273 Itgc Jobs - Page 11

Senior IT Auditor At Smith+Nephew, we design and manufacture technology that takes the limits off living. As a key member of the Internal Audit team, the Senior IT Auditor will be responsible for conducting IT reviews; assisting the Internal Audit Managers and Directors delivering global internal audit engagements; developing relationships and acting as an ambassador for the Internal Audit Function across the Group. What will you be doing? Conducting assigned end to end audit engagements (specifically IT audits consisting of complex cyber security, IT, and programme assurance reviews) successfully in accordance with the Global Internal Audit Methodology and professional standards. Identifies and communicates issues raised, offering recommended solutions relevant to business and risk. Supervises junior auditors assigned to engagements providing guidance and overall review of deliverables. Ensures audit conclusions are based on a complete understanding of the process, circumstances, and risk. Develops audit programs and testing procedures relevant to risk and test objectives. Obtains and reviews evidence ensuring audit conclusions are well-documented. Communicates assigned tasks to engagement team in a manner that is clear and concise ensuring high quality, accurate, and efficient results. Assess and monitor managements progress in implementing agreed upon actions. Assist in preparation of Audit Committee papers. Acting as ambassador for Internal Audit across the business. Provides Teammate administration support to the Group Internal Audit team. Provides technical expertise in emerging digital risk areas and GBS SOX and MAPS control efficiency and effectiveness improvements. Willingness to travel up to 20% Globally (typically two weeks audit engagements as Part of a wider team for a small number of audits where necessary). What will you need to be successful? Education: Graduate + CISA certified Preferred - Qualified Accountant (i.e; ACA / ACCA / CA / CPA / CMA) or CISM, CISSP or equivalent preferred PowerBI certifications and /or Data Analytics qualifications an advantage (preferred) Other auditing qualifications ( e.g. CIA) an advantage. At least 3-5 years of experience gained in either the profession and/or large corporate internal audit/risk management department. In addition: experience in at least one of the following areas - Medical Devices, Manufacturing /Commercial, IT, Emerging market, HCP Compliance or Sarbanes Oxley. Strong understanding of IT and Cyber Security risks and controls, working knowledge of key finance processes and controls. Excellent communication skills; oral and written. Able to communicate audit findings and negotiates with others to agree audit findings and recommendations often requiring them to adopt a different point of view. Experience in Teammate (or similar Audit Management software) administration. Strong Data Analytics skills and proven experience in using tools such as Power BI, Alteryx, MS Fabric etc. You Unlimited. We believe in crafting the greatest good for society. Our strongest investments are in our people and the patients we serve. Inclusion, Diversity and Equity- Committed to Welcoming, Celebrating and Thriving on Diversity. Learn more about it on our website: https://www.smith-nephew.com/. Other reasons why you will love it here! Your Future: Major medical coverage + policy exclusions and insurance non-medical limit. Educational Assistance. Work/Life Balance: Flexible Personal/Vacation Time Off, Privilege Leave, Floater Leave. Flexibility: Hybrid Work Model (For most professional roles)

