable with associated disciplines of Security Policy and Governance in banking domain Very good presentation and communication skills allowing to communicate with our stakeholders. A structured and methodological way of working with the objective to deliver high quality results. Supports tough people decisions to ensure people performance is aligned with organization imperatives and needs. Addresses individual performance issues, where necessary, to drive for high performance. Pro-active and flexible working approach, Team spirit Your skills and experience Minimum 5 years working experience in Identity & Access Management, Governance, Risk and Control related topics. Team management experience Basic knowledge and/or willingness to work with industry best practices and frameworks like ISO27001, NIST, CSA CCM, COBIT, ITIL Good business analyses knowledge of system design, development, implementation, and user support principles and practices Knowledge of IT Service Management or IT Governance or IT Delivery Management or IT Project Management or IT Delivery background or IT Security Knowledge on Database Systems, application interactions and server operating systems Excellent Excel knowledge Competencies: Self-motivated and flexibility to work autonomously in virtual and multicultural teams. Good communication skills (both written and verbal), fluent in English (written/verbal) Good analytical skills and problem-solving abilities Pro-active and flexible working approach A structured and methodological way of working with the objective to deliver high quality results. Flexible mindset with an eye for detail and continuous improvement Good understanding in business related information Being flexible, open minded, able to share information, transfer knowledge and expertise to stakeholders and other team members. How well support you . . . .

Posted 4 days ago

Apply

7.0 - 12.0 years

30 - 35 Lacs

Pune

Work from Office

About The Role : Job TitleInformation Security Specialist - AVP LocationPune, India Role Description The Information Security Analyst is responsible for supporting the execution of the Information Security strategy. The Information Security Analyst provides data and analysis to measure the effectiveness of Information Security controls across group wide products and services. The Information Security Analyst identifies and evaluates potential areas of Information Security threats by assessing the probability and impact and facilitates feedback for mitigation. Roles within Information Security may cover one or more areas of specialty, e.g., Identity & Access Management (which may include, for example, authentication; access management & control; recertification etc.); Information Security (IS) Operations (which may for example include, cyber threat operations; cyber forensics, protection against data leakage etc.) and IS Technology (which may include IS architecture, IS engineering, cryptographic services etc.) What well offer you 100% reimbursement under childcare assistance benefit (gender neutral) Sponsorship for Industry relevant certifications and education Accident and Term life Insurance Your key responsibilities Review Risk Assessment (Application/Technical Risk profile) and Assurance spot checks for Compliance evaluation (e.g., IS/Cloud/SOx/MAS/Client Access Management/other regulatory controls) Analysis and verification of compliance issues Support stakeholder remediation activities Collect and review evidence (e.g., from de-centrally managed applications) Create compliance issue tickets and address issues to responsible stakeholders. Analyze and identify root causes. Provide and prepare data for management communication. Preparing reports for stakeholders and management Improvement and documentation of operational tracking activities Raise Business Requirements to Central Solutions run by other CSO teams. Your skills and experience Attitude of diligence and precision Ability to integrate in heterogeneous teams. Proactively driving topics, not shunning to address issues to higher management levels. Structured way of thinking and working Very good communicator Very good analytical and problem-solving skills Very good English (verbal and written) Experience in Excel (advanced) Good German skills beneficial Good Python programming skills beneficial Certifications in ISO 27001 or information security (e.g., CISSP, CISA) beneficial Practical experience in Governance or Compliance Monitoring beneficial. Knowledge about basic principles of Identity and Access Management beneficial How well support you . . . About us and our teams Please visit our company website for further information: https://www.db.com/company/company.htm We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively. Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group. We welcome applications from all people and promote a positive, fair and inclusive work environment.

