628 Cobit Jobs - Page 8

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Risk Consulting - Protect Tech – Senior (IT audit – General skills) No. of positions (India): 4 Key Responsibilities Your key responsibilities will include: Consistently deliver quality client services. Drive high-quality work products within expected timeframes and on budget. Monitor progress manage risk and ensure key stakeholders are kept informed about progress and expected outcomes. Foster relationships with client personnel to analyse, evaluate, and enhance information systems to develop and improve security at procedural and technology levels. Use knowledge of the current IT environment and industry trends to identify engagement and client service issues and communicate this information to the engagement team and client management through written correspondence and verbal presentations. Stay abreast of current business and industry trends relevant to the client's business. Demonstrate deep technical capabilities and professional knowledge. Demonstrate ability to quickly assimilate to new knowledge. Skills And Attributes For Success You will leverage your proven track record of IT Audit experience and strong personal skills, to effectively deliver quality results in the assessment, design, and support implementation of controls, security and IT risk solutions. To qualify for the role, you must have A bachelor’s or master’s degree and approximately 3-6 years of related work experience At least 2-4 years of experience in IT Risk and Compliance Design IT Risk Controls framework such as IT SOX Implementation and Testing of internal controls such as IT general controls, IT application controls, IPE related controls, interface controls etc Identify control gaps, weaknesses and areas of improvements. Conducting IT internal control reviews, and review of SOC1 or SOC2 reports Knowledge of IT risk, information security or cyber security frameworks such as COSO, COBIT, ISO, NIST etc IT Compliance and regulatory assessments – IT Risk and Controls assessment with exposure of any of the technologies such as SAP, Oracle, Workday, MS Dynamics or emerging technologies such as Cloud, RPA, AI/ML IT Infrastructure and Architecture risk assessments including data quality and data migration reviews, data privacy reviews, OS DB reviews etc Strong exposure working in client facing roles, collaborate with cross functional teams including internal audits, IT security and business stakeholders to assess control effectiveness and facilitate remediation activities. Excellent communication, documentation and report writing skills. Good to have relevant industry certifications such as CISA, CISM, CISSP, CRISC, CCSK, ISO 27001, and others (as relevant) EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Risk Consulting - Protect Tech – Senior (IT audit – General skills) No. of positions (India): 4 Key Responsibilities Your key responsibilities will include: Consistently deliver quality client services. Drive high-quality work products within expected timeframes and on budget. Monitor progress manage risk and ensure key stakeholders are kept informed about progress and expected outcomes. Foster relationships with client personnel to analyse, evaluate, and enhance information systems to develop and improve security at procedural and technology levels. Use knowledge of the current IT environment and industry trends to identify engagement and client service issues and communicate this information to the engagement team and client management through written correspondence and verbal presentations. Stay abreast of current business and industry trends relevant to the client's business. Demonstrate deep technical capabilities and professional knowledge. Demonstrate ability to quickly assimilate to new knowledge. Skills And Attributes For Success You will leverage your proven track record of IT Audit experience and strong personal skills, to effectively deliver quality results in the assessment, design, and support implementation of controls, security and IT risk solutions. To qualify for the role, you must have A bachelor’s or master’s degree and approximately 3-6 years of related work experience At least 2-4 years of experience in IT Risk and Compliance Design IT Risk Controls framework such as IT SOX Implementation and Testing of internal controls such as IT general controls, IT application controls, IPE related controls, interface controls etc Identify control gaps, weaknesses and areas of improvements. Conducting IT internal control reviews, and review of SOC1 or SOC2 reports Knowledge of IT risk, information security or cyber security frameworks such as COSO, COBIT, ISO, NIST etc IT Compliance and regulatory assessments – IT Risk and Controls assessment with exposure of any of the technologies such as SAP, Oracle, Workday, MS Dynamics or emerging technologies such as Cloud, RPA, AI/ML IT Infrastructure and Architecture risk assessments including data quality and data migration reviews, data privacy reviews, OS DB reviews etc Strong exposure working in client facing roles, collaborate with cross functional teams including internal audits, IT security and business stakeholders to assess control effectiveness and facilitate remediation activities. Excellent communication, documentation and report writing skills. Good to have relevant industry certifications such as CISA, CISM, CISSP, CRISC, CCSK, ISO 27001, and others (as relevant) EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Risk Consulting - Protect Tech – Senior (IT audit – General skills) No. of positions (India): 4 Key Responsibilities Your key responsibilities will include: