Audit and Compliance Specialist
Logility Solutions · Bengaluru · onsite · Posted 1d ago
Undisclosed4–9 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Job Summary
Scope
Organization
Principal Duties and Responsibilities
Job Specifications
Education
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
The Audit and Compliance Specialist - Governance, Risk & Compliance performs the assurance activities of the Aptean Information Security Office: testing whether security controls are designed adequately and operating effectively, producing the evidence that demonstrates it, and assessing third parties, products and AI systems against Aptean control requirements. The role supports external audits and certification assessments, coordinates technical security assessments, authors security policies, standards and department handbooks, and administers the exception and control registers.
Scope
Knowledge: Possesses extensive experience and deep expertise in the field. Effectively resolves a broad range of challenges using sound judgment, creativity, and practical knowledge. Recognized as a fully proficient professional who can operate independently within their area of specialization.
Complexity: Manages diverse and complex assignments that require thorough analysis and evaluation of multiple factors. Demonstrates strong decision-making skills in selecting appropriate methods, techniques, and solutions. Regularly collaborates and builds relationships with senior internal and external stakeholders.
Supervision: Works with a high degree of autonomy and receives minimal day-to-day supervision. Typically requires only general direction for new or unique assignments while independently managing routine responsibilities.
Organization
Full line: Director, Information Security
Dotted line: Lead Audit and Compliance Specialist
Principal Duties and Responsibilities
- Executes control testing against the information security control framework on the defined cycle, including sampling, test procedures and documented conclusions on operating effectiveness.
- Assesses control evidence for sufficiency, records findings with severity, root cause and accountable owner, and validates remediation evidence before closing findings raised by the function.
- Supports external audits, certification assessments and customer-driven assessments through evidence preparation, request tracking, auditor liaison and follow-up submissions.
- Coordinates technical security assessments: defines scope against control, certification and contractual requirements, manages independent assessors, reviews deliverable quality, and registers resulting findings for tracking.
- Conducts pre-engagement and periodic third-party security and privacy due diligence assessments, reviews vendor assurance artefacts and contractual security requirements, and issues documented risk opinions.
- Assesses AI systems against applicable security control requirements, performs AI audit and assurance activity, and provides security input to AI risk categorisation and operator role determination undertaken by the governance function.
- Drafts and maintains security policies, standards and department security handbooks, working with subject matter experts to define applicable controls, expected evidence and accountable owners.
- Administers the exception and risk registers, monitors expiry, produces recurring compliance and control reporting for management and governance committees, and performs other related duties as assigned.
Job Specifications
Education
- Bachelor s degree
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Skills
Due DiligenceAssuranceAuditingremediationCisaIso 27001ISORisk AssessmentInformation SecurityIT Audit