Senior Analyst, Risk Management

Overview

Support Mastercard's SOX compliance program within the Finance Organization by scoping and evaluating general and application IT controls, reporting to a US-based Manager, Risk Management.

What you'll do

• Support the execution of SOX program components, including IT scoping, IT risk assessment, stakeholder training on IT control best practices, IT control testing and review, remediation recommendations, deficiency evaluations and reporting
• Assess and determine design effectiveness of internal controls
• Cover multiple technology environments such as Mainframe, UNIX/Linux, Cloud and Windows
• Work with business owners to address potential control gaps that may require remediation
• Partner with business owners and IT teams including technology compliance, operations, development and application support to assess the design and effectiveness of IT controls
• Liaise with regional finance and IT stakeholders as well as internal and external auditors
• Ensure delivery of high quality, timely work products
• Continuously identify efficiencies and opportunities to optimize financial and operational processes and controls through interaction with management
• Manage international time-zone differences in global communication
• Exercise judgment and maintain a high standard of ethics and professionalism

What you'll need

• Bachelor's degree in Accounting, Business, Management Information Systems or equivalent
• CPA/CA, CISA or similar certification
• Extensive knowledge of IT general and application controls
• Strong understanding of IT control concepts and frameworks such as COBIT, NIST Cybersecurity, NIST SP 800-53, CIS/SANS Top 20, Sarbanes Oxley, COSO, and leading business practices
• Familiarity with SEC/PCAOB regulations, COSO and US GAAP
• Demonstrated ability to monitor an effective global risk-based IT control environment
• Recent experience providing IT auditing or IT advisory-type services
• Knowledge of best practices around IT controls
• Working knowledge of current PCAOB Auditing and Accounting Standards
• Experience with IT external audit or risk advisory services, or in-house Technology Risk Management (first/second line of defense), or equivalent experience in a large, regulated organization with exposure to both infrastructure and applications
• Knowledge of common enterprise and web application technologies
• Proven ability to manage complex engagements or programs
• Excellent oral and written communication and interpersonal skills, with emphasis on building strong, longer-term relationships across geographies and functions
• Detail oriented and self-motivated, with the ability to meet project deadlines and deliverables in a fast-paced environment
• Effective ability to influence, drive change and resolve conflicts
• Strong analytical, logical reasoning and problem-solving skills
• Strong project management skills to lead and prioritize multiple projects
• Demonstrated ability to drive change and continuous improvement

Nice to have

• Familiarity with audit automation
• Experience in the risk management field (e.g., risk management, audit, compliance)

Details

• Location: Pune, India
• Collaborate with the US-based SOX team, worldwide IT departments, regional controllership, shared services center, business owners, and internal and external auditors, with some overlap in working hours
• Some travel may be required in the future, up to 10%