IT Audit Job Vacancies in Navi Mumbai

Role and Responsibilities: Collaborate with stakeholders to gather and analyze requirements, identify optimal solutions, and translate them into actionable plans. Lead end-to-end IT project management for both B B Banthia Finance Pvt Ltd and B B Banthia Jewellers LLP, ensuring timely delivery within budget and scope, leveraging third-party solution providers and vendors as necessary. Conduct user acceptance tests to validate compliance with initial user requirements. Efficiently prioritize tasks and allocate resources to achieve project objectives. Supervise teams responsible for IT Support, IT Operations, IT Hardware, and MIS across both sectors. Foster collaboration with cross-functional teams to ensure seamless project execution aligned with organizational goals. Spearhead continuous improvement initiatives to refine project management processes and methodologies.Skills and Qualifications: Bachelors degree in computer science, Engineering, or related field; MCA or equivalent. Minimum 5 years of total experience with at least 3 years in project management, vendor management, and team leadership. Deep understanding of the Gold/NBFC domain, project management methodologies, and industry best practices. Proficiency in Excel, project management tools, and software applications. Familiarity with Office IT Hardware requirements. Strong people management and interpersonal skills. Ability to multitask, prioritize, and thrive in a fast-paced environment.

About us:We are headquartered in New York, USA committed to provide sustainable and scalable solutionstowardsclinical research and bioinformatics needs. Our team hasa decade worth of experience in medical information management, especiallyincancer research. Good data drives quality researchandwe recognize that todays research will shape the clinical practice guidelines of tomorrow. Our information technology and data management solutions can streamline and integrate research and patient care workflows to collect quality data and achieve research goals.Job Title:Sr. Executive Department: Risk & Compliance Job Location:Navi MumbaiReporting to: ManagerJob Duties / Responsibilities:Performing daily random audits of computer systems to check the effectiveness of IT controlsConduct Compliance Induction for new joiners.Provide developmental training to staff within defined time line based on business needs.Maintain updated centralized master list for all compliance related functions.Periodic review and up gradation of all mandatory, essential, MR/ISM manual, and procedure documentsConduct Risk & Compliance awareness test to employees at 6-month intervalPrepare and publish the Compliance awareness and Medicare assessment reportReview audit checklists to improve effectivenessTo monitor and ensure continual improvement on QMS/ISMS/SOC and other security auditsCoordination with software team/other process owners on any requirements related to Security and QualityCoordinate and guide the stakeholders in reporting and closing Audit observations and incidents.Education and Experience:Any graduate with good communication skillsOverall IT experience of 4 to 8 years, with a minimum of 2 to 4 years in IT Security, Audit, or Compliance roles.Experience in handling SIEM tools, knowledge of ISO 27001 requirements, and Vulnerability assessments are a plusCertifications like ISO 27001, Security+, or any Security certification.

About us: We are headquartered in New York, USA committed to provide sustainable and scalable solutions towards clinical research and bioinformatics needs. Our team has a decade worth of experience in medical information management, especially in cancer research. Good data drives quality research and we recognize that todays research will shape the clinical practice guidelines of tomorrow. Our information technology and data management solutions can streamline and integrate research and patient care workflows to collect quality data and achieve research goals. Job Title: Sr. Executive Department: Risk & Compliance Job Location: Navi Mumbai Reporting to: Manager Job Duties / Responsibilities: Performing daily random audits of computer systems to check the effectiveness of IT controls Conduct Compliance Induction for new joiners. Provide developmental training to staff within defined time line based on business needs. Maintain updated centralized master list for all compliance related functions. Periodic review and up gradation of all mandatory, essential, MR/ISM manual, and procedure documents To plan and conduct Risk & Compliance awareness test to employees at 6-month interval Prepare and publish the Compliance awareness and Medicare assessment report Review audit checklists to improve effectiveness To monitor and ensure continual improvement on QMS/ISMS/SOC and other security audits Coordination with software team/other process owners on any requirements related to Security and Quality Coordinate and guide the stakeholders in reporting and closing Audit observations and incidents. Education and Experience: Any graduate with good communication skills Overall IT experience of 4 to 8 years, with a minimum of 2 to 4 years in IT Security, Audit, or Compliance roles. Experience in handling SIEM tools, knowledge of ISO 27001 requirements, and Vulnerability assessments are a plus Certifications like ISO 27001,Sneha Adidravidar,

