- 6+ years of experience working in technology audits, Risk, Information Security, or Information Technology
- 2+ years of SOC or SOX IT control execution or testing
- Experience using GRC tools, such as TeamMate, Wdesk, or Archer, is preferred but not required
- Bachelor’s degree in a related field is strongly desired
- Security, risk and audit specialized training highly recommended
- Professional Certification strongly preferred but not required if demonstrated equivalent work experience : Certified Information Systems Security Professional (CISSP), Certified Information Security Manager, (CISM), Certified Information Systems Auditor (CISA), or Certified in Risk and Information Systems Control (CRISC)
Responsibilities Description :
- Demonstrated experience in Risk and Control Self Assessments, Audits, or exams for technology or information security
- Demonstrated ability to audit general IT controls including related infrastructure (Active Directory), operating systems (UNIX, Linux, Windows), databases (Oracle DB and MS SQL DB), and applications (Oracle, PeopleSoft, Salesforce, etc.)
- Design and perform root cause analysis, control gap assessments, and process improvement projects using technical and problem solving and critical thinking skills to quickly identify internal control deficiencies, evaluate their risk implications, and draw the appropriate conclusions
- Understand Industry standard frameworks for technology, such as COBIT, ISO, NIST, SANS, and others to design Governance, Risk and Control frameworks, and systems for technology and information security
- Design and develop internal control documentation including narratives, process and data flows, and other supporting work papers
- Moderate to in-depth understanding of business environment and risks associated with the financial services industry, IT environments, and information dataflow
- Understand IT audit principles and audit procedures, and determining and evaluating the severity of potential issues identified during testing, and to provide guidance to more junior team members
- Understand IT organization business processes and systems (IT Security, data management, architectural and planning, technology life cycle management, regulatory concerns)
- Participate in multiple projects concurrently, works under pressure well
- Strong verbal and written communication skills with comfort around presenting new ideas and presentations to senior management
- Demonstrated track record of meeting time commitments
- Demonstrated track record of working effectively across functional and organizational lines
- Demonstrated knowledge of risk management tools
- Ability to work in teams, and / or as an individual contributor
- Skills :
sox audit, soc1, soc2, it audit
- Top Skills Details :
sox audit,soc1,soc2,it audit
- Additional Skills & Qualifications :
1. Experience with GRC tools
- Experience Level :
Expert Level
About TEKsystems :
We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.
The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.