1878 Ernst & Young Jobs

Location- Bangalore, Hyderabad, Kolkata, Kerala, Pune, Noida, Gurgaon

Exp- 3-6 Years

To qualify for the role, you must have

• A bachelors or masters degree and approximately 3-6 years of related work experience 
• At least 2-4 years of experience in IT Risk and Compliance
• Risk Assessment – Assessment of internal processes to identify security findings, vulnerabilities, and control gaps/deviations identified on applications and infrastructure. Develop risk control matrix in line with COBIT, ISO, NIST and ITIL Best Practice and recommendations. Asses.
• Control Monitoring / Testing - Understanding of Cyber and compliance standards like PCI, ISO27001, perform test the design and operational effectiveness of the controls.
• Control Automation – Identify controls automation opportunities through analytics platform to monitor the operational effectiveness on the regular basis.
• Defect / Gap Identification:   Identify the confidentiality, integrity and the availability related deficiencies in the client environment and evaluate against industry standards.
• Knowledge of IT risk, information security or cyber security frameworks such as COSO, COBIT, ISO, NIST etc.
• Strong exposure working in client facing roles, collaborate with cross functional teams including internal audits, IT security and business stakeholders to assess control effectiveness and facilitate remediation activities.
• Excellent communication, documentation and report writing skills.
• Good to have relevant industry certifications such as CISA, CISM, CISSP, ISO 27001, and others (as relevant)