About The Role : Job Title- Divisional Risk and Control Senior Analyst, AVP Location- Pune, India Role Description The 1st line Tech Risk, Insights and controls function at Deutsche Bank sits within the Chief Technology Office (CTO) for Deutsche Bank Group. CTO has the largest footprint within the Technology, Data and Innovation (TDI) division and is joined by other business-aligned CIO IT divisions. The Tech Risk, Insights and Controls is a dynamic team, consistently in demand, for providing guidance and challenge to deliver change and maintain systems in a secure and resilient manner. As part of the team, you will join the Banks journey and contribute towards our strategic goal of cloud enabled solutions as well as activities that improve our operational resilience and risk reduction. Specifically, you will bring expertise for risk identification and remediation advisory, records management supporting a proactive risk management function. It will therefore also include planning and executing thematic risk assessments and inputting into risk scenario testing and macro threat assessments. Further you will respond to client due diligence requests. You will liaise with other risk and control functions, on a management level to assure the integration of risk initiatives and projects. This role will report to the Head of Risk Assessments and Response and ultimately to the Global Head of Risks, Insights and Controls. What we'll offer you As part of our flexible scheme, here are just some of the benefits that youll enjoy Best in class leave policy Gender neutral parental leaves 100% reimbursement under childcare assistance benefit (gender neutral) Sponsorship for Industry relevant certifications and education Employee Assistance Program for you and your family members Comprehensive Hospitalization Insurance for you and your dependents Accident and Term life Insurance Complementary Health screening for 35 yrs. and above Your key responsibilities Risk Management Promote risk awareness, encourage prioritization of risk remediation, process re-engineering and strategic risk management Provide processes for systematic, proactive, and forward-looking risk identification, risk assessment, monitoring, reporting, and keeping CTO risk profile up to date Plan and execute thematic risk assessments and input into risk scenario testing and macro threat assessments Identify material remediation priorities for CTO and key cross divisional priorities impacting CTO (control / remediation book of work) Support CTO in managing the CTB budget allocated for high risk finding remediation and CTO involvement in reducing risk owned by other CIO and CISO divisions Be a catalyst and an enabler to the global leadership for achieving the objectives in line with changing regulatory and industry operating landscape and reducing risk against overall technology operations portfolio Ensure management transparency by way of timely risk reporting and proactive engagement and representing controls team at different governing forums Audit Management Manage and govern audit requests and findings in a quality assured and controlled manner Respond to client due diligence requests in a timely manner End-to-end governance, monitoring, control, and reporting of audit lifecycles Audit support and advice incl. quality assurance of management action plans, completion check of the deliverables, closure review, ownership transfer, downgrade, risk acceptance and target date extensions Act as overall interface with Audit for fieldwork support and ongoing oversight, co-ordination, quality control, read across for all divisional audit findings Establish a consistent approach to ownership of management action plans Manage operation of audit interface to vendors including monitoring and reporting Foster lessons-learned on audit findings and missed self-identified findings Stakeholder Management Identify, Partner, and Collaborate Establish relationship with external and internal Audit teams to ensure effective and robust challenge to finding and to establish smart management action plans. Partner with 2nd LoD, NFRM (Non-Financial Risk Management) to ensure alignment towards Group wide minimum control standards Collaborate closely and proactively with DCRO team to manage the finding lifecycle Promote and support proactive IT risk culture at the Bank Your skills and experience Desired experience Minimum 2 years of experience as Risk and Control Lead in designing and implementation of Technology risk framework in a global organization Good understanding of Industry best practices such as NIST, COBIT, ITIL and ISO 27001 Knowledge of Agile change delivery methodology, DevOps and Shift left concepts Cloud Computing Technology (GCP, AWS, Azure etc.) certifications or similar domains Other professional qualifications and certifications in Technology risk management Desired behaviors A strong team player comfortable in a cross-cultural and diverse operating environment Result oriented and ability to deliver under tight timelines Ability to successfully resolve conflicts in a globally matrix driven organization Excellent communication and collaboration skills Desire to learn about new and emerging technologies and continuous upskilling Must be comfortable with navigating ambiguity to extract meaningful risk insights How we'll support you Training and development to help you excel in your career Coaching and support from experts in your team A culture of continuous learning to aid progression A range of flexible benefits that you can tailor to suit your needs

EYGDS is actively seeking seasoned ITRM professionals to join our team. Experience required - 3 to12 years Locations - Gurgaon, Bangalore, Pune, Chennai, Hyderabad, Noida, Pune, Kochi, Trivandrum & Kolkata Required Skills: Risk Assessment Assessment of internal processes to identify security findings, vulnerabilities, and control gaps/deviations identified on applications and infrastructure. Develop risk control matrix in line with COBIT, ISO, NIST and ITIL Best Practice and recommendations. Control Monitoring / Testing - Understanding of Cyber and compliance standards like PCI, ISO27001, perform test the design and operational effectiveness of the controls. Control Automation Identify controls automation opportunities through analytics platform to monitor the operational effectiveness on the regular basis. Defect / Gap Identification: Identify the confidentiality, integrity and the availability related deficiencies in the client environment and evaluate against industry standards. Knowledge of IT risk, information security or cyber security frameworks such as COSO, COBIT, ISO, NIST etc. Good to have relevant industry certifications such as CISA, CISM, CISSP, ISO 27001, and others (as relevant)

EYGDS is actively seeking seasoned ITGC professionals to join our team. Experience required - 3 to12 years Locations - Gurgaon, Bangalore, Pune, Chennai, Hyderabad, Noida, Pune, Kochi, Trivandrum & Kolkata Required Skills: Experience in reviewing and controls testing of SAP S4 Hana / SAP ECC including IT general controls (ITGC) and IT Application Controls (ITAC) pre & post implementation reviews migration testing. Security & configurations such as debugging, client settings, etc. Understanding of the TCode, tables used to extract the data from SAP S4 Hana / SAP ECC with relation to ITGC and ITAC testing. Understanding of SAP S4 Hana / SAP ECC user access security architecture (Roles, profiles, Authorization objects). Good to have certifications on SAP S4Hana/ SAP ECC security or business modules, CISA, CISSP

