Manager/ Senior Manager, SOX ITGC

Key Responsibilities

• Assisting Senior Team in engagement scoping, planning and reporting of SOX ITGC projects.
• Planning and allocating resources in accordance with skills and schedules required for the project engagements.
• Setting work priorities, tracking work progress and coordinating with internal and external Stakeholders to ensure timely completion of various engagements along-with quality deliverables within the baseline budget.
• Scheduling and conducting regular project status meetings with internal and external stakeholders.
• Ensuring that SOX ITGC assessments are in accordance with the PCAOB (Public Company Accounting Oversight Board) Auditing Standards.
• Addressing and promptly resolving any project issues and other operational issues.
• Reviewing/updating and ensuring high quality deliverables including work papers and reports.
• Maintaining all engagement related documentation and work papers.
• Managing the internal SOX ITGC Team and ensuring their high motivation and optimal performance.
• Managing team development activities such as training and on-job shadowing.
• Team performance feedbacks and appraisals.

Core Competencies

• Good knowledge of various control areas of IT General Controls, IT Application Controls and Automated Controls, and how they impact the control environment.
• Knowledge of COSO, COBIT, NIST CSF and NIST SP 800-53, SOX, J-SOX etc. frameworks.
• Broad background of Information Security engineering concepts.
• Knowledge of security measures and auditing practices within various operating systems, networks, firewalls, databases and applications.
• Experience in identifying control gaps and communicating audit findings and control redesign recommendations to Sr. Management and Clients.
• Knowledge of Business Continuity and Disaster Recovery best practices.
• Knowledge of regulations impacting the privacy, integrity and availability of customer PII or PHI.
• Prior experience in managing/leading a Team of IT Auditors/IT Security Analysts.
• Proven track record of successful and on-time delivery of IT Security Assessment and IT Audit engagements/projects.
• Knowledge of waterfall and agile project management concepts and experience in project management.

Additional Competencies

• Exposure to SSAE 18 SOC1 & SOC2 and/or PCI DSS and/or HIPAA Audits.
• CEH, CISSP or any other Cybersecurity training or certification.
• Experience in using Project Management tools such as MS-Project, Jira, Confluence, Smartsheet etc.