Risk and Compliance Senior Analyst

Job Description

Skill required: Risk Compliance - Sarbanes-Oxley Act (SOX)
Designation: Risk and Compliance Senior Analyst
Qualifications: BTech/Bachelor of Information systems and Management/Bachelors of Information Technology
Years of Experience:5 to 8 years

What would you do You will be aligned with our Risk and Compliance vertical and help us perform compliance reviews, publish reports with actions and provide closure guidance as needed
We design and recommend effective controls to mitigate risks and help service delivery team prepare for upcoming client / external audits
Risk Compliance involves identifying, assessing, and managing risks to ensure an organization adheres to laws and regulations
This role includes developing risk management strategies, conducting compliance audits, and implementing policies to mitigate risks
It also involves monitoring regulatory changes and ensuring the organization remains compliant
The goal is to protect the organization from legal and financial risks while maintaining ethical standards
Assist in implementation of client-designed Sarbanes-Oxley controls into client s financial processes, enterprise resource planning system or supporting technology

What are we looking for QualificationsEducation: Bachelors degree in Computer Science, Information Systems, Information Technology, or related discipline; masters degree preferred
Experience: Experience in internal/external audit, technology risk, IT controls/SOX, application controls (ITAC), cybersecurity, risk compliance, or related assurance; experience in financial services is a plus
Technical knowledge: ITGC domains (identity and access management, change management, operations); endpoint security, patch vulnerability management, Active Directory, network defense, data loss prevention, incident management; familiarity with SDLC and application control concepts
Good to have - exposure to Cloud platforms (AWS, Azure, GCP) and technology transformation programs; experience using data analysis/analytics techniques to support audit testing
Tools: Proficiency with Microsoft Office (Excel, Word, PowerPoint); familiarity with audit management software and/or data analytics tools preferred
Certifications (desired): CISA, CIA; ISO 27001 and/or cloud certifications are a plus

Key ResponsibilitiesContribute to the technology audit portfolio and risk-based audit plan to ensure appropriate coverage of key risks and controls across infrastructure, security, and applications
Execute the full audit lifecycle for assigned engagements: planning, walkthroughs, control evaluation, testing, documentation, reporting support, and issue verification/closure validation
Perform walkthroughs and testing of ITGC and ITAC to assess control design and operating effectiveness; develop and maintain documentation such as process narratives/flowcharts, risk and control matrices (RCMs), and test plans
Identify and assess inherent risks across technology and security functions; evaluate effectiveness of mitigating controls (e
g
, access management, change management, computer operations, patching, SDLC, and key application controls)
Maintain relationships with key technology and application owners; continuously update risk/control assessments through periodic meetings, walkthroughs, and (where applicable) data analytics
Provide audit perspective on technology transformation initiatives (e
g
, modernization programs, cloud migrations, and process automation)
Travel may be required (role dependent)