IN-Associate _ ITGC _ITRA_ Advisory _Bangalore

Responsibilities:

 Strong understanding of IT General Controls domains such as Change Management, User Access Management, IT Operations, Back and Recovery
Management etc
 Strong understanding of the third-party risk management
 Implementation and assessment knowledge of various industry standards, frameworks, and compliances such as ISO 27001, HIPAA, HITRUST, ISO 22301,
ISO 27701 etc
 Understanding of the IT Risk Assessment methodologies and ability to comprehend and apply the knowledge during IT assessment lifecycle
 Interview client stakeholders and conducts walkthrough meetings and develop assessment artifacts
 Should understand complete assessment lifecycle from assessment scoping to project deliverables
 Great communication skills and the ability to break down and explain complex data security problems
 Excellent presentation skills and ability to effectively communicate proposals and point of view at senior management levels

Education:
 Minimum Qualification: BE/ BTech/MBA/Mtech/MCA
 Postgraduates in any stream would be preferred (not
mandatory)
 Prior Big 4 experience would be an added advantage
 Experience in IT Risk Advisory/ Assurance for varied
industry segments preferred
 Excellent communication skills - both written and oral
Certifications:
 CIA/CISA/CISM will be added advantage

Mandatory skill sets:  ITGC Reviews, IT Internal Audits, Controls Testing,
Compliance Reviews, ISO 27001 Reviews, HIPAA/ HITRUST
Reviews

Preferred skill sets:  ISO 27001 Reviews, HIPAA/ HITRUST Reviews
Years of experience required: 2-8

Education qualification: BE, B.tech, ME, M.tech, MCA, MBA, Mcom, CA, CS