Posted 4 days ago

Apply

4.0 - 9.0 years

14 - 19 Lacs

Pune

Work from Office

About The Role : Job Title Technology Risk Manager Corporate Title Director Location Pune, India Overview Our Corporate Bank group is a technology centric business, with an increasing move to real-time processing, an increasing appetite from customers for integrated systems and access to supporting data. This means that technology is more important than ever for the business. The CIO Corporate Bank (CB) division sits in the Banks Technology, Data and Innovation (TDI) group. The Risk and Control (R&C) team ensures the Bank's technology control priorities are effectively implemented across CIO - CB. The R&C team offers dedicated support for each Chief Information Officer (CIO) business line, advisory services for control responses, and program management services for broad control uplifts. The team's mission is to reduce the organization's technology risk exposure by implementing key bank controls, ensuring appropriate and timely resolution of audit and regulatory issues, and participating in the Bank's design of control implementations. Therefore, a role on the R&C team is integral in supporting the front-line management in identifying, assessing/measuring risks, developing/implementing remediation actions, and monitoring risks. We are looking for a technology risk manager (also known as embedded risk team lead) to join the Risk & Control team to ensure robust and sustainable control governance across CIO CB, in particular for CB Data and head for India Risk and Control team. You will be responsible for supporting the CB Chief Data Office in managing audit/regulatory/self-identified findings, participating in regulatory and audit exams, monitoring stakeholders compliance with key risk indicators, and ensuring controls are implemented effectively and sustainably. Your role will be integral in supporting the front-line management in identifying and assessing/measuring risks, determining remediation plans, monitoring levels of risk, and implementation of remediation. You will work directly with CIO-1s, the CIO Corporate Bank Risk Leads, senior technology management, business and operations stakeholders, regulatory management, and other embedded risk teams and will represent CB Risk & Control . As a senior member in the region, you will spearhead risk initiatives within the region and will oversee India applications. As a Tech Risk and Controls Director, you will play a pivotal role in shaping and implementing the firms technology risk management strategy. What well offer you 100% reimbursement under child care assistance benefit (gender neutral) Sponsorship for Industry relevant certifications and education Accident and Term life Insurance Your Key Responsibilities: Partner with CB CDO, in risk management and control implementation. Create deep and productive relationships with the teams and finding owners for audit/regulatory/self-identified issues to ensure overall risk posture for the area is improved. Support CIO-1 portfolio(s) in managing audit/regulatory/self-identified findings to ensure appropriate and timely resolution of risks/gaps in controls, and resolve non-compliance with Bank policies, procedures and processes and non-compliance with regulations and laws. Review and revise findings lifecycle event documentation. Provide strategic direction on risk management matters to senior leadership including implementation of detailed data driven narratives to inform leadership of risks related to IT and Cybersecurity topics. Provide credible challenge across all information technology and cybersecurity enabling business growth while ensuring that risks remain within appetite. Participate in, and coordinate with technology stakeholders, on internal and external audits and regulatory exams Ensure Risk & Control topics and standards are effectively included in all Change Programs related to CB Data, in particular within the perimeter of the EDM Program. Ensure appropriate senior management awareness/oversight of follow-up on action items to resolve identified technology issues Support application teams in control implementation requirements Ensure risk remediation programs are initiated and executed. Design and implement processes to test effectiveness and sustainability of technical controls. Develop strategies for reducing the risk exposure of CIO CB portfolio(s), including preparedness of critical applications for audit and regulatory exams and working with application owners to address and prevent common risk issues Assist application owners and other technology stakeholders in identifying and documenting risks and developing remediation Tracking and reporting on CIO CB portfolio(s) key risk indicators (KRI) and control uplift programs. Assisting application owners in developing plans to ensure compliance with KRIs. Close control gaps. Ensure risk remediation programs are initiated and executed in line with the Banks policies, procedures and standards. Work with the application teams and control owners to identify and resolve potential issues in control design. Advise on effectiveness metrics, ensure control design includes proper evidence, and provide input to the design and effectiveness of centrally provided tooling. Create risk awareness and positive attitudes through specialized trainings and educate the wider Corporate Bank CDO stakeholders regarding Risk & Control. Develop and guide a culture of talent development to meet business objectives and strategy. Your Skills and Experience: Excellent communication skills, both written and verbal to present ideas and concepts effectively Extensive experience (15-20 years) in technology risk management and risk advisory Strong understanding of three lines of defense model and compliance frameworks, Experience with regulatory environments and financial services technology. Robust knowledge and experience of data risks, in particular data-related technology controls, - policies, - standards and - tools Excellent analytical and investigatory skills to identify underlying technology issues Extensive experience in assessing risk, writing issues, and developing appropriate corrective actions Demonstrate viable solutions and problem solving Relevant experience working with auditors, regulators and external auditors on exams, reports and information requests Prefer experience with designing and testing technology controls and processes Prefer technical background (application development, infrastructure engineering, etc.) How well support you About us and our teams Please visit our company website for further information: https://www.db.com/company/company.htm We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively. Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group. We welcome applications from all people and promote a positive, fair and inclusive work environment.

Posted 4 days ago

Apply

5.0 - 8.0 years

5 - 10 Lacs

Gurugram

Work from Office

About The Role Skill required: Control Testing - Agile testing Designation: Regulatory Compliance Senior Analyst Qualifications: Any Graduation Years of Experience: 5 to 8 years About Accenture Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Technology and Operations services, and Accenture Song all powered by the worlds largest network of Advanced Technology and Intelligent Operations centers. Our 699,000 people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries. Visit us at www.accenture.com What would you do Help clients transform their compliance function from reactive to proactive through an intelligent compliance operating model powered by data, intelligent technologies and talentLooking for someone with SOX testing experience.Conduct testing tasks within Agile models and integration processes and manage development sprints. What are we looking for Conduct testing tasks within Agile models and integration processes and manage development sprints.Conduct testing tasks within Agile models and integration processes and manage development sprints. Roles and Responsibilities: In this role you are required to do analysis and solving of increasingly complex problems Your day to day interactions are with peers within Accenture You are likely to have some interaction with clients and/or Accenture management You will be given minimal instruction on daily work/tasks and a moderate level of instruction on new assignments Decisions that are made by you impact your own work and may impact the work of others In this role you would be an individual contributor and/or oversee a small work effort and/or team Please note that this role may require you to work in rotational shifts Qualification Any Graduation

Posted 4 days ago

Apply

1.0 - 3.0 years

4 - 8 Lacs

Bengaluru

Work from Office

About The Role Skill required: Risk & Compliance - Risk Management Designation: Risk and Compliance Associate Qualifications: Any Graduation Years of Experience: 1 to 3 years About Accenture Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Technology and Operations services, and Accenture Song all powered by the worlds largest network of Advanced Technology and Intelligent Operations centers. Our 699,000 people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries. Visit us at www.accenture.com What would you do You will be aligned with our Risk and Compliance vertical and help us perform compliance reviews, publish reports with actions and provide closure guidance as needed. We design & recommend effective controls to mitigate risks and help service delivery team prepare for upcoming client / external audits.You will be working as a part of the Risk & compliance team which is responsible for helping clients and organizations identify risks and create mitigation plans.In Risk Management you will be responsible for anticipating, plan for, and react to risks and issues to the project, including categorizing their severity, taking into account the likelihood of occurrence, mitigation & contingency planning. You will be expected to follow an agile approach that builds risk management into scrum roles, artifacts, and events and helps in continuous project delivery. What are we looking for In Risk Management you will be responsible for anticipating, plan for, and react to risks and issues to the project, including categorizing their severity, taking into account the likelihood of occurrence, mitigation & contingency planning. You will be expected to follow an agile approach that builds risk management into scrum roles, artifacts, and events and helps in continuous project delivery.In Risk Management you will be responsible for anticipating, plan for, and react to risks and issues to the project, including categorizing their severity, taking into account the likelihood of occurrence, mitigation & contingency planning. You will be expected to follow an agile approach that builds risk management into scrum roles, artifacts, and events and helps in continuous project delivery. Roles and Responsibilities: In this role you are required to solve routine problems, largely through precedent and referral to general guidelines Your expected interactions are within your own team and direct supervisor You will be provided detailed to moderate level of instruction on daily work tasks and detailed instruction on new assignments The decisions that you make would impact your own work You will be an individual contributor as a part of a team, with a predetermined, focused scope of work Please note that this role may require you to work in rotational shifts Qualification Any Graduation

