Technology Audit - Officer

Overview

Technology Auditor on Corporate Audit's Integrated Audit team, conducting risk-based audits of business risk and related application technology controls, working collaboratively with business auditors.

What you'll do

• Successfully participate in the planning, execution and completion of audits following a risk-based methodology in line with Division and Industry Standards as well as regulatory requirements.
• Support recommendations for internal control improvements and preparation of audit reports providing clear messages on key risks and key audit issues.
• Participate in the planning, assessment, testing and reporting phases of audits covering integrated IT audits with application controls, configuration, automated and reporting controls.
• Perform independent and objective assessments of risks and controls to improve risk management practices and assess controls for compliance with laws, regulations, company policies and business needs.
• Prepare or review documentation of audit work in adherence with the division's risk-based audit methodology and industry standards.
• Establish strong relationships within the Corporate Audit function.
• Develop a good understanding and knowledge base of the company's operations and establish effective business relationships within the company.
• Gain and apply a thorough understanding of audits and assigned functions, including utilization of technology and active usage of Data Analytics.
• Demonstrate, maintain and expand your knowledge of financial and operational internal control methodologies and terminologies (e.g. COSO, COBIT), industry standards, audit industry best practices, regulatory expectations, and risk management practices.

What you'll need

• Bachelor's degree in computer science, Information Security, Information Systems, Engineering, Accounting, or a related field, or its equivalent.
• 7-710 years of experience in Public Accounting, Internal Audit, IT and Operations Auditing, Risk Management, or IT compliance.
• High degree of professionalism, professional curiosity and skepticism, organizational, analytical and project management skills.
• Strong written and verbal communication, interpersonal, presentation and organizational skills.
• Ability to work independently in an international team across multiple locations with global stakeholders.
• Knowledge of the regulatory environment applicable to financial institutions and proven ability to research, interpret and apply regulatory requirements.
• Fluency in English, written and spoken.

Nice to have

• Preferably experience in a financial or regulated industry.
• Demonstrated experience testing IT general controls (ITGC) and application controls (ITAC) including application parameters, configurations, scripts, validation controls and access to sensitive application transactions and data interfaces.
• Experience in a number of the following: technology consulting, system auditing, privacy and cyber-security audits, financial processes and systems, risk management, or data analytics.
• Demonstrated knowledge of Institute of Internal Auditors, NIST, COSO, COBIT, ITIL, ISO 27001, Sarbanes-Oxley and SOC 1 / SSAE 16 standards and laws and regulations applicable to the assigned area of responsibility.
• Industry recognized certification CISA, CISSP, CISM, CIA preferred.

Details

• Location: Bangalore, India.