About The Role : Role Purpose To assist in the ethical compliance/ data privacy / GDPR related domains leading to assurance to the board of the timely compliance of all Wipro entities. The role is responsible to support the group wide program management of the initiatives and to keep the policies relevant in light of the changing requirements. Do 1. Governance of strategic initiatives Support the global compliance as per companies act, global and local compliance requirements for all Wipro entities. Assist in review of the emerging requirements of global compliances in the areas of data privacy, GDPR, ethical compliances, assess its impact on Wipro entities and prepare an action plan for Wipro to be compliant Support the senior counsel and BU legal heads on compliances and assist in the periodic review of the policies to be updated / revised. 2. Develop expertise on legal aspects of Data Privacy, Cyber Security, GDPR and ethical compliance Develop of legal policies pertaining to the assigned domains like data privacy, cyber security, GDPR, ethical compliance etc Assist the periodic review and up-dation of policies relating to the assigned domain of expertise. Partner with IRM team to monitor understand the emerging nature of cyber security and data privacy threats and prepare a legal response for mitigating such risks. Support the periodic audits from data privacy and cyber security perspective of the processes (internal as well external) 3. Self-learning and development Track the regulatory frameworks developments in the assigned domains like data privacy, GDPR and ethics. Identify areas likely to impact the governance framework of Wipro entities and its geo specific operations Work with senior counsel to review the changes and modify the Wipro policies and guidelines accordingly. Deliver No. Performance Parameter Measure 1. Compliance Timely renewal of Policies Quality of final output Quality of audit Advisory comprehensiveness Ethical compliance - tracking and reporting to audit committee Guidance notes released in line with country legislations Timely release of awareness mailers

About The Role : Role Purpose The purpose of this role is to analyse, identify, rectify & recommend specific improvement measures that help in the security posture of the organization by protecting the sensitive information Do Ensuring customer centricity by providing apt cybersecurity Monitoring and safeguarding the log sources and security access Planning for disaster recovery in the event of any security breaches Monitor for attacks, intrusions and unusual, unauthorized or illegal activity Performs moderately complex log reviews and forensic analysis to identify unauthorized or unacceptable access to data or systems Conduct security assessments, risk analysis and root cause analysis of security incidents Handling incidents escalated by the L1 team in 24x7 rotational shifts Use advanced analytics tools to determine emerging threat patterns and vulnerabilities Completing all tactical security operations tasks associated with this engagement. Analyses all the attacks and come up with remedial attack analysis Conduct detailed analysis of incidents and create reports and dashboards Stakeholder coordination & audit assistance Liaise with stakeholders in relation to cyber security issues and provide future recommendations Maintain an information security risk register and assist with internal and external audits relating to information security Assist with the creation, maintenance and delivery of cyber security awareness training for colleagues Advice and guidance to employees on issues such as spam and unwanted or malicious emails Deliver No. Performance Parameter Measure 1. Customer centricity Timely security breach solutioning to end users, Internal stakeholders & external customers experience 2. Process Adherence Adherence to SLAs (90-95%), response time and resolution time TAT

