CrawlJobs Logo

IT Risk and Audit Analyst

https://www.randstad.com Logo

Randstad

Location Icon

Location:
India , Chennai

Category Icon

Job Type Icon

Contract Type:
Not provided

Salary Icon

Salary:

Not provided

Job Responsibility:

  • Prioritize controls and assist in Audit Planning
  • Perform compliance reviews, enterprise security audits( both application and infrastructure) which involves a. Verify IT General, application and cyber security controls to ensure effective delivery of functional processes within operations to mitigate risks. b. Verify technology risk management processes, application development and deployment processes, database management, vendor management, etc., c. Publish reports with actions and provide closure guidance as needed
  • Prepare high quality audit planning memo and Risk Control Matrix (RCM), workpaper documentation, manage discussion with stakeholders
  • Apply guidance from enterprise policies and procedures and control testing industry best practices in workpaper documentation and effective challenge
  • Lead walkthroughs with control owners/1st LOD testers to obtain a sufficient understanding of the design effectiveness and operating effectiveness of the control
  • Design and execute testing procedures to evaluate the effectiveness of controls related to technology risks
  • Responsible to identify control gaps and communicate findings and control redesign recommendations to Management/Clients
  • Prepare Dashboards and reports as directed by the delivery lead on time

Requirements:

  • Experienced in conducting IT audits that includes conducting and leading IT audits, risk assessments, and compliance reviews with a focus on IT controls
  • A solid understanding of information technology systems, infrastructure, and security is crucial. This includes knowledge of network architecture, operating systems, databases, cloud computing, cybersecurity principles, and IT governance frameworks (e.g., COBIT, ITIL)
  • Experience in performing risk assessments, identifying IT risks, and developing risk mitigation strategies is essential.This role should have a solid understanding of risk management principles and be able to apply them to IT audit processes effectively
  • Excellent communication skills are necessary to effectively communicate complex technical concepts to non-technical stakeholders, including senior management and executives. The IT Auditor should be able to articulate audit findings, risks, and recommendations clearly and concisely in both written reports and verbal presentations
  • Strong analytical and critical-thinking abilities are essential for analyzing complex IT systems, identifying control weaknesses, and assessing potential risks. The IT Audit Manager should be skilled in using data analysis techniques and tools to draw insights from large volumes of IT data
  • Keeping up-to-date with emerging technologies, industry trends, and regulatory changes is crucial for an IT Audit Manager
  • The IT Auditor must maintain the highest standards of professional ethics and integrity. They should adhere to auditing standards and confidentiality requirements, handle sensitive information with care, and maintain impartiality and objectivity throughout the audit process

Additional Information:

Job Posted:
April 11, 2026

Expiration:
May 21, 2026

Job Link Share:

Looking for more opportunities? Search for other job offers that match your skills and interests.

Briefcase Icon

Similar Jobs for IT Risk and Audit Analyst

Internal Audit Analyst

Citi’s Internal Audit Analyst Program is a 24-month rotational leadership progra...
Location
Location
United Kingdom , London
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Unquestioned commitment to integrity and ethical decision-making
  • Problem-solvers with strong critical thinking skills
  • Strong oral and written communication skills
  • Ability to work both independently, as well as on a team
  • Cooperation and focus in achieving group and client objectives
  • Strong data analytical skills
  • Quick thinking and detail oriented
  • Willing to ask questions
Job Responsibility
Job Responsibility
  • Gaining an understanding of internal audit best practices
  • Learning about Citi’s businesses and the risks it manages
  • Developing and executing audit work to provide timely audit assurance
  • Ensuring a sound control framework and environment globally
  • Hands-on experience in specific areas of Internal Audit during rotations
What we offer
What we offer
  • Competitive salary
  • Hybrid business model
  • Development-focused opportunities
  • Structured classroom training
  • Mentoring
  • Individual development
  • Fulltime
Read More
Arrow Right

