Senior Specialist Compliance

Designation: Senior Specialist Compliance

Reports to (level of category): Program Manager

Mode of Work: Hybrid

Shift Timing: 1 pm 10 pm

Job Location: Hyderabad, Chennai, Gurugram Noida

The Senior Specialist will report to the IT Audit Manager, with responsibility to understand and provide assurance on the design and effectiveness of complex internal controls in a highly controlled environment.

In this role, the successful candidate will learn and grow to understand, anticipate, and share insights on Information Technology (IT)/Information Security (IS) risks where data security is a top priority. The candidate will take advantage of modern analytical tools and audit techniques to deliver accurate and efficient insights and evaluate the effectiveness of risk mitigation activities.

The successful candidate must have a demonstrated eagerness to quickly learn about an organizations IT functions, infrastructure, processes, and applications to be able to recognize data sources, identify risks, and test assumptions. The candidate must demonstrate an ability to deliver findings to stakeholders in an objective, professional manner.

Key Areas of Responsibility:

• Function as a team member and provide support to the Corporate Compliance Officer and IT Audit team in planning and execution of IT control efforts;
• Take responsibility for the execution of the assigned controls and deliver end to end responsibilities at desired quality with minimum supervision;
• Prioritize work appropriately based on priorities and needs of multiple internal and external stakeholders to enable delivery of exceptional service;
• Demonstrate efficiency, persistence, and time management to achieve team objectives;
• Work with business stakeholders to ensure that controls are communicated and in place/effective to meet third party auditing requirements;
• Ensure controls are completely and accurately aligned to frameworks (e.g., SOC 1, SOC 2, PCI, HiTrust, HIPAA); and
• Use excellent judgment and rationale to prioritize findings and recommendations and communicate audit results and action plans to effectuate change.

Required Experience:

• Possess advanced knowledge of network and application vulnerability assessment, IT practices, risk assessment practices, change control, data privacy, and business continuity;
• Broad audit experience across various areas of IT, including IT security, IT infrastructure, access management, IT application controls and IT general controls;
• Experience in IT general control testing for audits such as SOX, SOC 1, SOC 2, or similar audits;
• Strong understanding of how to document IT General Controls (ITGC) testing for use by external auditors;
• Experience with auditing various IT systems including cloud environments, databases, networks, security tools, and other technologies;
• Attention to detail, organization, and project management skills;
• Sound judgment, business risk awareness, and inquisitive personality; ability to think critically and analyze events and root causes professionally;
• Ability to research and gather information from both business and IT functions;
• Demonstrated experience working with various levels within an organization; and
• Strong presentation, verbal, and written communication.

Exp and Qualifications Required :

• 4-6 years of IT audit experience;
• Bachelors degree in health information systems, IT, or related field (e.g., Business Management, Information Security, Computer Science, Accounting);
• CISA or relevant certification preferred but not required;

Language:

• English
• Hindi