Role & responsibilities Job Title: Assistant Manager - Information Security/ IT GRC Base Location: Thane/ Mumbai Employment Type: Full-Time Reporting To: Partner Job Summary: KVAT & Co is seeking a highly skilled and experienced Information Security Lead for its Governance, Risk, and Compliance Technology (GRC-T) practice. The ideal candidate will be responsible for executing and leading Information Security, Cybersecurity, and Data Privacy projects, ensuring compliance with regulatory standards, and providing strategic guidance to clients. This is a client-facing role requiring strong executive presence, leadership abilities, and technical expertise in the domain. The candidate should be able to independently manage projects and lead client engagements. Key Responsibilities: 1. Cybersecurity & Information Security Assessments and IT Audits: Conduct comprehensive cybersecurity reviews and IT Audits for clients. Perform gap assessments against leading security frameworks (ISO 27001, NIST, CIS, etc.). Evaluate existing information security controls and recommend remediation measures. 2. Security Implementation & Monitoring: Act as an implementation partner for information security controls and frameworks. Oversee and monitor the implementation process to ensure adherence to industry best practices. Support organizations in achieving compliance with regulatory frameworks (RBI, IRDAI, SEBI, GDPR, DPDP, etc.). 3. Policy Drafting & IT Risk Management: Develop and draft information security policies for clients as per industry standards. Conduct IT risk assessments to identify vulnerabilities and threats. Develop risk mitigation strategies to enhance IT governance frameworks . 4. Security Testing & Third-Party Risk Assessments: Provide support in vulnerability assessments & penetration testing (VAPT). Conduct third-party IT risk assessments and vendor information security reviews. 5. Data Privacy & Regulatory Compliance: Assist in GDPR compliance assessments and implementation projects . In-depth understanding of DPDP (Digital Personal Data Protection) framework and Indian data privacy laws . Stay updated with IRDAI, RBI, SEBI master circulars, and cybersecurity regulations to ensure compliance. 6. Client & Team Management: Serve as a point of contact for clients on information security project execution. Conduct awareness sessions for clients Assist in presentations for clients. 7. Business Development & Stakeholder Engagement: Develop decks, case study-based proposals , and service presentations. Present service offerings and project-based case studies to prospective clients. Lead discussions with CXOs, CIOs, and other senior stakeholders on cybersecurity matters. Key Skills & Competencies: Technical Expertise: Strong knowledge of cybersecurity frameworks, risk management, and IT governance . Regulatory Understanding: Hands-on experience with GDPR, DPDP, RBI, IRDAI, SEBI cybersecurity guidelines . Communication & Presentation: Ability to clearly articulate cybersecurity strategies and deliver high-impact presentations to clients. Leadership & Client Handling: Prior experience in a client-facing role with the ability to manage projects independently . Report Writing & Documentation: Strong reporting, policy drafting, and technical documentation skills. Project Management: Ability to plan, execute, and ensure timely delivery of IT GRC projects. Business Acumen: Experience in service pitching, proposal drafting, and stakeholder engagement . Required Qualifications & Experience: Educational Background: Bachelors in related fields Any additional certifications will serve as an added advantage. Experience: 5+ years of experience in Information Security, Cybersecurity, and IT GRC domains . Proven track record of handling projects independently and client interactions . Prior experience in consulting firms or IT security advisory firms is an added advantage. Consulting experience preferred CTC: As per industry standards and experience Why Join KVAT & Co? Opportunity to lead the projects High visibility role with direct client exposure and impact. Work on diverse industry sectors , handling cutting-edge cybersecurity projects. Collaborative and growth-oriented work environment . Application Process: Interested candidates can share their resume at hr@kvatco.co.in with the subject line Application for Information Security Lead – IT GRC” .

10 Years+ Exp. in Controls & Compliance (Required) (Internal Audit & Sox in Financial Projects) - 2nd Line of Defense (Exp. Required) CA/CISA/CIA/MBA Budget - Upto 30 LPA (fixed) 5 Days/Cabs Please Call - 9999869475 Required Candidate profile Experience in 2nd line of defense, risk management, financial internal control, sox experience is mandatory.

Skill required: Control Testing - Agile testing Designation: Regulatory Compliance Associate Qualifications: Any Graduation Years of Experience: 1 to 3 years What would you do? Help clients transform their compliance function from reactive to proactive through an intelligent compliance operating model – powered by data, intelligent technologies and talentLooking for someone with SOX testing experience.Conduct testing tasks within Agile models and integration processes and manage development sprints. What are we looking for? Commitment to quality Written and verbal communication Strong analytical skills Results orientation Problem-solving skills Roles and Responsibilities: In this role you are required to solve routine problems, largely through precedent and referral to general guidelines Your expected interactions are within your own team and direct supervisor You will be provided detailed to moderate level of instruction on daily work tasks and detailed instruction on new assignments The decisions that you make would impact your own work You will be an individual contributor as a part of a team, with a predetermined, focused scope of work Please note that this role may require you to work in rotational shifts Qualifications Any Graduation

