IT Audit with Insurance Domain experience

Job Requirements

• Deliver SOX 404 assessments in accordance with the PCAOB (Public Company Accounting Oversight Board) Auditing Standards.
• Lead team in conducting Process understanding discussions with the Clients as part of assessing risks arising from their use of Technology and identify control gaps within their processes.
• Lead team in evaluating and performing review of the design and operating effectiveness of technology controls (GITCs* and ITACs*) pertaining to Clients Internal Controls Over Financial Reporting.
• Identify opportunities and innovative ways to efficiently deliver on engagements and/or implement internal process improvements / automations.
• Effectively manage multiple assignments and teams across locations.
• Demonstrate strong people management and networking skills.

*GITCs: General IT Controls

*ITACs: IT Automated controls

Education and Experience-

• Education Qualification: BE / B-Tech; Post-Graduates (CA/ MBA / MCA / MTech)
• Certifications like CISA, CISSP preferred.
• Work Experience: The candidate must have 2-8 years of relevant experience with at least 2-3 years in a similar role, preferably with a Big 4 firm.

Technical skills

• Experience in conducting SOX control testing.
• Understanding of technology risks (GITCs* and ITACs*) including but not limited to; program management, SDLC, access management, incident and job scheduling, interface, input/process/output etc.
• Experience in evaluating risks across a variety of IT platforms (including ERPs, UNIX/Linux, Windows, Mainframe, iSeries (AS400), SQL, Sybase, Oracle, DB2 and popular Cloud Hosted solutions).
• Understanding of various Industry sectors and business processes (preferred Financial Services experience).
• Flair to be abreast with trends in Emerging Technologies / innovations like Cloud computing, Agile, Blockchain, Automation etc.
• Proficient with MS Office suite of applications [MS Word, MS Exec, MS PowerPoint, Visio].
• Cyber Security: Understanding of various aspects of cyber security including data protection, network security, Vulnerability remediation, threat intelligence etc.