Business Risk Intermediate Analyst

The Business Risk Intermediate Analyst is a developing professional role. Deals ...
Location
Location
Philippines , City of Taguig
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 2-5 years relevant experience in risk, compliance, audit or regulatory functions
  • Experience in working with the various risk and control systems and reporting requirements
  • Project management skills
  • Excellent organizational skills, ability to prioritize and adapt to change
  • Problem solver with the ability to translate plans in actions
  • Consistently demonstrates clear and concise written and verbal communication skills
  • Proficient in Microsoft Office with an emphasis on MS Excel
  • Self-motivated and detail oriented
  • Bachelor’s/University degree or equivalent experience
Job Responsibility
Job Responsibility
  • Timely execution of the Managers Control Assessment (MCA) program
  • Test and monitor key controls which have been identified for each product line and document results
  • Liaise with business and line control officers on any deficiencies or control gaps as well as ensuring appropriate remedial actions are in place where deficiencies are identified
  • Document, implement and execute Corrective Action Plan (CAP) for management of control issues
  • Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency
What we offer
What we offer
  • Global Benefits
  • Best-in-class benefits
  • Work life balance
  • Fulltime
Read More
Arrow Right

Third-Party Risk Analyst

As a Third-Party Risk Analyst, you will be responsible for evaluating, monitorin...
Location
Location
United States , Baltimore
Salary
Salary:
Not provided
https://www.roberthalf.com Logo
Robert Half
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor's Degree in Risk, Business, Business Technology, Cybersecurity, or a related field
  • 2+ years of experience in third-party risk management, vendor management, procurement, internal audit
  • Strong understanding of third-party risk management principles, methodologies, and best practices
  • Detail-oriented and organized, with the ability to manage multiple priorities and deadlines in a fast-paced environment
  • Proficiency in using risk management tools, software, and technologies to support third-party risk assessment and monitoring activities
  • Excellent analytical, problem-solving, and critical-thinking skills, with the ability to assess complex situations and make informed risk-based decisions
  • Effective communication and interpersonal skills, with the ability to collaborate with stakeholders at all levels of the organization
Job Responsibility
Job Responsibility
  • Conduct comprehensive risk assessments of third-party vendors and service providers
  • Review and analyze third-party contracts, agreements, and security documentation
  • Develop and implement risk mitigation strategies and action plans
  • Monitor and track third-party risk indicators
  • Collaborate with internal audit, compliance, and information security teams
  • Collaborate with procurement, legal, and business units
  • Conduct periodic reviews and audits of third-party vendors
  • Provide regular reporting and updates to senior management, the board of directors, and other stakeholders
  • Stay informed about industry trends, emerging risks, and best practices in third-party risk management
What we offer
What we offer
  • Medical, vision, dental, and life and disability insurance
  • Eligibility to enroll in company 401(k) plan
  • Fulltime
Read More
Arrow Right

Senior Third-Party Security Risk Analyst

As a Senior Third-Party Security Risk Specialist at Ledger, you will contribute ...
Location
Location
France , Paris
Salary
Salary:
Not provided
https://www.ledger.com Logo
Ledger
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Master degree in Information Security, Cybersecurity, or a related field
  • 5+ years of progressive experience in third-party risk management, with a strong background in audit, risk management, compliance, or a related control function within a complex organization
  • Proven project management skills with the ability to manage complex, cross-functional projects and maintain comprehensive documentation
  • In-depth knowledge of security frameworks and standards (e.g., ISO 27001, NIST Cybersecurity Framework) and experience in applying them to third-party risk management and regulatory requirements
  • Excellent analytical and problem-solving skills with a focus on identifying root causes and developing effective solutions
  • Strong communication and interpersonal skills, including the ability to influence and negotiate with vendors and stakeholders at all levels.
Job Responsibility
Job Responsibility
  • Conduct comprehensive security assessments of third-party vendors, including reviewing their security policies, procedures, and controls
  • Proactively identify and evaluate potential security/privacy risks associated with a particular focus on those that could impact Ledger's reputation, financial stability, and customer trust
  • Develop and implement risk mitigation strategies to address identified vulnerabilities
  • Lead the collaboration with vendors to remediate security gaps and ensure compliance with Ledger's stringent security requirements
  • Establish and maintain a robust vendor security monitoring program, driving continuous improvement in vendor security posture and compliance
  • Develop, implement, and continuously improve Ledger's third-party security risk management program, including policies, standards, procedures, and tools
  • Prepare reports and presentations on vendor security risks and mitigation efforts to senior management, stakeholders, and the Comex
  • Participate in audits as part of the Privacy audit program according to the agreed annual audit plan.
What we offer
What we offer
  • Equity: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow
  • Flexibility: A hybrid work policy
  • Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks
  • Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage
  • Well-being: Personal development, coaching & fitness with our dedicated partners
  • Vacation: Five weeks of paid leave per year, in addition to national holidays and rest & relaxation (RTT) days
  • High tech: Access to high performance office equipment and gadgets
  • Transport: Ledger reimburses part of your preferred means of transportation
  • Discounts: Employee discount on all our products.
  • Fulltime
Read More
Arrow Right