We are looking for Information Security Professional in our Corporate office. Experience: 3-6 years of experience in security and privacy roles. Monitor, investigate, and respond to security incidents using DLP, EDR, and MDR solutions. Conduct Vulnerability Assessment and Penetration Testing (VAPT) to identify and mitigate risks. Implement and manage Data Loss Prevention (DLP) strategies to safeguard sensitive information. Ensure compliance with ISO 27001/27002 controls and support audit requirements. Analyze security events, perform root cause analysis, and recommend remediation measures. Collaborate with internal stakeholders to enhance the overall security posture Partner with internal departments, such as IT, Compliance, and Risk Management, to identify security gaps, implement best practices, and enhance overall cybersecurity measures. Conduct regular assessments of the organization's systems, networks, and processes to identify and mitigate potential security and privacy risks. Develop and enforce security and privacy policies, ensuring alignment with industry standards and regulatory requirements. Lead and participate in incident response activities, including investigation, analysis, and resolution of security incidents. Develop and deliver security awareness training programs to educate employees on security best practices and privacy guidelines. Implement and manage vulnerability assessment programs to identify and remediate security vulnerabilities in a timely manner. Ensure the protection of sensitive data through encryption, access controls, and other relevant measures. Work closely with cross-functional teams to integrate security and privacy considerations into the development lifecycle of applications and systems. Stay current with relevant security and privacy regulations, ensuring the organization's compliance with applicable laws. Work Experience & Educational/Professional Certifications 3-5 Years of experience in cybersecurity. Proficiency in EDR, MDR, VAPT, and ISO 27001/27002. Strong analytical and problem-solving skills. Bachelor's degree in Computer Science, Information Security, or a related field. Industry-recognized certifications such as ISO 27001 LA,/LI, CEH, Security+ are a plus. Strong knowledge of security frameworks, standards, and best practices. Experience with risk management, policy and process documentation, and security assessments. Excellent communication skills and the ability to collaborate with diverse teams.

Skill required: Control Testing - Agile testing Designation: Regulatory Compliance Senior Analyst Qualifications: Any Graduation Years of Experience: 5 to 8 years What would you do? Help clients transform their compliance function from reactive to proactive through an intelligent compliance operating model – powered by data, intelligent technologies and talentLooking for someone with SOX testing experience.Conduct testing tasks within Agile models and integration processes and manage development sprints. What are we looking for? Conduct testing tasks within Agile models and integration processes and manage development sprints.Conduct testing tasks within Agile models and integration processes and manage development sprints. Roles and Responsibilities: In this role you are required to do analysis and solving of increasingly complex problems Your day to day interactions are with peers within Accenture You are likely to have some interaction with clients and/or Accenture management You will be given minimal instruction on daily work/tasks and a moderate level of instruction on new assignments Decisions that are made by you impact your own work and may impact the work of others In this role you would be an individual contributor and/or oversee a small work effort and/or team Please note that this role may require you to work in rotational shifts Qualifications Any Graduation

Skill required: Control Testing - Agile testing Designation: Regulatory Compliance Analyst Qualifications: Any Graduation Years of Experience: 3 to 5 years What would you do? Help clients transform their compliance function from reactive to proactive through an intelligent compliance operating model – powered by data, intelligent technologies and talentLooking for someone with SOX testing experience.Conduct testing tasks within Agile models and integration processes and manage development sprints. What are we looking for? Conduct testing tasks within Agile models and integration processes and manage development sprints.Conduct testing tasks within Agile models and integration processes and manage development sprints. Roles and Responsibilities: In this role you are required to do analysis and solving of lower-complexity problems Your day to day interaction is with peers within Accenture before updating supervisors In this role you may have limited exposure with clients and/or Accenture management You will be given moderate level instruction on daily work tasks and detailed instructions on new assignments The decisions you make impact your own work and may impact the work of others You will be an individual contributor as a part of a team, with a focused scope of work Please note that this role may require you to work in rotational shifts Qualifications Any Graduation

Skill required: Control Testing - Agile testing Designation: Regulatory Compliance Analyst Qualifications: Any Graduation Years of Experience: 3 to 5 years What would you do? Help clients transform their compliance function from reactive to proactive through an intelligent compliance operating model- powered by data, intelligent technologies and talentLooking for someone with SOX testing experience.Conduct testing tasks within Agile models and integration processes and manage development sprints. What are we looking for? Conduct testing tasks within Agile models and integration processes and manage development sprints.Conduct testing tasks within Agile models and integration processes and manage development sprints. Roles and Responsibilities: In this role you are required to do analysis and solving of lower-complexity problems Your day to day interaction is with peers within Accenture before updating supervisors In this role you may have limited exposure with clients and/or Accenture management You will be given moderate level instruction on daily work tasks and detailed instructions on new assignments The decisions you make impact your own work and may impact the work of others You will be an individual contributor as a part of a team, with a focused scope of work Please note that this role may require you to work in rotational shifts Qualifications Any Graduation

