Wanted GRC Consultant, Navi Mumbai

Information technology Auditor with 2 to 3 years of experience.
Capability to understand and assess IT applications, underlying infrastructure and the
controls.
Ability to identify the audit assignment scope, audit approach and critical audit
areas/processes and key control risks.
Execute audit in line with approved audit plan to identify processes and control weakness
and suggest improvements in line with best practices.
Discuss and agree with stakeholders the identified audit risk/control gaps and opportunities
for improvements and obtain management concurrence.
Draft audit reports describing the control, gaps, risk and recommendations for improvement
in an appropriate language.
Assist in internal projects, conduct reviews or participate in special assignments such as
system development/integration projects and identify risk/control gaps, and recommend
opportunities for improvement in line with best practices.
Participate in Business Development Activities for technology Audit Services for the firm by
understanding requirements, estimating efforts and drafting of work/proposals.
Knowledge, Skills and Experience.
Bachelor s degree in Computer Science/Information Technology/Information Security or any
related discipline.
Knowledge of information Security domains VIZ, Cyber Security, Information Risk
Management, Third Party Risk Management, Vulnerability Management and Information
Security governance.
ISO27001LA/CISA/CISSP certifications would be an added advantage.
Good Communication Skills, both oral and written
Positive and Professional approach.