IT Audit Graduate Fresher Jobs in Mumbai

JD for Information Security and Compliance Specialist:Responsibilities:1. Utilize 3-5 years of direct experience in information security, specializing in risk and compliance management. Proficiently conduct audits and manage audit responses and observations.2. Implement ISMS (Information Security Management System) standards, policies, and conduct access reviews to ensure regulatory compliance. Perform thorough risk assessments and remain updated on relevant regulatory requirements.3. Demonstrate a proficient understanding of identity management standards, Business Continuity Planning (BCP), Disaster Recovery (DR), and Cloud Security.4. Utilize GRC (Governance, Risk, and Compliance) tools and techniques to organize and execute risk and compliance projects. Conduct audits, compile evidence, and coordinate audit responses efficiently.5. Manage risk and vulnerability assessments, along with compliance reviews, to ensure adherence to security standards.6. Maintain and monitor a centralized repository for procedures and documents related to security and compliance.7. Demonstrate proficiency in incident response and change management practices.8. Collaborate with stakeholders to align IT General Controls (ITGC) objectives with organizational goals.9. Support functional teams in achieving ongoing operational compliance.10. Conduct Vulnerability Assessment and Penetration Testing (VAPT) assessments, drive remediation efforts, and ensure the closure of identified vulnerabilities.11. Stay updated on regulatory changes impacting information security and ensure organizational compliance.12. Conduct security awareness training sessions and effectively communicate security policies and best practices to all stakeholders.13. Possess effective written and verbal communication skills to interact with cross-functional teams.14. Demonstrate strong analytical and problem-solving abilities to effectively address security and compliance challenges.

The resources should have ITGC, IT Audit < IT Advisory experience within the financial services industry (or consulting experience working with financial services clients).Area of focus: Provide IT Audit, ITGC, analysis, and technical writing to support the development of timely, accurate, and comprehensive responses to client and regulatory requests related to the firms technology risk program.Key Responsibilities: Direct, client-facing engagement responsibilities. Serving as both role model and trainer, demonstrates the attributes of excellent client service and assists team members in developing technical and professional competency. Identifies areas of IT risk and opportunities to improve IT business processes.Desired Profile:1. Experience in Information technology risk , IT audits, ITGC and IT Risk Management2. Qualification BE, MBA (desirable) and Certifications (desirable) CISA, CISSP, PMP, ITIL, CEH , COBIT, ISO 270013. Experience in conducting Information technology assessment and Risk management in accordance with established standards such as ISO27001 etc.4. Hands-on experience in the multiple areas of IT audits, SOX / ICFR / IFC / SAS 70 / SSAE / SOC, IT Financial Audit and Business Automated Controls, IT Risk consulting or any other regulatory / compliance audits.5. Experience in delivering result oriented solutions to Senior Management and Boards of Directors. Risk assessment and other risk management consulting experience.6. Experience with regulatory and compliance audits. Experience with creating Information Security Framework and its related policies and procedures.7. Strong knowledge of ERP's like SAP / OFIN / JDE / etc and their native application controls. Knowledge of IT Security aspects towards key areas like Cloud Computing, Cyber Risks, Network Security, database management systems, SDLC, IT general controls (ITGC), COBIT, COSO 2013.Application functionality.

Job Descriptions: Understand or define audit scope & develop audit plan/program Understand IT security and governance review, IS/IT policy and IT general and application inbuilt control audit Identify risks and assess existence, efficiency and effectiveness of IT control environment and processes Manage/ execute audit test procedures including reviewing and analysing evidences Comparison of client organisations processes with best practices for standards and procedures Identify areas of improvements and provide recommendations from assessment Draft high-quality reports and ensures findings are accurate along with presentation skills Ensure timely delivery of status updates and final reports to clients Provide mentorship and coaching to staff; responsible for technical development of staff Keep abreast of emerging technologies with the IT environment and help in developing audit plans to counter whatever risks that might be associated with the application of such technologies Ready to travelKnowledge: Well familiar with basics of Audit standards and frameworks SOX, COSO, COBIT, NIST, ISO 27001 Basic understanding of System operations, Database, Applications, Firewall, Network management, data centre controls Ability to use data analysis tools like ACL, MS Excel, IDEA, Tableau