Skill required: Control Testing - Agile testing Designation: Regulatory Compliance Senior Analyst Qualifications: Any Graduation Years of Experience: 5 to 8 years What would you do? Help clients transform their compliance function from reactive to proactive through an intelligent compliance operating model- powered by data, intelligent technologies and talentLooking for someone with SOX testing experience.Conduct testing tasks within Agile models and integration processes and manage development sprints. What are we looking for? Conduct testing tasks within Agile models and integration processes and manage development sprints.Conduct testing tasks within Agile models and integration processes and manage development sprints. Roles and Responsibilities: In this role you are required to do analysis and solving of increasingly complex problems Your day to day interactions are with peers within Accenture You are likely to have some interaction with clients and/or Accenture management You will be given minimal instruction on daily work/tasks and a moderate level of instruction on new assignments Decisions that are made by you impact your own work and may impact the work of others In this role you would be an individual contributor and/or oversee a small work effort and/or team Please note that this role may require you to work in rotational shifts Qualifications Any Graduation

Skill required: Control Testing - Agile testing Designation: Regulatory Compliance Senior Analyst Qualifications: Any Graduation Years of Experience: 5 to 8 years What would you do? Help clients transform their compliance function from reactive to proactive through an intelligent compliance operating model- powered by data, intelligent technologies and talentLooking for someone with SOX testing experience.Conduct testing tasks within Agile models and integration processes and manage development sprints. What are we looking for? Conduct testing tasks within Agile models and integration processes and manage development sprints.Conduct testing tasks within Agile models and integration processes and manage development sprints. Roles and Responsibilities: In this role you are required to do analysis and solving of increasingly complex problems Your day to day interactions are with peers within Accenture You are likely to have some interaction with clients and/or Accenture management You will be given minimal instruction on daily work/tasks and a moderate level of instruction on new assignments Decisions that are made by you impact your own work and may impact the work of others In this role you would be an individual contributor and/or oversee a small work effort and/or team Please note that this role may require you to work in rotational shifts Qualifications Any Graduation

Role & responsibilities Well-versed with IT General Controls, domains as such Change Management, User Access Management, IT Operations, Backup & Recovery, System Development Life Cycle, etc. Understanding of IT Risk Assessment methodologies& ability to comprehend the existing IT Security Systems Hands-on experience in the multiple areas of IT audits, IT SOX, IT Financial Audit IT Risk consulting or any other regulatory / compliance audits including scoping, process flows, walkthrough documentation Interview client stakeholders, conducts walkthrough meetings & develop assessment artifacts. Ability to independently perform the Test of Design & Test of Operating Effectiveness for IT General Controls and provide quality deliverables within defined timelines. Assessment Knowledge of various industry standards, frameworks & compliances such as ISO 27001, HITRUST, COBIT, COSO IT, DORA etc. Proficiency with Microsoft Office applications Understand and be able to interpret Pen test reports and remediation effort Is experienced in data loss prevention strategy, tooling and controls Has experience of auditing oversight of IT service partners Preferred candidate profile 3+ years B.Tech/ M.Tech/ MBA/ CA/ CIA/ CISA/ IT Specialist with Audit and Compliance experience.

EYGDS is actively seeking seasoned ITGC professionals to join our team. Experience required - 3 to12 years Locations - Gurgaon, Bangalore, Pune, Chennai, Hyderabad, Noida, Pune, Kochi, Trivandrum & Kolkata Required Skills: Experience in reviewing and controls testing of SAP S4 Hana / SAP ECC including IT general controls (ITGC) and IT Application Controls (ITAC) pre & post implementation reviews migration testing. Security & configurations such as debugging, client settings, etc. Understanding of the TCode, tables used to extract the data from SAP S4 Hana / SAP ECC with relation to ITGC and ITAC testing. Understanding of SAP S4 Hana / SAP ECC user access security architecture (Roles, profiles, Authorization objects). Good to have certifications on SAP S4Hana/ SAP ECC security or business modules, CISA, CISSP