Consistently deliver quality client services. Drive high-quality work products within expected timeframes and on budget. Monitor progress manage risk and ensure key stakeholders are kept informed about progress and expected outcomes. Foster relationships with client personnel to analyse, evaluate, and enhance information systems to develop and improve security at procedural and technology levels. Use knowledge of the current IT environment and industry trends to identify engagement and client service issues and communicate this information to the engagement team and client management through written correspondence and verbal presentations. Stay abreast of current business and industry trends relevant to the client's business. Demonstrate deep technical capabilities and professional knowledge. Demonstrate ability to quickly assimilate to new knowledge. Skills And Attributes For Success You will leverage your proven track record of IT Audit experience and strong personal skills, to effectively deliver quality results in the assessment, design, and support implementation of controls, security and IT risk solutions. To qualify for the role, you must have A bachelor’s or master’s degree and approximately 3-6 years of related work experience At least 2-4 years of experience in IT Risk and Compliance Design IT Risk Controls framework such as IT SOX Implementation and Testing of internal controls such as IT general controls, IT application controls, IPE related controls, interface controls etc Identify control gaps, weaknesses and areas of improvements. Conducting IT internal control reviews, and review of SOC1 or SOC2 reports Knowledge of IT risk, information security or cyber security frameworks such as COSO, COBIT, ISO, NIST etc IT Compliance and regulatory assessments – IT Risk and Controls assessment with exposure of any of the technologies such as SAP, Oracle, Workday, MS Dynamics or emerging technologies such as Cloud, RPA, AI/ML IT Infrastructure and Architecture risk assessments including data quality and data migration reviews, data privacy reviews, OS DB reviews etc Strong exposure working in client facing roles, collaborate with cross functional teams including internal audits, IT security and business stakeholders to assess control effectiveness and facilitate remediation activities. Excellent communication, documentation and report writing skills. Good to have relevant industry certifications such as CISA, CISM, CISSP, CRISC, CCSK, ISO 27001, and others (as relevant) EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Risk Consulting - Protect Tech – Senior (IT audit – General skills) No. of positions (India): 4 Key Responsibilities Your key responsibilities will include: Consistently deliver quality client services. Drive high-quality work products within expected timeframes and on budget. Monitor progress manage risk and ensure key stakeholders are kept informed about progress and expected outcomes. Foster relationships with client personnel to analyse, evaluate, and enhance information systems to develop and improve security at procedural and technology levels. Use knowledge of the current IT environment and industry trends to identify engagement and client service issues and communicate this information to the engagement team and client management through written correspondence and verbal presentations. Stay abreast of current business and industry trends relevant to the client's business. Demonstrate deep technical capabilities and professional knowledge. Demonstrate ability to quickly assimilate to new knowledge. Skills And Attributes For Success You will leverage your proven track record of IT Audit experience and strong personal skills, to effectively deliver quality results in the assessment, design, and support implementation of controls, security and IT risk solutions. To qualify for the role, you must have A bachelor’s or master’s degree and approximately 3-6 years of related work experience At least 2-4 years of experience in IT Risk and Compliance Design IT Risk Controls framework such as IT SOX Implementation and Testing of internal controls such as IT general controls, IT application controls, IPE related controls, interface controls etc Identify control gaps, weaknesses and areas of improvements. Conducting IT internal control reviews, and review of SOC1 or SOC2 reports Knowledge of IT risk, information security or cyber security frameworks such as COSO, COBIT, ISO, NIST etc IT Compliance and regulatory assessments – IT Risk and Controls assessment with exposure of any of the technologies such as SAP, Oracle, Workday, MS Dynamics or emerging technologies such as Cloud, RPA, AI/ML IT Infrastructure and Architecture risk assessments including data quality and data migration reviews, data privacy reviews, OS DB reviews etc Strong exposure working in client facing roles, collaborate with cross functional teams including internal audits, IT security and business stakeholders to assess control effectiveness and facilitate remediation activities. Excellent communication, documentation and report writing skills. Good to have relevant industry certifications such as CISA, CISM, CISSP, CRISC, CCSK, ISO 27001, and others (as relevant) EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