Posted 4 days ago

Apply

1.0 - 3.0 years

1 - 3 Lacs

Bengaluru, Karnataka, India

On-site

About this role: Wells Fargo is seeking a Financial Controls Associate. In this role, you will: Provide support for the line of business and enterprise functions on financial reporting information technology governance, and controls and oversight matters Provide oversight for testing and monitoring involving moderate risk subject matter or control areas Receive direction from manager and exercise independent judgment while developing understanding of certain elements of the company's Committee of Sponsoring Organizations policy and governance and oversight framework Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals Required Qualifications: 6+ months of Finance, Accounting, Analytics, Reporting or Business and Technology Audit experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education. Desired Qualifications: 6+ months of experience in ITAC/ITGC, SOX. Any bachelor's or master's degree Shift timings is 1:30 PM to 10:30 PM IST Role: Financial Controller Industry Type: IT Services & Consulting Department: Finance & Accounting Employment Type: Full Time, Permanent Role Category: Finance Education UG: Any Graduate PG: Any Postgraduate

Posted 4 days ago

Apply

5.0 - 10.0 years

5 - 10 Lacs

Mumbai, Maharashtra, India

On-site

Position Summary : At NCR Atleos, our Internal Audit Department (IAD) purpose is to help enable competent and informed decisions to add value and improve operations, while contributing meaningfully to Board and organizational confidence. We are indispensable business partners, with a brand focused on insight, impact and excellence. We believe that everything we do is to enhance value, provide insights, and instill confidence. To do this, we must be relevant, connected, flexible, and courageous. NCR Atleos IAD is seeking a Senior IT Auditor to support our India Internal Audit (IA) team. In this position, you will play a crucial role in enhancing our company's internal control environment and risk management processes. You will be responsible for leading and executing IT audits across all technology layers, assessing IT risks, and providing expert recommendations to the management. This role demands a balance of technical proficiency, strategic thinking, and excellent communication skills. Key Areas of Responsibility: Audit Planning: Participate in risk assessments where needed and assist in developing and implementing a comprehensive IT audit plan that aligns with the organizations objectives and risk. Audit Execution: Execute IT audits, including identifying and assessing IT risks in business processes, security policies, and system implementations. Lead audits of IT infrastructure, applications, and data management systems to assess compliance with internal policies, external regulations and SOX. Recognize and adapt to changing circumstances. Identify IT risks and recommend mitigating controls. Analyze and evaluate IT operations and strategies to identify efficiency improvements and cost-saving opportunities. Assess compliance and maturity in line with relevant laws, regulations, standards (e.g., SOX, GDPR, ISO) and frameworks (e.g., COBIT, NIST, ITIL). Communication: Communicate timely any significant changes to budget or scope and any significant audit findings, risks, and recommendations to the Internal Audit Manager. Collaboration: Work closely with IT, InfoSec (IS) and other business units to understand IT infrastructure, applications, and operations. Mentor and guide junior IT auditors, enhancing their skills and ensuring quality audit practices. Reporting: Draft detailed Audit observations, highlighting issues, risks, and actionable recommendations. Assist the IA manager with presenting findings to responsible business management. Follow-up and Monitoring: Assist the IA Manager with monitoring open audit recommendations and follow-up to encouraging timely implementation and help avoid past-due management actions. Continuous Improvement: Stay abreast of emerging technologies, audit methodologies, and regulatory changes. Contribute to innovation and improvements to the IT audit process, controls and the overall Internal Audit Department. Qualifications: Bachelor's or Master's degree in Information Technology, Computer Science, Accounting, or a related field Minimum of 4 years of experience in IT auditing, with a proven track record in leading audits and managing audit projects Understanding of IT audit methodologies, IT governance frameworks (e.g., COBIT, NIST, ITIL), and regulatory requirements (e.g., SOX, ISO, GDPR) Experience with AuditBoard and analytic tools e.g. Power BI and Tableau a plus Professional certifications such as Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP) are strongly desired Strong analytical and problem-solving skills with an ability to analyze data and identify control weaknesses Excellent verbal and written communication skills, with the ability to articulate complex IT issues in business terms. Proficient in English Ability to travel and a team player with a commitment to personal and professional growth. Commitment to ethical conduct, integrity, and the promotion of a culture of accountability and continuous improvement Strong organization and management skills in a multi-tasking environment Positive individual who enjoys working in a fun and dynamic team environment Role: IT & Information Security - Other Industry Type: IT Services & Consulting Department: IT & Information Security Employment Type: Full Time, Permanent Role Category: IT & Information Security - Other Education UG: B.Tech/B.E. in Any Specialization PG: M.Tech in Any Specialization

Posted 5 days ago

Apply

4.0 - 9.0 years

15 - 20 Lacs

Bengaluru

Hybrid

In this role, I report to the Head - Risk, Compliance & Assurance. As a core member of 2nd line assurance team and subject matter expert in the functional and technology audits, I lead control assurance track for Tesco Business Solutions. It entails performing test of design and test of effectiveness for process, technology & ITGC controls. Experienced Required Minimum of 3 years of audit & control testing experience Exposure to global auditing standards Worked with global teams (Across multiple time zones) Certifications - Certified Internal Auditor (CISSA, CISP) Job Description Govern and support enterprise control testing programme Act as an SME in performing control test of design & effectiveness, control documentation and risk identification Perform ITGC, functional, systems and process control reviews Document process maps and identify control improvement opportunities Drive test findings to closure and govern control improvement next steps Collaborate with business, technology and 2nd line assurance teams Govern and maintain updated risk & control matrix for the functions Establish a clear testing approach & plan for the year, deliver the testing plan Build control framework & testing approach for new technology initiatives

