Manager/ Senior Manager - SOX ITGC

Key Responsibilities:

• Assisting Senior Team in engagement scoping, planning and reporting of SOX ITGC projects.
• Planning and allocating resources in accordance with skills and schedules required for the project engagements.
• Setting work priorities, tracking work progress and coordinating with internal and external Stakeholders to ensure timely completion of various engagements along-with quality deliverables within the baseline budget.
• Scheduling and conducting regular project status meetings with internal and external stakeholders.
• Ensuring that SOX ITGC assessments are in accordance with the PCAOB (Public Company Accounting Oversight Board) Auditing Standards.
• Addressing and promptly resolving any project issues and other operational issues.
• Reviewing/updating and ensuring high quality deliverables including work papers and reports.
• Maintaining all engagement related documentation and work papers.
• Managing the internal SOX ITGC Team and ensuring their high motivation and optimal performance.
• Managing team development activities such as training and on-job shadowing.
• Team performance feedbacks and appraisals.

Core Competencies (must have):

• Good knowledge of various control areas of IT General Controls, IT Application Controls and Automated Controls, and how they impact the control environment.
• Knowledge COSO, COBIT, NIST CSF and NIST SP 800-53, SOX , J-SOX etc. frameworks.
• Broad background of Information Security engineering concepts.
• Knowledge of security measures and auditing practices within various operating systems, networks, firewalls, databases and applications.
• Experience in identifying control gaps and communicating audit findings and control redesign recommendations to Sr. Management and Clients.
• Knowledge of Business Continuity and Disaster Recovery best practices.
• Knowledge of regulations impacting the privacy, integrity and availability of customer PII or PHI.
• Prior experience in managing/leading a Team of IT Auditors/IT Security Analysts.
• Proven track record of successful and on-time delivery of IT Security Assessment and IT Audit engagements/projects.
• Knowledge of waterfall and agile project management concepts and experience in project management.

Additional Competencies (good to have):

• Exposure to SSAE 18 SOC1 & SOC2 and/or PCI DSS and/or HIPAA Audits.
• CEH, CISSP or any other Cybersecurity training or certification.

Experience in using Project Management tools such as MS-Project, Jira, Confluence, Smartsheet etc

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.