Job Description #KGS We are recruiting for Assistant Manager / Manager in the Technology M&A team. In this role you would leading small to medium sized engagements (technology due diligence, post-merger integrations, carve outs) and being the day to day support for clients on these engagements. You will work closely alongside Senior Managers/Directors on delivery of multiple projects simultaneously. Your responsibilities will include Due Diligence Analyzing target data to build up a view on the technology of the business including cost, products and systems, and IT contracts Finding risks in Target’s IT environment, remediations and associated costs Condensing the data and explaining findings to other team members, highlighting the impact of technology on the business strategy, operations, and ultimately, deal valuation Developing an understanding of IT benchmark and qualitative information to provide insights to clients to describe a typical IT function Assisting and leading client communications, calls and meetings Contributing content for sections of IT reports/deliverables Integration and Separation Advising clients and managing all client communications on all technology aspects of integration, separation (carve outs) and optimization initiatives (e.g. synergy analysis) including the development of target operating models, understanding the current IT landscape, defining transitional service agreements, developing detailed plans, and supporting the implementation of such plans. Leading the technology workstream in integrations and separations within a larger team of Integration & Separation colleagues to fulfil their workstream objectives Facilitating and leading key client workshops and meetings Identifying, reviewing, or calculating client synergies for IT within a larger team Wider Responsibilities Business development, ensuring high chargeability of the KGS team Project Management, including work allocations, guiding and reviewing quality of work of junior project team members People management, managing the performance of junior staff members through coaching and mentoring Interacting with senior client stakeholders as well as internal stakeholders (KPMG Partners and Directors) Supporting the growth of the team through development of new propositions and initiatives Ensuring engagement management protocols are followed and kept up to date including quality and risk management When you are not working on a project, you will provide support to senior colleagues in a number of different aspects such as preparation of proposal materials, development of propositions Job Requirements Mandatory Skills MBA / Bachelor’s degree in a related field from an accredited college/university preferably with major in Technology 6 to 10 years of experience in M&A IT Integration and Separation / IT strategy / IT due diligence / solution architecture / IT project management Good overall understanding of the following areas with specialist knowledge of at least one Application Support & Maintenance Network & Data Center Operations Management Software Development Life Cycle Service Management Cyber Security End user computing Disaster Recovery/Business Continuity Cloud-based Deployment Models (e.g., Infrastructure-as-a- Service) Software Asset Management/Compliance Infrastructure Optimization (e.g., consolidation, rationalization, cost savings) Service Level Definition and Agreements / IT Scorecard and Metrics Enterprise Resource Planning Technology certifications such as ITIL, AWS, Azure, GCP, TOGAF, COBIT, CISSP, COMPTIA etc. would be a plus Knowledge about enterprise business applications (e.g. ERP, CRM) Experience in assisting with technology assessment/diligence Preferred Skills A good understanding of, or preferably a background in, an M&A environment IT specialization such as: IT strategy, applications, infrastructure, architecture, cyber security Experience in facilitating client meetings, workshops and interviews Project management experience and track record of successful delivery of projects Comfort with ambiguity, fluid consulting situations and a highly pressured environment as characteristic of transactions Ability to work well under pressure, learn quickly and leverage skills in new situations Ability to travel at a moderate level Show more Show less

Information security standards ISO 27001, ISO 31000 risk management standards, ISO 22301, CISA (certified information systems auditor), CISM/CISSP/CEH/CIPP-E / CIPP -US /CCIE/CCNA/ COBIT/SOX/ SSAE18, CISM etc Advanced Networking principles/ software engineering principles/ information security principles, Additional knowledge and domain expertise specific to the job profile. (knowledge of information security management, auditing skills, network/systems/application security) Strategic Planning, Technology trends, Customer expectations Consolidate and provide inputs regarding activities that have budget/resource in order to help budget decisions Knowledge on Change management, incident management Analytical ability, Good Communication, Networking, Interpersonal Skills, Presentation skills Communication, interpersonal skills, motivation skills, team management, processes and methodologies Customer interfacing and negotiation skills Project management Show more Show less