Posted 5 days ago

Apply

5.0 - 10.0 years

14 - 18 Lacs

Bengaluru

Hybrid

As part of the Group Privacy Team, I support the business to assess its data privacy compliance position by working with the Data Privacy Assurance Executives in my team to test, validate and report on a range of data privacy controls. Required Experience : Risks, controls and assurance experience (Mandatory) Team & people management Workload allocation and management Stakeholder engagement experience 3+ years experience on Assurance/controls testing preferred Basic understanding of data privacy principles preferred Experience building credible and trusting relationships preferred A good understanding of how Tesco Group operates preferred Job Description : First Line supervisory to Data Privacy Executives as they test (across the group) a range of data privacy controls. These controls have been established to ensure our business is operating in compliance with privacy laws (mainly GDPR). It is vital therefore Tesco's senior management understands whether the controls are in place and effective, or not. The Team will regularly test and report on our 3 pillars of controls: Blueprint Controls, Operational Controls and Data Standards. Training the Executives to validate and challenge testing evidence submitted by stakeholders. Escalating where needed. Overseeing stakeholders and building their engagement with the privacy assurance process. Working with stakeholders to develop and implement remediation plans where testing reveals ineffective controls. Owning privacy assurance "deep dives" - targeting specific business units or functional areas for more thorough review of their privacy practices. Producing MI/reporting dashboards and governance papers to show the status of the control testing environment. Liaising with Group Audit to ensure consistency of approach between the 2nd and 3rd line functions. Having a transformation approach to further simplify and automate our data privacy controls and testing methods. Over time the assurance will expand from purely data privacy testing to other compliance areas. Represent Talent Acquisition in all forums/ seminars pertaining to process, compliance and audit Perform other miscellaneous duties as required by management Driving CI culture, implementing CI projects and innovation for withing the team

Posted 5 days ago

Apply

7.0 - 12.0 years

10 - 20 Lacs

Gurugram

Work from Office

Key Responsibilities: 1. IT Control Testing and Evaluation: Plan and execute control testing of ITGCs and automated application controls. Evaluate design and operating effectiveness of controls related to: User access management (IAM) Change management System development lifecycle (SDLC) Backup & recovery IT operations and infrastructure security Document testing procedures, results, and exceptions in line with ERM standards. 2. Risk and Control Self-Assessments (RCSA): Support IT RCSA activities across technology platforms and infrastructure. Identify and assess IT risks, including cybersecurity threats and third-party/vendor risks. Collaborate with IT stakeholders to remediate identified control gaps and improve IT control posture. 3. Regulatory and Framework Compliance: Ensure alignment with regulatory requirements and industry frameworks such as: SOX (Sarbanes-Oxley) FFIEC, OCC, NIST, COBIT, ISO 27001 Monitor compliance with internal IT policies, procedures, and enterprise risk tolerance. 4. Stakeholder Engagement & Collaboration: Work closely with IT, Information Security, Compliance, and Internal Audit teams. Serve as the subject matter expert (SME) on IT control testing and risk identification. Communicate findings, risks, and recommendations clearly to technical and non-technical stakeholders. 5. Reporting and Documentation: Develop testing scripts, risk-control matrices, and evidence documentation. Prepare executive-level reports highlighting key findings, trends, and remediation status. Track control testing progress and report deviations from expected timelines or outcomes. 6. Continuous Improvement: Stay current with technology risk trends, emerging threats, and evolving compliance standards. Recommend enhancements to IT control testing methodologies, tooling, and governance processes. Key Qualifications: Education: Bachelors degree in Information Technology, Computer Science, Cybersecurity, Risk Management, or related fields. Advanced certifications are a plus. Certifications (preferred): CISA (Certified Information Systems Auditor) CRISC (Certified in Risk and Information Systems Control) CISSP, CGEIT, or ITIL certifications Experience: 810 years in IT risk management, internal audit, or control testing within financial services or technology-driven environments. Technical Skills: Strong knowledge of ITGCs, application controls, and system security principles Hands-on experience with GRC platforms (e.g., Archer, MetricStream, ServiceNow GRC) Familiarity with scripting or automation tools for testing/reporting is a plus Proficient in Excel, Power BI, or Tableau for data analysis and reporting Please share your cv at surbhi.malhotra@nlbtech.com

Posted 1 week ago

Apply

6.0 - 10.0 years

18 - 22 Lacs

Bengaluru

Work from Office

Key Responsibilities: Lead and manage end-to-end delivery of cybersecurity consulting engagements including regulatory assessments, technical reviews, and risk advisory. Conduct and review audits and assessments aligned to frameworks such as ISO 27001, RBI, SEBI, IRDAI, and other applicable standards. Oversee evaluation of IT General Controls (ITGC) and IT Application Controls (ITAC), and support gap remediation strategies. Collaborate with client stakeholders to define cybersecurity objectives, identify risks, and implement actionable solutions. Support technical/business development activities, including responding to RFPs/RFIs, developing solution proposals tailored to client requirements, defining delivery models, and preparing supporting materials such as data capture questionnaires (DCQs), scoping documents, and client-specific value propositions. Work closely with internal leadership to build service capability decks, participate in opportunity planning, and contribute to strategic client conversations. Support ongoing project operations, including maintaining project delivery, team operations and other delivery documentation / templates to ensure team efficiency and reporting accuracy. Mentor junior team members and contribute to the knowledge development of the practice. Candidate Requirements: 56 years of experience in cybersecurity consulting with strong exposure to both delivery and client engagement. Proficiency in standards and regulatory frameworks such as ISO 27001, RBI, SEBI, IRDAI, ITGC, and ITAC. Ability to translate client requirements into executable cybersecurity solutions and delivery plans. Experience supporting technical/BD activities, including solutioning for proposals, drafting scoping documents, and collaborating with cross-functional teams. Strong documentation and coordination skills with the ability to create and maintain organized repositories of project delivery assets. Strong communication and stakeholder management skills, including the ability to present to senior leadership. Certifications such as ISO 27001 Lead Auditor, CISA, or CISM are desirable. Exposure to Vulnerability Assessment and Penetration Testing (VAPT), Red Teaming or other offensive testing areas will be an added advantage.

