This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Develop and maintain an effective audit and compliance program strategy based on client requirements
Evaluate, interpret, and ensure clarity of contractual audit and compliance obligations and client objectives
Implement and drive governance, risk, and compliance approach to promote ongoing audit readiness and to contribute toward effective IT security hygiene and management of risk
Participate in audit lifecycle including internal/external audits and assessments
Provide oversight and guidance for internal/external audits and assessments
Drive recurring internal assessment of controls environment to ensure compliance with information security policies and established security controls
facilitate remediation
Maintain annual audit calendar for supported client
Maintain IT security controls library and documentation repository for supported client
Coordinate the collection of audit evidence and provide timely responses to support audits and/or assessments from internal/external auditors/assessors
Drive and monitor remediation efforts related to internal/external audit exceptions, findings, and other relevant scope
Coordinate and perform recurring logical access reviews and drive post-review actions
Work with technology teams and internal and external support staff to: Communicate and clarify audit evidence and/or compliance requirements
Socialize audit schedules and manage timelines and due dates
Develop, contribute, and/or improve process, policy, and procedure documentation
Track, maintain, and report on audit program requirements
Maintain alignment with contractual Service Level Agreements related to Audit & Compliance program including support tickets, remediation, and other key measures
Collaborate as part of a cross-functional team to evaluate audit and compliance scope to enable effective onboarding of new clients to the compliance program portfolio
Drive governance and lead effort to enable automation of key Compliance activities via GRC platform including building expertise to fully leverage toolset
Requirements
Ability to self-manage work schedule to ensure timely delivery of audit and compliance services
Ability to drive IT teams and escalate where necessary to ensure timely delivery of audit and compliance services
Solid critical thinking and problem-solving skills
Ability to manage competing priorities and comfortable to work through ambiguity
Minimum 2 years of hands-on information technology operations experience and a strong knowledge of IT security standards and best practices
Minimum of 2 years recent audit experience spanning at least two full cycles of any two of the following: SSAE16 SOC1 Type 2, SSAE16 SOC2 Type 2, SOX, PCI-DSS, HIPPA, ISO/IEC 27001:2005, or similar
Strong understanding and application of IT Security frameworks such as: PCI DSS, ISO/IEC 27001:2005, CIS, HIPAA, NIST 800-53 etc.
Strong understanding of IT general controls
Ability to work within a fast-paced environment within an ITO organization
Strong interpersonal relationship building and business acumen
Nice to have
Strong oral and written communications
Experience working in a matrixed cross-functional environment within a service organization
Experience in a client-facing role
One or more of the following professional certifications: CISA, CISSP, CISM, CRISC, CGEIT, ITIL, GSNA, GRCP, etc.