JD for Information Security and Compliance Specialist:Responsibilities:1. Utilize 3-5 years of direct experience in information security, specializing in risk and compliance management. Proficiently conduct audits and manage audit responses and observations.2. Implement ISMS (Information Security Management System) standards, policies, and conduct access reviews to ensure regulatory compliance. Perform thorough risk assessments and remain updated on relevant regulatory requirements.3. Demonstrate a proficient understanding of identity management standards, Business Continuity Planning (BCP), Disaster Recovery (DR), and Cloud Security.4. Utilize GRC (Governance, Risk, and Compliance) tools and techniques to organize and execute risk and compliance projects. Conduct audits, compile evidence, and coordinate audit responses efficiently.5. Manage risk and vulnerability assessments, along with compliance reviews, to ensure adherence to security standards.6. Maintain and monitor a centralized repository for procedures and documents related to security and compliance.7. Demonstrate proficiency in incident response and change management practices.8. Collaborate with stakeholders to align IT General Controls (ITGC) objectives with organizational goals.9. Support functional teams in achieving ongoing operational compliance.10. Conduct Vulnerability Assessment and Penetration Testing (VAPT) assessments, drive remediation efforts, and ensure the closure of identified vulnerabilities.11. Stay updated on regulatory changes impacting information security and ensure organizational compliance.12. Conduct security awareness training sessions and effectively communicate security policies and best practices to all stakeholders.13. Possess effective written and verbal communication skills to interact with cross-functional teams.14. Demonstrate strong analytical and problem-solving abilities to effectively address security and compliance challenges.

The resources should have ITGC, IT Audit < IT Advisory experience within the financial services industry (or consulting experience working with financial services clients).Area of focus: Provide IT Audit, ITGC, analysis, and technical writing to support the development of timely, accurate, and comprehensive responses to client and regulatory requests related to the firms technology risk program.Key Responsibilities: Direct, client-facing engagement responsibilities. Serving as both role model and trainer, demonstrates the attributes of excellent client service and assists team members in developing technical and professional competency. Identifies areas of IT risk and opportunities to improve IT business processes.Desired Profile:1. Experience in Information technology risk , IT audits, ITGC and IT Risk Management2. Qualification BE, MBA (desirable) and Certifications (desirable) CISA, CISSP, PMP, ITIL, CEH , COBIT, ISO 270013. Experience in conducting Information technology assessment and Risk management in accordance with established standards such as ISO27001 etc.4. Hands-on experience in the multiple areas of IT audits, SOX / ICFR / IFC / SAS 70 / SSAE / SOC, IT Financial Audit and Business Automated Controls, IT Risk consulting or any other regulatory / compliance audits.5. Experience in delivering result oriented solutions to Senior Management and Boards of Directors. Risk assessment and other risk management consulting experience.6. Experience with regulatory and compliance audits. Experience with creating Information Security Framework and its related policies and procedures.7. Strong knowledge of ERP's like SAP / OFIN / JDE / etc and their native application controls. Knowledge of IT Security aspects towards key areas like Cloud Computing, Cyber Risks, Network Security, database management systems, SDLC, IT general controls (ITGC), COBIT, COSO 2013.Application functionality.

Job Descriptions: Understand or define audit scope & develop audit plan/program Understand IT security and governance review, IS/IT policy and IT general and application inbuilt control audit Identify risks and assess existence, efficiency and effectiveness of IT control environment and processes Manage/ execute audit test procedures including reviewing and analysing evidences Comparison of client organisations processes with best practices for standards and procedures Identify areas of improvements and provide recommendations from assessment Draft high-quality reports and ensures findings are accurate along with presentation skills Ensure timely delivery of status updates and final reports to clients Provide mentorship and coaching to staff; responsible for technical development of staff Keep abreast of emerging technologies with the IT environment and help in developing audit plans to counter whatever risks that might be associated with the application of such technologies Ready to travelKnowledge: Well familiar with basics of Audit standards and frameworks SOX, COSO, COBIT, NIST, ISO 27001 Basic understanding of System operations, Database, Applications, Firewall, Network management, data centre controls Ability to use data analysis tools like ACL, MS Excel, IDEA, Tableau