Posted 1 week ago

Apply

1.0 - 3.0 years

4 - 8 Lacs

Bengaluru

Work from Office

Educational Requirements Bachelor of Engineering Service Line Information Systems Responsibilities Required Skills & Qualifications: Bachelor’s degree in Computer Science, Information Technology, Business Administration, or related field. Basic understanding of SAP ERP systems (SAP ECC or S/4HANA). Familiarity with concepts of risk, compliance, and internal controls. Strong analytical and problem-solving skills. Good communication and documentation skills. Willingness to learn and grow in the SAP GRC domain. Additional Responsibilities: Career Path:This role offers a clear path to becoming a SAP GRC Consultant, Risk Analyst, or Compliance Specialist with opportunities to specialize in areas like audit. Technical and Professional Requirements: Preferred (Nice to Have): Internship or academic project experience with SAP or GRC tools. Knowledge of IT General Controls (ITGC) and audit frameworks (e.g., SOX, ISO 27001). SAP GRC certification or training. Preferred Skills: Technology-SAP Technical-SAP Security

Posted 1 week ago

Apply

3.0 - 5.0 years

5 - 9 Lacs

Bengaluru

Work from Office

Job Profile: TheProcurement-SupplierQualification will play a crucial role within the Client Supplier Governance team. This role involves supporting various stages of supplier governance, from initial risk assessments through to ongoing due diligence and reporting. The incumbent will be responsible for facilitating initial supplier risk screenings, conducting initial and ongoing due diligence, providing reporting support, and ensuring adherence to business rules and requirements. Key Responsibilities: Supplier Risk Assessment Support: - Assist business/contract owners in completing the assessment questionnaire. - Guide them through navigating secondary risk teams. - Report the outcomes of the questionnaires. - Repeat assistance as necessary until satisfactory completion. Due Diligence Questionnaire Support: - Distribute the due diligence questionnaire to relevant parties. - Validate that responses align with Telstra's business rules and requirements. - Trigger appropriate actions based on Procurement and Specialist Risk Teams' inputs. - Identify required follow-up actions, track their progress, and report status. Ongoing Supplier Due Diligence: - Monitor contract and supplier risk alerts, triaging and escalating as per business rules. - Maintain currency of questionnaire responses and supplier information. - Track activities needed for remediation of identified gaps in questionnaires. - Provide support in updating and maintaining the Risk Framework. - Offer reporting support for risk-related activities. Required education Bachelor's Degree Preferred education Bachelor's Degree Required technical and professional expertise - Relevant degree in Supply Chain Management, Business Administration, or a related field. - Proven experience in supplier governance, risk management, or procurement. - Strong understanding of procurement processes and risk management principles. - Excellent communication skills, with the ability to guide non-expert users. - Strong analytical skills, with the ability to interpret data and make informed decisions. - Proficient in using digital tools and systems for questionnaire distribution, tracking, and reporting. - Ability to work independently and as part of a team, managing multiple tasks simultaneously - Vendor Onboarding, Supplier Risk Governance, Vendor Management, Third Party Risk Management, Supplier Management

Posted 1 week ago

Apply

7.0 - 12.0 years

10 - 20 Lacs

Hyderabad

Work from Office

ITGC -Hyderabad They will be the same key roles and responsibilities, but each headcount will have specific focus/expertise as outlined in 1-4 below. This should give high level summary of specific qualification/experience in resources that we look for. Information Security/Cyber Security Infrastructure, cloud platform, network, and service management, software engineering/SLDC Data ITGC and business application controls Key Role & Responsibilities Conduct and document thorough walkthrough of IT controls Design test plans and document test steps to assess the control design and operating effectiveness Create/prepare a document request list and work with control owners/performers to obtain evidence supporting the control execution and validation that the control is working as intended. Complete control testing workpaper and maintain detailed records of testing results, findings, and recommendations. Address workpaper review comments and independent review and challenge from the Second Line of Defense Specific Skillsets & Experiences Experience with IT internal audit or other risk assurance functions Knowledge of industry and compliance frameworks i.e., NIST cybersecurity framework, CIS, ITIL, PCI, FedRAMP Strong understanding of risk management methodologies, and security control testing techniques. Strong verbal and written communication skills, with the ability to lead walkthroughs with control owners/performers, and construct questions and follow-ups. Focus on each headcount: Information Security/Cyber security focus - Technical skills and experiences with particular focus/familiarity on the following control areas or tools, but not limited to: Network security - firewall, NAC, Network Intrusion Prevention/detection, WAF, Web filtering/Web traffic (i.e., FireMon, Cisco ISE, Cloudflare etc.) Cyber data protection/data security - DLP, data discover/classification, email security, cloud data security/CASB, database security and encryption (i.e., Trellix, Proofpoint, Varonis, Purview, Imperva) Servers and endpoint security - Antivirus/Antimalware, Device, protection, Endpoint privilege access (i.e., Crowdstrike, Absolute, Beyond Trust) Cyber defense SIEM, MSSP, and SOC for log forwarding/ingestion/and monitoring, Cyber Threat Intelligence Cloud platform security Application and API security OWASP principles, SAST, SCA, DAST, secret scanning Access and Authentication/Privilege access (i.e., SailPoint, Okta/Auth0, Delinea) Infrastructure, cloud platform, and network, and service management, software engineering/SDLC focus - Technical skills and experiences with particular focus on the following control areas/concepts, but not limited to: Server and Directory service management Build/image, configuration management, certification management, backup and recovery, Active Directory, Patching Workstations, Virtual Desktops, Mobile Devices – Build/Image, MAM, Patching Cloud platform management – AWS/AWS well-architected framework, Azure, IaC/automated build template Platform and application observability Disaster recovery – Data center DR test, High availability, cloud recovery Service management – Hardware/software asset management, software licensing, CMDB, change management, incident and problem management SLDC – DevSecOps concept, Coding services (IaC, service mesh etc.), Code repository, CI/CD, Quality engineering and quality assurance Data focus - Technical skills and experiences with particular focus on the following areas/concepts, but not limited to: Database administration – Database design/structure, access controls, build, configuration, backup, jobs, and other maintenance and security measures (i.e., SQL, PostgreSQL) Data warehouse platform/data development/transformation – Design/architecture, Data modeling, ETL, data obfuscation and masking (i.e., Snowflake, Coalesce) Data transit/exchange connection/data file transfers – Monitoring, Logging, Secure file transfer/protocols, error handling Data governance and quality management – Metadata management, Data lineage, Data quality rules, Data defect management (i.e., Collibra) ITGC and business application controls / SOX focus (e.g., system interface and integration) - Technical skills and experiences with particular focus on the following areas/concepts Testing of SOX ITGC / IT general controls Testing of business applications controls – Automated application interface and integration, system/application Please share your profile at surbhi.malhotra@nlbtech.com

