Quality Analyst

About the Role

The IT Audit & Risk Management Specialist will be responsible for overseeing the entire project lifecyclefrom initiation to closurewhile ensuring compliance with audit standards, risk management frameworks, and IT governance policies. This role involves conducting audits, reviewing Segregation of Duties (SOD) conflicts, updating IT policies, and delivering training programs to strengthen organizational knowledge.

Key Responsibilities:

• Take end-to-end responsibility for reviewing the Project Lifecycle, including initiation, execution, and closure, while maintaining requisite documentation at each stage.
• Review Segregation of Duties (SOD) conflicts, assess conflicting access needs.
• Conduct, monitor, and evaluate various audit assignments within system domains such as IT security, cybersecurity, disaster recovery processes, and IT General Controls (ITGC).
• Review and update IT function policies and Risk and Control Matrices (RCMs).
• Develop and deliver training materials for knowledge development initiatives and conduct training sessions.
• Manage and execute audits by identifying and analyzing risks, planning and prioritizing audit activities, conducting process walkthroughs, and documenting procedures and controls.
• Collaborate with Internal Audit and Corporate teams to ensure that process narratives, flowcharts, and RCMs align with current business practices.

Required Expertise:

• Strong experience in evaluating sensitive access and SOD based on business risks and industry best practices
• Proficiency in creating SOD rulebooks tailored to client business processes and applications.
• Expertise in identified violations during SOD testing.
• Proven experience in IT audits, Risk assessment, and Compliance Frameworks.
• IT Change Management

Skills:

• Strong knowledge ITGC controls

• Ability to handle multiple tasks simultaneously.
• Strong analytical skills and attention to detail.
• Effective communication and interpersonal skills to collaborate with internal teams and external stakeholders.
• Ability to prepare and deliver training materials.

Preferred Experience:

• Familiarity with audit tools and frameworks such as

  ISO 9001 & 27001

  will be an added advantage.