Business Risk Intermediate Analyst

Individuals in Quality Assurance, Monitoring & Testing are responsible for the a...
Location
Location
India , Pune; Chennai
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Minimum of 7 years of experience in operational risk management, compliance, audit, or other control-related functions in the financial services industry
  • Ability to identify, measure, and manage key risks and controls
  • Good knowledge in the development and execution for controls
  • Experience in control related functions in the financial industry
  • Experience in implementing sustainable solutions and improving processes
  • Understanding of compliance laws, rules, regulations, and best practices
  • Understanding of Citi’s Policies, Standards, and Procedures
  • Good analytical skills to evaluate complex risk and control activities and processes
  • Excellent verbal and written communication skills, with a demonstrated ability to engage at the senior management level
  • Problem-solving and decision-making skills
Job Responsibility
Job Responsibility
  • Good understanding of the Citi Risk & control framework and the underlying fundamentals on Risk Management
  • Support in performing the monitoring review that augment the principles defined per ARCM (Activity, Risk, Control & Monitoring)
  • Support in the end-to-end monitoring of the controls as defined in Risk Management policy
  • Participate in strategic initiatives for control performance enhancement
  • Involve in Control & Monitoring Design Assessment (CMDA) meetings and provide help in drafting the procedures
  • Participate in leadership meetings to analyze documentation and processes to ensure risks and control points are properly addressed
  • Help to identify any monitoring breaks and suggest enhancements
  • Assisting in the creation and maintenance of reports for control tracking and analysis
  • Help to identify risks across the business and organize cross-functional solutions
  • Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of teams and create accountability with those who fail to maintain these standards
  • Fulltime
Read More
Arrow Right

Business Risk & Control Sr Analyst - AVP

Join Citi's Markets Controls team to support several critical control and govern...
Location
Location
United Kingdom , Belfast
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Relevant work experience in financial services
  • Experience in risk management / risk and controls, compliance or internal audit
  • Experience in project work, process re-design and change management
  • Excellent relationship-building, problem solving and communications skills (written / verbal)
  • Results/task orientated with excellent attention to detail, an analytical mindset and follow through to deliver results
  • Ability to manage and prioritize effectively and resolve conflicting priorities
  • High level of computer literacy, specifically Excel and PowerPoint
  • Ability to analyze data sets in Excel, summarize and communicate results
  • Excellent academic background educated to a minimum of degree level or sufficient industry experience
Job Responsibility
Job Responsibility
  • Support the risk assessment process, including the analysis of operational and compliance risks, reviewing global monitoring results and preparation of management metrics and presentations
  • Support the In-Business Risk & Control and Business Management teams to maintain and enhance the control environment and the continuous development of the RCSA content
  • Support the mapping and tracking of Operational Risk Events and Issues impacting the RCSA Program
  • Support the RCSA’s Continuous Risk Management (CRM) Program in maintaining the ongoing identification, assessment and residual risk management of all Operational and Compliance risks and the Key Controls that mitigate them
  • Provide support in execution oversight of the RCSA Program through defined escalation pathways to governance forums on residual risk, new and existing Risk Acceptances, KRI breaches, most significant risks, control Issues, emerging Operational and Compliance Risks impacting business objectives, and on the timeliness and effectiveness of corrective actions taken to improve controls
  • Interact with Markets 1LOD teams, Operational Risk Management, Compliance, Internal Audit and other functions to provide deliverables and business insight
  • Participate as required in ad-hoc reviews and regulatory / supervisory examinations of the Markets business
  • Support other ad-hoc initiatives where required
What we offer
What we offer
  • Generous holiday allowance starting at 27 days plus bank holidays
  • increasing with tenure
  • A discretional annual performance related bonus
  • Private medical insurance packages to suit your personal circumstances
  • Employee Assistance Program
  • Pension Plan
  • Paid Parental Leave
  • Special discounts for employees, family, and friends
  • Access to an array of learning and development resources
  • Fulltime
Read More
Arrow Right