Role & responsibilities Risk Consulting helps clients across various industries by addressing the increasingly complex strategic, operational, compliance, and governance challenges faced by those responsible for managing or overseeing dynamic businesses. Risk Consulting major offerings includes AML & Regulatory Compliance; ERP Advisory; Automation and Analytics; Enterprise Risk Management; Internal Audit; SOX Advisory; Contract Compliance; Credit Reviews; Information & Technology Audits; Cybersecurity risk management; Third-party risk management; IT due diligence; SOC1 / SOC2; Security and Privacy Risk; Governance Risk and Compliance; PCI; Cyber Transformation; Manage Security Services; Secure Architecture Solutions; Cyber Testing; Digital Forensics and Incident Response; and Cyber Threat Intelligence. Qualification and Minimum Entry Requirements Chartered Accountant with relevant 1 2 years’ experience in SSAE 18, SOC reports, IT General Controls and IT Application Controls. Candidate should have basic to intermediate knowledge of financials, operations and technology and its related risks Candidate should have basic knowledge for SOC 1, SOC 2, IT General Controls, and IT Application Controls Qualified to pursue a job-relevant certification (CIA, CISA) Strong Data Analytical skills including advanced Excel skills (VLOOKUP’s, pivot tables, and basic formulas), Word and PowerPoint MS Visio skills to develop process and data flow diagrams Strong multi-tasking and project management skills Excellent verbal and written communication (English) as the position requires frequent communications with RSM International clients Position and Key Responsibilities As an Associate in RSM’s growing Technology Risk Consulting, you will have the opportunity to develop into a seasoned consultant through a high degree of client and industry exposure, career development and mentorship opportunities, and a diverse and inclusive culture. The fast-paced and dynamic environment in which we operate will provide you with daily challenges and exciting opportunities. In the Technology Risk Consulting Practice, our consultants help our clients with design and optimization of controls utilizing a general knowledge of business processes, accounting, and information technologies by identifying and prioritizing risk and transform their technology risk management and assurance capabilities to be aligned to the key risks and strategies of their organization. Develop an understanding of the RSM Technology Risk Consulting approach, methodology and tools Develop an understanding of the industry leading frameworks and methodologies for Sarbanes-Oxley, COSO, COBIT Demonstrate understanding of business processes, internal control risk management, IT controls, and related regulatory and compliance standards Perform technology risk assessments and reviewing, documenting, evaluating control’s design and operating effectiveness, IT internal audit consulting activities (internal audits over ERP systems, IT security, and other IT systems), perform external audit assurance activities, and perform service organization control services activities related to SSAE18 SOC 1 and SOC 2 reporting services Performing risk analysis by reviewing the information security policy documents against industry standards/ regulatory requirements and drafting risk reports, which summarize the information security assessment including any risks to the organization Execute components of IT audits under offshore delivery model in an effective and efficient manner Use problem solving and critical thinking skills to quickly identify internal control deficiencies, evaluate their risk implications, and draw the appropriate conclusions to best advise our clients Exercise professional skepticism, judgment and adhere to the code of ethics while on engagements Ensure that documentation is compliant with quality standards of the firm Work collaboratively as a part of the team and communicate effectively with RSM consulting professionals, supervisors, and senior management in the U.S. on a daily basis Manage multiple concurrent engagements and ensure service excellence through prompt responses to internal and external clients Provide timely, high quality client service that meets or exceeds client expectations including coordinating the development and execution of the consulting work plan and client deliverables Understand RSM US and RSM Delivery Center's LOB’s and work as a team in providing an integrated service delivery Ensure professional development through ongoing education Open to work on other solution sets considering business requirements

As our Senior IT Compliance Analyst, you will play a critical role in supporting the Columbia GFC team in maintaining an effective SOX program by monitoring and assessing IT control design and operating effectiveness You will provide insights that help to optimize our processes and controls You possess the ability to function independently, apply professional judgment, interface with all levels of management, and communicate complex matters clearly and succinctly You will leverage your experiences and skills to help ensure that our SOX program maintains pace with our rapidly evolving business environment You will also be energized by the opportunity to help continuously improve our program Essential Functions/Responsibilities: You will serve as the primary lead of the annual SOX IT control testing program, which includes the following key responsibilities: Build a strong understanding of our business and technology landscape to evaluate processes, identify risks, and assess effectiveness of IT controls that support financial reporting. Provide insights and recommendations to help ensure that SOX documentation remains current, including risk and control matrices, narratives, and process flowcharts. Lead control discussions and walkthrough meetings with control owners and performers for multiple processes across the company. Develop testing protocols and procedures. Perform testing to assess the design and operating effectiveness of IT internal controls. Clearly identify, communicate, and escalate issues and observations with key stakeholders, including Finance leaders, Internal Audit, IT Compliance, and the external auditors. Develop strong working relationships with the Portland-based GFC team, other members of the Bangalore-based SOX testing team, and the broader Accounting and Controllership teams. Assist in innovating the use of our SOX compliance tool, AuditBoard. Support and lead periodic issue and status communications. Leverage strong project/time management skills with the ability to handle and manage multiple priorities with a sense of urgency.

