Cyber Risk & Reg HI - ITGC Associate 2 - BLR/HYD/KOL
Kolkata (AC) - Bangalore Quay - Bagmane Tech Park (KSDC), India
PwC
We are a community of solvers combining human ingenuity, experience and technology innovation to help organisations build trust and deliver sustained outcomes.Line of Service
AdvisoryIndustry/Sector
Pharma and Life SciencesSpecialism
Business ControlsManagement Level
AssociateJob Description & Summary
At PwC, our people in audit and assurance focus on providing independent and objective assessments of financial statements, internal controls, and other assurable information enhancing the credibility and reliability of this information with a variety of stakeholders. They evaluate compliance with regulations including assessing governance and risk management processes and related controls.In IT audit at PwC, you will focus on helping to assess and evaluate the design and effectiveness of an organisation's IT systems and controls to provide compliance with regulations and mitigate risks.
Driven by curiosity, you are a reliable, contributing member of a team. In our fast-paced environment, you are expected to adapt to working with a variety of clients and team members, each presenting varying challenges and scope. Every experience is an opportunity to learn and grow. You are expected to take ownership and consistently deliver quality work that drives value for our clients and success as a team. As you navigate through the Firm, you build a brand for yourself, opening doors to more opportunities.
Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to:
- Apply a learning mindset and take ownership for your own development.
- Appreciate diverse perspectives, needs, and feelings of others.
- Adopt habits to sustain high performance and develop your potential.
- Actively listen, ask questions to check understanding, and clearly express ideas.
- Seek, reflect, act on, and give feedback.
- Gather information from a range of sources to analyse facts and discern patterns.
- Commit to understanding how the business works and building commercial awareness.
- Learn and apply professional and technical standards (e.g. refer to specific PwC tax and audit guidance), uphold the Firm's code of conduct and independence requirements.
- Working with different engagement teams across PwC network firms. Position reports to the Team Manager / Project Manager.
- Manage the work streams related to IT SOX compliance covering ITGC and IT Dependencies (ITAC, Interfaces, IPE’s).
- Thorough understanding around ITGC domains such as Logical Access, Change Management, SDLC and Computer Operations.
- Exposure of testing IT Application Controls (Configurable, Non-configurable), Interfaces, IPE’s, Data Migration and Platform Reviews.
- Provide technical support in the assessment, design, and implementation of ITGC requirements.
- Review control evidence for adherence to accuracy, completeness, and precision of control execution for all ITGC.
- Develop, implement, and test controls for new acquisitions and in-scope entities
- Work with control owners and operators to ensure quality, consistency, and operability of new and existing controls.
- Collaborate and build long-term relationships with key stakeholders in a fast-paced and matrixed work environment.
- Review test findings, facilitate the remediation of ITGC control gaps, and escalate possible critical issues to senior management within IT.
- Mentors and develops peer and Associates, monitors their work, and takes corrective action when necessary
- Builds and maintains strong peer relationships within the team and across the organization
- Coordinates work with External Auditors.
- Ability to work independently under general supervision with latitude for initiative and independent judgment
- Effective verbal and written communications, including active listening skills
- Ability to establish and maintain effective working relationships with co-workers and external contactors/auditors
- Detail-oriented
- Comfortable working on multiple projects simultaneously
- Individuals would be expected to cultivate a strong team environment and promote a positive working relationship amongst their team.
- Excellent Communication, written and verbal would be expected.
- In addition to being an exceptional individual contributor, manage engagements and relevant Teams allocated for the same.
- Managing predominantly offshore engagements and relevant PwC Territory teams.
- Ensure client service delivery in accordance with the quality guidelines & methodologies.
- Build and maintain client relationships by understanding and being responsive to client needs and ensuring high quality of deliverables.
- Demonstrate strong analytical thinking and communication skills including the ability to research and understand complex processes and effectively communicate them to interested parties
- Develop strong working relationships with the client and onshore client teams.
- Maintain excellent rapport and proactive communication with the stakeholders and client.
- Suggest ideas on improving engagement productivity and identify opportunities for improving client service.
- Ensure compliance with engagement plans and internal quality & risk management procedures.
- Display teamwork, integrity, and leadership. Work with team members to set goals and responsibilities for specific engagements.
- Foster teamwork and innovation.
- Utilize technology & tools to continually learn and innovate, share knowledge with team members and enhance service delivery.
- Conduct workshops and technical training sessions for team members.
- Contribute to the learning & development agenda and knowledge harnessing initiatives.
- Bachelor’s degree in Information Systems, Computer Science Engineering, or Finance Preferred
- B.E., B. TECH, M. TECH, MCA, BCA, CA, MBA
- Experience in technology audit, risk management, compliance, consulting, or information security
- Excellent knowledge of IT General Controls, automated and security controls.
- Knowledge of security measures and auditing practices within various operating systems, databases, and applications
- Experience in auditing financial applications, cyber security practices, privacy, and various infrastructure platforms such as Unix, Linus, Windows, SQL Server, Oracle Databases
- Knowledge and concepts of auditing of cloud platforms (AWS, Azure and Google Cloud)
- Experience designing continuous auditing and monitoring tools and techniques is a plus.
- Good understanding of CoBIT 5 Domains of Access Management, SLDC & Change and Computer Operations and Control Design and Testing of SOX IT General Controls (ITGC) and/or IT Application Controls (ITAC)
- Experience in identifying control gaps and communicating audit findings and control redesign recommendations to Management/Clients
- Knowledge of regulations impacting privacy, integrity, and availability of clients PII.
- Functional knowledge of major ERP suites (like SAP, Dynamics, Oracle EBS)
- Understanding of audit concepts and regulations
- Required overall experience in testing/reviewing and implementation of ITGC controls, CoBit 5 and developing COSO framework
- Candidates with 3-5 years of relevant experience in similar role, preferably with a “Big 4” or equivalent
- Chartered Accountant (would be added advantage)
- CA / CISA / CISM / CRISC / CISSP / ISO 27001 LA certifications
Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:Degrees/Field of Study preferred:Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Accepting Feedback, Accepting Feedback, Active Listening, Artificial Intelligence (AI) Platform, Auditing, Auditing Methodologies, Client Management, Communication, Compliance Program Implementation, Data Analysis and Interpretation, Data Ingestion, Data Modeling, Data Quality, Data Security, Data Transformation, Data Visualization, Emotional Regulation, Empathy, External Audit, Financial Reporting, Generally Accepted Auditing Standards (GAAS), Governance Framework, Inclusion, Information Security, Intellectual Curiosity {+ 17 more}Desired Languages (If blank, desired languages not specified)
Travel Requirements
Not SpecifiedAvailable for Work Visa Sponsorship?
NoGovernment Clearance Required?
NoJob Posting End Date
May 31, 2025* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Artificial Intelligence Audits AWS Azure CISA CISM CISSP Clearance Clearance Required Cloud COBIT Compliance Computer Science CRISC ERP Finance GCP Governance ISO 27001 Monitoring Oracle Privacy Risk management SAP SDLC SOX SQL SQL Server UNIX Windows
Perks/benefits: Career development
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.