Posted 1 week ago

Apply

7.0 - 11.0 years

22 - 34 Lacs

Gurugram

Work from Office

The Community You Will Join Airbnb Capability Center was set up in 2017 in Gurgaon. We provide specialized operational services which allow Airbnb's business and responsibilities across the world. These include Finance Technology, Finance Shared Services, Analytics, Engineering, amongst other verticals. Our offices are home to multi-experienced teams with an understanding of our business and community. We're hospitable, fun and we welcome all with open arms. The difference you will make In the role of Associate Principal, Control Testing, the successful candidate will be responsible for continued development of our compliance program for Section 404 of the Sarbanes-Oxley Act of 2002. You will support design and testing of key business and entity level SOX controls in a rapidly changing and growing company and technology environment within the AirControl Financial Controls group. You will evaluate the design and effectiveness of SOX controls, provide guidance to process and control owners over controls, and lead coordination with other SOX stakeholders and external auditors. You will work directly with control owners in the business (e.g. accounting and finance teams) to evaluate the controls and support business partners in the implementation and maintenance of the controls and interact and support efforts of the Company’s independent auditor. As part of the annual control evaluations, you will perform walkthroughs over processes and controls to evaluate the design, test samples to evaluate the operating effectiveness, evaluate gaps, and drive the remediation of deficiencies. The role requires a well-rounded controls focused professional with accounting and operational expertise. Excellent communication, resource allocation and project management skills are critical, as well as the ability to influence across functions and various levels. The position reports to the Director, Financial Risk & Controls that rolls up to the Head of Global Risk and Internal Audit. A typical day Participate in annual scoping and risk assessment exercises and determine testing approach for manual controls within the business processes Execute design and operating effectiveness testing over manual and entity level controls Evaluate changes made to key business processes and provide best practice recommendations on controls Apply a new perspective on existing controls to recommend efficiencies in testing and evaluation approaches Support business partners in maintaining internal control documentation over key processes Participate in annual 404 compliance activities with the external auditors, including identification, evaluation, and remediation of deficiencies Support the quarterly 302 certification process Your Expertise CA in Accounting or Finance or Management Information Systems or related field Minimum of 7+ years of experience, preferably with some years of external audit or consulting experience with US publicly traded companies Understanding and experience with the requirements of Sarbanes-Oxley Act of 2002, Section 404, COSO framework, GAAP standards and PCAOB standards Experience with external auditor requirements and expectations Mission-driven, enthusiastic to learn and grow; team-oriented with a positive attitude and able to work in hyper-growth, fast paced environment Ability to work collaboratively with people at all levels of the organization, identify risks and anticipate questions, and provide actionable recommendations based on industry best practices and use influence to ensure execution Strong risk management experience, including: performing annual risk assessments, executing annual SOX control testing, and evaluating control deficiencies Role model for Airbnb core values Our Commitment To Inclusion & Belonging Airbnb is committed to working with the broadest talent pool possible. We believe diverse ideas foster innovation and engagement, and allow us to attract creatively-led people, and to develop the best products, services and solutions. All qualified individuals are encouraged to apply.

Posted 1 week ago

Apply

8.0 - 13.0 years

6 - 9 Lacs

Hyderabad

Work from Office

Cybersecurity, third-party risk management -client audit role. Department overview: The Customer Experience Team, a new shared capability within Market Intelligence, partners closely with Sales, account management, and product to deliver a differentiated customer experience. This group enables our revenue team by overseeing customer success, revenue operations, and implementation of commercial technology. This includes Salesforce, alignment to targets in strategic growth areas, and empowerment of accelerated growth and delivery by putting the customer at the core of everything we do driving a full customer experience that differentiates us from our competitors. The Proposal & Customer Assessment Team, within Revenue Operations & Transformation, plays a crucial role in driving new revenue generation and ensuring superior customer satisfaction. The team supports key workflows such as RFPs, due diligence, risk assessments, client audits, and other customer inquiries, by providing high-quality proposals and relevant information throughout the pre- and post-sales cycles. Serving a diverse range of clients across various geographies, the team is committed to a client-first mindset, forging strong partnerships and delivering exceptional results. Position Summary: Track and maintain a central repository of all the issues, findings, and gaps identified by customers during due diligence and audits. Collaborate with product, technology, and functional teams to identify the best possible way to remediate client-identified gaps and answer client inquiries. Coordinate preparation, execution, and delivery of formal responses. Track and report weekly, biweekly, and monthly statistics on the open, remediated, and in-progress issues to the leadership and senior stakeholders. Foster positive relationships with customers, maintain open and transparent communication with the customer throughout the process, acknowledge receipt of audit findings and provide regular updates on progress. Develop a deep understanding of product solutions and platforms for effective communication. Maintain awareness of internal controls and audit/due diligence trends to ensure the process remains effective. Maintain thorough documentation of the entire audit findings process, including correspondence with the customer, supporting documentation provided, and actions taken to address issues or concerns. Lead Cross-Functional Programs & Projects: Oversee key milestones and activities; communicate program details, project risks, and mitigations to leadership, ensuring timely project completion. Develop and Manage Project Plans & Reporting: Create project plans, tools, reports, and narratives for identified programs. Re-prioritize based on impact and effort and provide tactical support for implementation. Education and experience: Bachelors degree in a related field, with 8+ years of project management and execution experience. Familiarity with CISA, ISO Standards, NIST, and SOC standards. Proven track record in project delivery with excellent communication, time management, organizational, presentation, and stakeholder management skills. Demonstrated success in planning, directing, and implementing multiple, complex projects concurrently. Ability to set priorities independently and meet deadlines in a fast-paced environment. Experience working in a collaborative environment, building strong relationships at all organizational levels, and effectively working with diverse styles, skills, and cultures. Personal competencies: Exceptional communication and interpersonal skills, able to engage and influence stakeholders at all levels with flexibility and negotiation expertise to drive optimal outcomes. Strong analytical and problem-solving abilities, skilled in assessing complex data and developing actionable strategies. Self-motivated with a keen eye for detail, ensuring high-quality execution in all tasks. Highly proficient in managing multiple projects simultaneously, demonstrating adaptability as priorities shift, and showing creativity and perseverance in problem-solving. Demonstrates consistent creativity and initiative across all tasks and projects. Fosters strong collaborative relationships with internal teams, enhancing synergy and teamwork.