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. Senior Security Consultant Today’s world is fueled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of almost 950 people who collaborate to support the business of EY by protecting EY and client information assets! Our Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond to security events as they happen. Together, the efforts of our dedicated team help protect the EY brand and build client trust. Within Information Security we blend risk strategy, digital identity, cyber defense, application security and technology solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting and enabling the business through innovative, secure solutions that provide speed to market and business value. The opportunity As a Security Consultant, the individual will provide security guidance to internal IT project teams responsible for delivering business solutions, with a focus on end user technology and related solutions. They will identify and prioritize security-related requirements, promote secure-by-default designs and ensure information systems and infrastructure will be secured throughout the system development life cycle (SDLC) in an agile environment. Your Key Responsibilities The successful candidate is expected to perform risk assessments of mobile applications, mobile and desktop end user technology platforms, infrastructure systems and solutions; effectively articulate findings and recommendations to internal customers and management; and they will be expected to work on multiple projects and tasks concurrently. Skills And Attributes For Success Solid understanding of key security and privacy issues, risks and threats, and ability to apply this expertise across business needs via internal consulting and security risk assessment types of activities. Strong written and verbal communication skills are essential Proven background in IT risk assessments, and knowledge of good security practices and controls used in applications and infrastructure. Translate technical vulnerabilities and security risks into business risk terminology for business units and recommend corrective actions to customers and project stakeholders. Ability to document and produce important artefacts on risk assessments, engagement Statements of Work, process, minimum security baselines and presentations on security risks. Manage customer expectations and deliver quality security consulting services while balancing business objectives with security requirements. Ability to partner with technical teams in a practical manner when conflicting interests arise while preserving EY core security principles and policies. Ability to proactively lead, own and research security related subject matters when required to take a position or resolve issues. Ability to collaborate to facilitate and enhance the understanding & compliance to security policies. To qualify for the role, you must have A minimum of 8-10 years of experience in an Information Security or Information Technology subject area. Two or more years of experience with iOS and Android security such as mobile application security analysis, mobile application penetration testing, mobile threat modelling, mobile device forensics, and assessing mobile device security capabilities. Three or more years of experience with understanding and defining good security practices for end user technology platforms (e.g., iOS, Android, macOS, Windows 10), multi-tier information systems, applications (e.g., web, mobile, desktop), and End Point Security solutions. Working experience in performing security risk assessments for information systems and applications such as those for web, desktop, and mobile. Develop appropriate risk treatment and mitigation options to address security risks identified during security reviews or risk assessments. Good interpersonal, communication, organizational and project management skills. Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change. Ideally,you will also have One or more years of experience with iOS and Android mobile application development, Agile Methodology, Continuous Integration / Continuous Delivery, and IoT security. Knowledge or experience with Microsoft Azure cloud technology stack (e.g., M365, SharePoint, OneDrive for Business, Intune, Conditional Access) and Azure cloud applications. Knowledge of common information security standards and risk analysis methodologies, such as: ISO 27001/27002, NIST, PCI, COBIT, ISF IRAM2, and OWASP. What We Look For We look for people who are customer-centric with good interpersonal, communication and organizational skills. The ideal candidate will have flexibility in adjusting to multiple demands, shifting priorities, ambiguity, rapid change, and an ardent desire to learn. What We Offer As part of this role, you will work in a highly coordinated, globally diverse team with the opportunity and tools to grow, develop and drive your career forward. Here, you can combine global opportunity with flexible working. The EY benefits package goes above and beyond too, focusing on your physical, emotional, financial, and social well-being. Your recruiter can talk to you about the benefits available in your country. Here is a snapshot of what we offer: Continuous learning: You will develop the mindset and skills to navigate whatever comes next. Success as defined by you: We will provide the tools and flexibility, so you can make a significant impact, your way. Transformative leadership: We will give you the insights, coaching and confidence to be the leader the world needs. Diverse and inclusive culture: You will be accepted for who you are and empowered to use your voice to help others find theirs. EY | Building a better working world EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets. Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow. EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories. Show more Show less

