Senior Specialist - Compliance

• The Senior Specialist will report to the IT Audit Manager , with responsibility to understand and provide assurance on the design and effectiveness of complex internal controls in a highly controlled environment

• In this role, the successful candidate will learn and grow to understand, anticipate, and share insights on Information Technology (IT)/Information Security (IS) risks where data security is a top priority
• The candidate will take advantage of modern analytical tools and audit techniques to deliver accurate and efficient insights and evaluate the effectiveness of risk mitigation activities
• The successful candidate must have a demonstrated eagerness to quickly learn about an organization s IT functions, infrastructure, processes, and applications to be able to recognize data sources, identify risks, and test assumptions
• The candidate must demonstrate an ability to deliver findings to stakeholders in an objective, professional manner

Key Areas of Responsibility:

• Function as a team member and provide support to the Corporate Compliance Officer and IT Audit team in planning and execution of IT control efforts;
• Take responsibility for the execution of the assigned controls and deliver end to end responsibilities at desired quality with minimum supervision;
• Prioritize work appropriately based on priorities and needs of multiple internal and external stakeholders to enable delivery of exceptional service;
• Demonstrate efficiency, persistence, and time management to achieve team objectives;
• Work with business stakeholders to ensure that controls are communicated and in place/effective to meet third party auditing requirements;
• Ensure controls are completely and accurately aligned to frameworks (e.g., SOC 1, SOC 2, PCI, HiTrust, HIPAA); and
• Use excellent judgment and rationale to prioritize findings and recommendations and communicate audit results and action plans to effectuate change.

• Possess advanced knowledge of network and application vulnerability assessment, IT practices, risk assessment practices, change control, data privacy, and business continuity;
• Broad audit experience across various areas of IT, including IT security, IT infrastructure, access management, IT application controls and IT general controls;
• Experience in IT general control testing for audits such as SOX, SOC 1, SOC 2, or similar audits;
• Strong understanding of how to document IT General Controls (ITGC) testing for use by external auditors;
• Experience with auditing various IT systems including cloud environments, databases, networks, security tools, and other technologies;
• Attention to detail, organization, and project management skills;
• Sound judgment, business risk awareness, and inquisitive personality; ability to think critically and analyze events and root causes professionally;
• Ability to research and gather information from both business and IT functions;
• Demonstrated experience working with various levels within an organization; and
• Strong presentation, verbal, and written communication.

• 4-6 years of IT audit experience;
• Bachelor s degree in health information systems, IT, or related field (e.g., Business Management, Information Security, Computer Science, Accounting);
• CISA or relevant certification preferred but not required;

• English
• Hindi