IT Audit Specialist

Why PWC

At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other. Learn more about us.

At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm’s growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations.

Purpose of the Job /Role:

Perform IT Assessment Reviews which includes IT General Controls, Internal Audits, Controls Testing, Compliance Reviews (such as ISO 27001, HIPAA, HITRUST etc.) 

Responsibilities: 

• Strong understanding of IT General Controls domains such as Change Management ,User Access Management, IT Operations, Back and Recovery Management etc 

• Strong understanding of the third-party risk management 

• Implementation and assessment knowledge of various industry standards, frameworks, and compliances such as ISO 27001, HIPAA, HITRUST, ISO 22301, ISO 27701 etc 

• Understanding of the IT Risk Assessment methodologies and ability to comprehend and apply the knowledge during IT assessment lifecycle 

• Interview client stakeholders and conducts walkthrough meetings and develop assessment artifacts 

• Should understand complete assessment lifecycle from assessment scoping to project deliverables 

• Great communication skills and the ability to break down and explain complex data security problems 

• Excellent presentation skills and ability to effectively communicate proposals and point of view at senior management levels 

Certifications

• CIA/CISA/CISM will be added advantage 

Mandatory skill sets:

ITGC Reviews, IT Internal Audits, Controls Testing, Compliance Reviews, ISO 27001 Reviews, HIPAA/ HITRUST Reviews 

Preferred skill sets:

ITGC Reviews, IT Internal Audits, Controls Testing, Compliance Reviews, ISO 27001 Reviews, HIPAA/ HITRUST Reviews 

Education qualification:  

• Minimum Qualification: BE/ BTech 

• Postgraduates in any stream would be preferred (not mandatory) 

• Prior Big 4 experience would be an added advantage 

• Experience in IT Risk Advisory/ Assurance for varied industry segments preferred 

• Excellent communication skills - both written and oral