Business Risk and Control Sr Analyst

The Business Risk and Control Sr Analyst is a seasoned professional role. Applie...
Location
Location
Singapore , Singapore
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 5-8 years of experience
  • Experience managing Regulatory Exams, Audits – both Internal and External
  • Familiar with Industry Standards/Certifications, including PCI & ISO
  • Technology Control / IT Risk & Control
  • Strong Program/Project Mgmt skills required – coordination of complex cross-functional exams across geographies
  • Strong interpersonal skills, including the ability to partner with others and deal effectively with multiple projects and changing priorities
  • Strong analytical and problem-solving skills with excellent follow-up and strong attention to detail
  • Exemplary written and oral communication skills required, ability to succinctly synthesize key messages and themes
  • Experience and ease in interfacing with Senior Management
  • Excellent influencing and negotiation skills and ability to work effectively with all levels of the organization as well as geographically disbursed/matrix teams
Job Responsibility
Job Responsibility
  • Coordinate Technology regulatory, audit and Industry certification (PCI/ISO) interaction activities across Asia region, in partnership with Global teams, to ensure consistency and excellence in execution of deliverables
  • Drive the examination process as a lead or support contact/central point of communication with regulators/auditors for examinations and requests – schedule, objectives, etc.
  • Oversee exam preparatory activities and provide feedback to management and the team regarding deliverable request and meeting materials
  • Provide coaching to the management and team in advance of exam meetings to ensure consistency, applicability of the message and the materials meet regulatory request/expectations
  • Lead the collection, review and delivery of all deliverables and follow-up requests required for successful completion of the examination process
  • Responsible for communicating exam status and updates to Senior Management and the team
  • Utilize strong analytical skills to evaluate controls, identify control issues, review project plans and corrective actions to identify missing milestones and tasks
  • Analyze regulatory requirements and help define and/or validate the controls that address these requirements
  • Review relevant regulatory publications and guidelines to determine possible impact on Technology controls and form a view on expectations to be communicated to senior management
  • Provide regional reporting to Senior Management on regulatory/audit focus areas, themes and trends and items for escalation
  • Fulltime
Read More
Arrow Right

Vp business risk analyst

VP Business Risk Analyst position in Citi Global Markets focusing on 1st Line of...
Location
Location
Singapore , Singapore
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 5+ years experience in Front Office controls testing, internal audit, external audit, independent control reviews, or similar disciplines
  • Understanding of Markets business activities and associated regulations
  • Knowledge of Markets Operational and Compliance risks, and related controls, associated with trading and sales activities
  • Strong understanding of control design assessment and effectiveness testing techniques and practices
  • Experience of coaching and developing team members
  • Experience of overseeing a team to deliver rigor and attention to detail in execution
  • Experience of developing and maintaining effective senior stakeholder relationships
  • Track record of providing constructive, effective challenge to Senior Stakeholders on risk management matters
  • Bachelor/university education preferred
Job Responsibility
Job Responsibility
  • Executing and reporting results of control testing
  • Supervising and coaching junior team members in execution of control testing
  • Monitoring execution of parts of the testing programme to agreed timelines, escalating and resolving obstacles to delivery
  • Maintaining high standards and best practice for execution of testing activities
  • Providing challenge to stakeholders on the design and effectiveness of controls
  • Supporting stakeholders in determining necessary control remediation identified through the testing programme
  • Maintaining strong stakeholder relationships across Front Office, Markets Conduct Risk, Compliance and Operational Risk
  • Presenting impactful summary outputs from the testing programme to stakeholders
  • Providing Markets controls subject matter expertise to stakeholders across all three lines of defence
  • Fulltime
Read More
Arrow Right