Posted 1 week ago

Apply

10.0 - 14.0 years

6 - 10 Lacs

Chennai

Work from Office

Skill required: Control Testing - Agile testing Designation: Regulatory Compliance Associate Manager Qualifications: Any Graduation Years of Experience: 10 to 14 years What would you do Help clients transform their compliance function from reactive to proactive through an intelligent compliance operating model powered by data, intelligent technologies and talentLooking for someone with SOX testing experience.Conduct testing tasks within Agile models and integration processes and manage development sprints. What are we looking for "Key Responsibilities:-Seamless client handling; to oversee and co-ordinate the successful deployment of Risk Management & Compliance activities and ensure consistency and standardization.The role requires an ability to implement change and act as a catalyst to improve internal controls and financial integrity within processes To oversee and review the various KPIs and deliverables of Quality testing team.Handle client escalations for resolution, mitigation and continuous trackingEnsure compliance with internal policies (audit methodology and risk management) and Obtaining, analyzing and evaluating documentation, reports, data, flowchart etc.Identify process gaps and establishing new processes, automation with emphasis on internal controlsTo ensure all required controls are implemented, documented, and monitored to ensure full audit compliance.To ensure an effective communication process is in place with line management and team members.To identify key operating areas for Operations and drive improvement initiatives such as Process Improvements""Key Responsibilities:-Seamless client handling; to oversee and co-ordinate the successful deployment of Risk Management & Compliance activities and ensure consistency and standardization.The role requires an ability to implement change and act as a catalyst to improve internal controls and financial integrity within processes To oversee and review the various KPIs and deliverables of Quality testing team.Handle client escalations for resolution, mitigation and continuous trackingEnsure compliance with internal policies (audit methodology and risk management) and Obtaining, analyzing and evaluating documentation, reports, data, flowchart etc.Identify process gaps and establishing new processes, automation with emphasis on internal controlsTo ensure all required controls are implemented, documented, and monitored to ensure full audit compliance.To ensure an effective communication process is in place with line management and team members.To identify key operating areas for Operations and drive improvement initiatives such as Process Improvements" Roles and Responsibilities: In this role you are required to do analysis and solving of moderately complex problems Typically creates new solutions, leveraging and, where needed, adapting existing methods and procedures The person requires understanding of the strategic direction set by senior management as it relates to team goals Primary upward interaction is with direct supervisor or team leads Generally interacts with peers and/or management levels at a client and/or within Accenture The person should require minimal guidance when determining methods and procedures on new assignments Decisions often impact the team in which they reside and occasionally impact other teams Individual would manage medium-small sized teams and/or work efforts (if in an individual contributor role) at a client or within Accenture Please note that this role may require you to work in rotational shifts Qualification Any Graduation

Posted 1 week ago

Apply

8.0 - 12.0 years

7 - 12 Lacs

Mumbai, Thane, Navi Mumbai

Work from Office

Role & responsibilities : Hands-on experience in stakeholder management that involves high level of co-ordination , activity tracking, reporting progress , raising red flags Good experience of dashboarding and preparing reports / presentations for different levels of mgmt. Reasonable experience in managing risk and compliance projects, coordinating tech risk assessments, third-party assessments, assessing IT General Controls, understanding how to risk-score , identification of control gaps and potential risks, recommending remediation measures Exposure to documentation drafting and creating templates experience Preferred candidate profile : Excellent problem-solving skills Attention to detail, with the ability to analyze complex issues, develop effective solutions Strong interpersonal and communication skills, essential for collaborating with various stakeholders, presenting assessment results, and negotiating remediation actions. Ability to manage multiple tasks, deadlines Stickler to timelines, matters of urgency Ability to work and proactively deliver without need for reminders and follow-ups

Posted 1 week ago

Apply

3.0 - 7.0 years

0 Lacs

karnataka

On-site

You will be joining Grant Thornton as a Senior Associate in the IT Audit department. Grant Thornton is a collaborative and entrepreneurial organization with a global presence. The U.S. member firm of Grant Thornton International Ltd., Grant Thornton LLP, operates across 58 offices in the U.S. and has a Shared Services Center in Bangalore, India. At Grant Thornton INDUS, you will be part of a team of over 2000 professionals working in Tax, Audit, Advisory, Client Services, and Enabling Functions. As a Senior Associate, your responsibilities will include managing a portfolio of engagements, leading a team of associates or analysts, and ensuring quality delivery as per client requirements within set timelines and budget. You will be expected to identify areas for improvement in client businesses, maintain compliance with engagement plans and internal quality procedures, and develop strong relationships with clients. Additionally, you will assist in developing marketing collaterals, business proposals, and contribute to knowledge management sessions within the practice. The ideal candidate will have 3-6 years of post-qualification experience in IT Audit support engagements or related internal/external audit experience, preferably in a big 4 firm or similar business environment. Preferred qualifications include Engineering Graduates (Computer Science, Electronics, Electronics & Telecommunications), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), or an MBA in Information Technology. Skills required for this role include critical thinking, professional judgment, excellent planning and organization abilities, effective communication, people management skills, and the capacity to manage multiple engagements and deadlines. You should be proactive in sharing knowledge, developing and motivating team members, and contributing to the growth of the practice. Grant Thornton INDUS offers various benefits to its employees, including insurance benefits, wellness programs, hybrid work models, parental support, mobility benefits, and retirement benefits. Grant Thornton INDUS is committed to making business more personal, building trust, and contributing to the communities in which it operates. If you are looking for a challenging role in a dynamic and growth-oriented environment, Grant Thornton could be the right place for you.,

