About This Role
Working as a consultant in technology controls advisory, audit, and assurance, this role involves building and nurturing positive working relationships with Deloitte teams and clients. It suits a professional with a strong orientation toward internal control risk assessment, operational, and IT auditing, who can manage multiple assignments and demonstrate strong people management and networking skills.
Responsibilities
- Identify and evaluate complex business/technological risks, internal controls which mitigate risks, and related opportunities for internal control improvement
- Perform system evaluation and/or audit IT and business process as a part of SOX 404, SSAE 18 or ICFR assessment in accordance with PCAOB/AICPA guidance using Deloitte methodology for whole point
- Perform complete GITC evaluation and testing across IT platform including, operating systems, databases, and network components
- Perform risk assessment for organizations to identify prioritized list of risk/audit
- Perform controls benchmarking to leading internal controls framework to identify gaps and excess controls
- Manage multiple assignments and demonstrate strong people management and networking skills
- Ensure timely completion of activities with quality, complete ownership of deliverables and early escalations to management, if required
- Play substantive/lead role on projects including project planning, economics, and managing quality
- Participate in proposal development efforts
- Assist in technical knowledge development and training efforts
- Demonstrate high level of understanding of internal and external client's business
Requirements
- Bachelor’s degree
- MBA in Finance/Accounting/IT/Information security and or CA/CPA/CIA/CISA/CISSP
- 3-7 years of relevant work experience, with industry focus a plus
- Strong orientation toward internal control risk assessment, operational, and IT auditing
- Hands on experience on testing of GITC controls (Change Management, Access Security, UAR) Test of design (TOD) and test of operating effectiveness (TOE)
- Experience of assessing and reviewing technology risks and controls over areas including access management, change management and computer operations for IT platforms (operating systems, databases, and network components)
- Exposure to any one industry—Financial Services; Technology, Media & Telecom; Life Sciences & Health Care; Energy & Resources; Consumer & Industrial Products
- Demonstrate MS office proficiency, problem solving and analytical skills, and strong verbal and written communication skills
- Ability to prioritize tasks, work on multiple assignments, manage ambiguity, and work independently or as part of a team with professionals at all levels