Skill required: Control Testing - Agile testing Designation: Regulatory Compliance Analyst Qualifications: Any Graduation Years of Experience: 3 to 5 years What would you do? Help clients transform their compliance function from reactive to proactive through an intelligent compliance operating model – powered by data, intelligent technologies and talentLooking for someone with SOX testing experience.Conduct testing tasks within Agile models and integration processes and manage development sprints. What are we looking for? Conduct testing tasks within Agile models and integration processes and manage development sprints.Conduct testing tasks within Agile models and integration processes and manage development sprints. Roles and Responsibilities: In this role you are required to do analysis and solving of lower-complexity problems Your day to day interaction is with peers within Accenture before updating supervisors In this role you may have limited exposure with clients and/or Accenture management You will be given moderate level instruction on daily work tasks and detailed instructions on new assignments The decisions you make impact your own work and may impact the work of others You will be an individual contributor as a part of a team, with a focused scope of work Please note that this role may require you to work in rotational shifts Qualifications Any Graduation

Skill required: Control Testing - Agile testing Designation: Service Delivery Ops Associate Manager Qualifications: Any Graduation Years of Experience: 10 to 14 years What would you do? Help clients transform their compliance function from reactive to proactive through an intelligent compliance operating model – powered by data, intelligent technologies and talentLooking for someone with SOX testing experience.Conduct testing tasks within Agile models and integration processes and manage development sprints. What are we looking for? Conduct testing tasks within Agile models and integration processes and manage development sprints.Conduct testing tasks within Agile models and integration processes and manage development sprints. Roles and Responsibilities: In this role you are required to do analysis and solving of moderately complex problems Typically creates new solutions, leveraging and, where needed, adapting existing methods and procedures The person requires understanding of the strategic direction set by senior management as it relates to team goals Primary upward interaction is with direct supervisor or team leads Generally interacts with peers and/or management levels at a client and/or within Accenture The person should require minimal guidance when determining methods and procedures on new assignments Decisions often impact the team in which they reside and occasionally impact other teams Individual would manage medium-small sized teams and/or work efforts (if in an individual contributor role) at a client or within Accenture Please note that this role may require you to work in rotational shifts Qualifications Any Graduation

Skill required: Control Testing - Agile testing Designation: Delivery Lead Manager Qualifications: Any Graduation Years of Experience: 13 to 18 years What would you do? Help clients transform their compliance function from reactive to proactive through an intelligent compliance operating model – powered by data, intelligent technologies and talentLooking for someone with SOX testing experience.Conduct testing tasks within Agile models and integration processes and manage development sprints. What are we looking for? Conduct testing tasks within Agile models and integration processes and manage development sprints.Conduct testing tasks within Agile models and integration processes and manage development sprints. Roles and Responsibilities: In this role you are required to identify and assess complex problems for area of responsibility The person would create solutions in situations in which analysis requires an in-depth evaluation of variable factors Requires adherence to strategic direction set by senior management when establishing near-term goals Interaction of the individual is with senior management at a client and/or within Accenture, involving matters that may require acceptance of an alternate approach Some latitude in decision-making in involved you will act independently to determine methods and procedures on new assignments Decisions individual at this role makes have a major day to day impact on area of responsibility The person manages large - medium sized teams and/or work efforts (if in an individual contributor role) at a client or within Accenture Please note that this role may require you to work in rotational shifts Qualifications Any Graduation

Skill required: Control Testing - Agile testing Designation: Service Delivery Ops Associate Manager Qualifications: Any Graduation Years of Experience: 10 to 14 years What would you do? Help clients transform their compliance function from reactive to proactive through an intelligent compliance operating model – powered by data, intelligent technologies and talentLooking for someone with SOX testing experience.Conduct testing tasks within Agile models and integration processes and manage development sprints. What are we looking for? Conduct testing tasks within Agile models and integration processes and manage development sprints.Conduct testing tasks within Agile models and integration processes and manage development sprints. Roles and Responsibilities: In this role you are required to do analysis and solving of moderately complex problems Typically creates new solutions, leveraging and, where needed, adapting existing methods and procedures The person requires understanding of the strategic direction set by senior management as it relates to team goals Primary upward interaction is with direct supervisor or team leads Generally interacts with peers and/or management levels at a client and/or within Accenture The person should require minimal guidance when determining methods and procedures on new assignments Decisions often impact the team in which they reside and occasionally impact other teams Individual would manage medium-small sized teams and/or work efforts (if in an individual contributor role) at a client or within Accenture Please note that this role may require you to work in rotational shifts Qualifications Any Graduation