Posted 1 week ago

Apply

3.0 - 7.0 years

0 Lacs

pune, maharashtra

On-site

If you're seeking a career that will empower you to distinguish yourself, consider joining HSBC to unlock your full potential. Whether you aspire to ascend to the pinnacle of success or embark on a thrilling new path, HSBC offers a platform replete with opportunities, support, and rewards that will propel you towards greater heights. HSBC stands as one of the world's largest banking and financial services organizations, operating in 64 countries and territories globally. Our mission is to position ourselves where growth thrives, empowering businesses to flourish, economies to prosper, and individuals to achieve their aspirations and dreams. Currently, we are in search of a seasoned professional to become part of our team in the capacity of DBS Senior Control Tester. In this pivotal role, your responsibilities will include: - Conducting meticulous preparation, steering, and engaging in the execution of a diverse array of Technology control testing activities - Ensuring prompt delivery of control testing with a commitment to transparency and accuracy in the fulfillment of testing objectives - Exercising sound judgment in identifying and disclosing control testing findings by pinpointing key risks and issues - Infusing quality into control testing deliverables and upholding compliance with the CCO Control Testing Methodology - Offering expertise and counsel on control testing throughout CCO, while applying critical judgment and decision-making skills in the identification and disclosure of control testing findings by highlighting key risks and issues - Nurturing relationships with key stakeholders, staying abreast of significant business, regulatory, and industry developments, as well as any modifications to procedures and practices - Assisting in the preparation of testing reports to update key stakeholders on the testing outcomes and review work - Monitoring and pursuing actions identified as a result of testing and review work, escalating when necessary - Adhering to and demonstrating compliance with all pertinent internal and external rules, regulations, and procedures that govern the business operations in which the jobholder is engaged, particularly Internal Controls and any associated policies and procedures Requirements: To excel in this role, candidates should meet the following criteria: - At least 3-5 years of pertinent experience in IT controls testing within the Financial Service industry or process assessment experience - Proficiency in ITGC, SOX, NON-SOX, Internal Control, Automated Control Testing (BACs) - Preferred qualifications include IT Risk certifications (CRISC, CISM, CISA, CISSP, or equivalent) - Demonstrated expertise in Technology control testing, risk management, internal control, or internal audit, preferably within a financial/banking services operations environment - Proven ability as a self-starter and effective collaborator Your journey to success is amplified when you become a part of HSBC. HSBC is dedicated to nurturing a culture where each employee is esteemed, respected, and their opinions hold significance. We pride ourselves on providing a workplace that fosters continuous professional growth, flexible work arrangements, and avenues for advancement within an inclusive and diverse setting. Personal data shared with the Bank regarding employment applications will be handled in accordance with our Privacy Statement, accessible on our website. Issued by HSBC Software Development India,

Posted 1 week ago

Apply

Exploring ITGC Jobs in India

India has emerged as a hub for IT Governance and Controls (ITGC) jobs with a rapidly growing job market in this sector. ITGC professionals are in high demand as companies focus on improving their IT processes and controls to ensure compliance and security. If you are a job seeker looking to explore opportunities in the ITGC field in India, this guide will provide you with valuable insights to help you navigate the job market effectively.

Top Hiring Locations in India

  1. Bangalore
  2. Mumbai
  3. Pune
  4. Hyderabad
  5. Gurgaon

These cities are known for their thriving IT industry and offer numerous opportunities for ITGC professionals.

Average Salary Range

The salary range for ITGC professionals in India varies based on experience and expertise. Entry-level positions may start at around INR 4-6 lakhs per annum, while experienced professionals can earn upwards of INR 15-20 lakhs per annum.

Career Path

In the ITGC field, a typical career path may include progression from roles such as ITGC Analyst or Auditor to ITGC Consultant, ITGC Manager, and eventually ITGC Director. Advancement in this field is often based on gaining experience, acquiring relevant certifications, and demonstrating strong analytical and problem-solving skills.

Related Skills

In addition to expertise in ITGC, professionals in this field are often expected to have skills in areas such as risk management, compliance, audit, cybersecurity, and data analytics. Strong communication and project management skills are also valuable in ITGC roles.

Interview Questions

  • What are IT General Controls? (basic)
  • Can you explain the difference between preventive and detective controls? (medium)
  • How do you ensure compliance with regulatory requirements in IT processes? (medium)
  • What is the role of segregation of duties in IT controls? (advanced)
  • How do you approach assessing the effectiveness of IT controls in an organization? (advanced)
  • Describe a challenging ITGC project you have worked on and how you overcame obstacles. (medium)
  • How do you stay updated on the latest trends and developments in ITGC? (basic)
  • Can you walk us through your experience with IT risk assessment? (medium)
  • How do you prioritize IT control activities in a large organization? (advanced)
  • What steps would you take to address a significant control deficiency in an IT system? (advanced)
  • Explain the concept of ITGC testing and its importance. (medium)
  • How do you handle conflicts between IT controls and operational efficiency? (medium)
  • Describe a time when you had to communicate ITGC findings to senior management. (basic)
  • What are the key elements of an ITGC framework? (medium)
  • How do you ensure that IT controls are effectively implemented and monitored on an ongoing basis? (advanced)
  • Can you provide examples of ITGC key performance indicators (KPIs) that you have used in your previous roles? (medium)
  • How do you approach training IT staff on compliance and control procedures? (medium)
  • What tools or software do you use for ITGC assessments and monitoring? (basic)
  • How do you handle stakeholders who are resistant to implementing IT controls? (medium)
  • Explain the concept of continuous monitoring in ITGC and its benefits. (medium)
  • How do you conduct a risk assessment for IT systems? (advanced)
  • Describe a time when you identified a control weakness in an IT system and proposed a solution. (medium)
  • How do you ensure that IT controls align with the organization's business objectives? (advanced)
  • What do you see as the biggest challenge facing ITGC professionals today? (medium)

Closing Remark

As you prepare for your ITGC job search in India, remember to showcase your expertise, experience, and passion for IT governance and controls. By mastering the necessary skills and staying updated on industry trends, you can confidently apply for roles in this dynamic and rewarding field. Good luck!

cta

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

Featured Companies