Location: Mumbai/ Bangalore

Other Skills:

1. Experience of working as an IT auditor, security auditor or governance, risk and compliance analyst, •
2. Good understanding of cybersecurity/IT control frameworks including but not limited to frameworks from SOX, FFIEC, ISO27001, NIST, Cloud Security Alliance, and PCI-DSS.    

Role Description: Controls testing of cybersecurity controls against industry security frameworks (e.g., SOX, ISO27001. NIST Cybersecurity Improvement framework, FFIEC).                       

Responsibilty: 

1. Interviewing business and technology stakeholders responsible for controls (technical and non-technical)
2. Developing risk and controls matrices
3. Assessing control design
4. Developing a testing strategy for testing operating effectiveness of controls
5. Identifying and reviewing the relevant evidence required to demonstrate the operating effectiveness
6. Arriving at informed conclusions regarding gaps in control operating effectiveness
7. Documentation of risks, gaps, findings and recommended actions
8. Preparing accurate reports and using tools such as PowerPoint, Word, Excel, SharePoint, Open Pages
9. Managing your time to ensure testing is completed in a timely manner