This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
An opportunity has arisen with in fast growing fintech business that works with global pharmaceutical and bio medical organisation for someone to join their Governance, Risk and Compliance team in a broad assurance/Audit role to help them build and design their own internal programme. This is a very hands-on role with the potential to build a global team long term.
Job Responsibility:
Managing Internal, External and Client Audits
Management and implementation of multiple existing and new compliance Frameworks including but not limited to SOC2, FISMA/NIST, ISO 27001 and 27701
GRC tool management (implementation and operation for multiple compliance frameworks)
Overseeing, planning, designing, and performing all aspects of technology audit coverage and related practices
Planning, leading and executing technology and information security audits in a modern technology stack
Providing credible challenge and professional skepticism to assess potential gaps or weaknesses in the internal control infrastructure
Establishing and maintaining effective business relationships
Employing data-driven approaches
Monitoring the audit schedule and tracking it for the timely completion of audit activities
Monitoring the progress of management’s committed action plans and validating the closure of remediated audit issues and regulatory findings
Reporting to internal partners and executive management as required
Requirements:
5-7 years of IT audit experience
Command of regulatory guidance for technology, cyber, and infosec
Effective communicator who can adjust to the audience
Proven history of accuracy and attention to detail with minimal oversight and errors
Professional designations such as CISA, CISSP, or CIA certification or equivalent are desired but not necessary
Nice to have:
Certified Information Systems Auditor (CISA)
Certified Information Systems Security Professional (CISSP)