Sr. Manager- II - IT SC

Key Responsibilities

• Coordinate with
  business and IT process owners to initiate, scope, plan, and conduct periodiccontrols assessments to identify areas of risk by evaluating the design andoperating effectiveness of Information Technology General Controls (ITGC) overapplications, operating systems, and databases as well as the networkinfrastructure including cybersecurity controls
• Planning,
  testing, documentation and reporting
• Communicate
  issues to process owners, ensuring their understanding of associated risks andthe actions needed to remediate those risks
• Prepare reports
  based on the adequacy and effectiveness of controls evaluated/tested
• Track and
  Monitors open issues and conducts follow-up to evaluate the adequacy of remediation efforts
• Communicate with
  external auditors and support their initiatives effectively from an IT auditstandpoint.
• Lead ISO, SOX and ICoFR audit planning, fieldwork
  (testing and documentation), and reporting
• Interact with
  the IT application owner and provide assistance as needed during the SOXcontrol testing processes, including attending walkthrough meetings andperforming testing on their behalf
• Aware about IT
  Controls and related compliances
• Evaluate
  compliance with Company policies and procedures and regulatory standards
• Build
  collaborative working relationships with internal stakeholders (appropriatelevels of management

Education

BE / B.Tech Computer Science / MBA Systems

Competencies (Knowledge & Skills)

• Knowledge of
  SDLC (Software Development Life Cycle)
• Certification of
  CA, CPA or CIA (or actively working towards) or other similar certificationswould be an added advantage.
• Demonstrated
  in-depth knowledge of concepts, best practices and controls in a breadth ofInformation Security areas/domains. These include governance & riskmanagement, access control, cybersecurity, physical security, securityarchitecture and design, business continuity/disaster recovery, networksecurity, application & operations security and compliance/incidentmanagement.
• Demonstrated
  ability to understand complex technologies, business processes, regulations andemerging risks.
• Strong
  understanding of ISO, SOX and IT frameworks including COSO and COBIT.