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. Senior Security Consultant Today’s world is fueled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of almost 950 people who collaborate to support the business of EY by protecting EY and client information assets! Our Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond to security events as they happen. Together, the efforts of our dedicated team help protect the EY brand and build client trust. Within Information Security we blend risk strategy, digital identity, cyber defense, application security and technology solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting and enabling the business through innovative, secure solutions that provide speed to market and business value. The opportunity As a Security Consultant, the individual will provide security guidance to internal IT project teams responsible for delivering business solutions, with a focus on end user technology and related solutions. They will identify and prioritize security-related requirements, promote secure-by-default designs and ensure information systems and infrastructure will be secured throughout the system development life cycle (SDLC) in an agile environment. Your Key Responsibilities The successful candidate is expected to perform risk assessments of mobile applications, mobile and desktop end user technology platforms, infrastructure systems and solutions; effectively articulate findings and recommendations to internal customers and management; and they will be expected to work on multiple projects and tasks concurrently. Skills And Attributes For Success Solid understanding of key security and privacy issues, risks and threats, and ability to apply this expertise across business needs via internal consulting and security risk assessment types of activities. Strong written and verbal communication skills are essential Proven background in IT risk assessments, and knowledge of good security practices and controls used in applications and infrastructure. Translate technical vulnerabilities and security risks into business risk terminology for business units and recommend corrective actions to customers and project stakeholders. Ability to document and produce important artefacts on risk assessments, engagement Statements of Work, process, minimum security baselines and presentations on security risks. Manage customer expectations and deliver quality security consulting services while balancing business objectives with security requirements. Ability to partner with technical teams in a practical manner when conflicting interests arise while preserving EY core security principles and policies. Ability to proactively lead, own and research security related subject matters when required to take a position or resolve issues. Ability to collaborate to facilitate and enhance the understanding & compliance to security policies. To qualify for the role, you must have A minimum of 8-10 years of experience in an Information Security or Information Technology subject area. Two or more years of experience with iOS and Android security such as mobile application security analysis, mobile application penetration testing, mobile threat modelling, mobile device forensics, and assessing mobile device security capabilities. Three or more years of experience with understanding and defining good security practices for end user technology platforms (e.g., iOS, Android, macOS, Windows 10), multi-tier information systems, applications (e.g., web, mobile, desktop), and End Point Security solutions. Working experience in performing security risk assessments for information systems and applications such as those for web, desktop, and mobile. Develop appropriate risk treatment and mitigation options to address security risks identified during security reviews or risk assessments. Good interpersonal, communication, organizational and project management skills. Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change. Ideally,you will also have One or more years of experience with iOS and Android mobile application development, Agile Methodology, Continuous Integration / Continuous Delivery, and IoT security. Knowledge or experience with Microsoft Azure cloud technology stack (e.g., M365, SharePoint, OneDrive for Business, Intune, Conditional Access) and Azure cloud applications. Knowledge of common information security standards and risk analysis methodologies, such as: ISO 27001/27002, NIST, PCI, COBIT, ISF IRAM2, and OWASP. What We Look For We look for people who are customer-centric with good interpersonal, communication and organizational skills. The ideal candidate will have flexibility in adjusting to multiple demands, shifting priorities, ambiguity, rapid change, and an ardent desire to learn. What We Offer As part of this role, you will work in a highly coordinated, globally diverse team with the opportunity and tools to grow, develop and drive your career forward. Here, you can combine global opportunity with flexible working. The EY benefits package goes above and beyond too, focusing on your physical, emotional, financial, and social well-being. Your recruiter can talk to you about the benefits available in your country. Here is a snapshot of what we offer: Continuous learning: You will develop the mindset and skills to navigate whatever comes next. Success as defined by you: We will provide the tools and flexibility, so you can make a significant impact, your way. Transformative leadership: We will give you the insights, coaching and confidence to be the leader the world needs. Diverse and inclusive culture: You will be accepted for who you are and empowered to use your voice to help others find theirs. EY | Building a better working world EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets. Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow. EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories. Show more Show less

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. Senior Security Consultant Today’s world is fueled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of almost 950 people who collaborate to support the business of EY by protecting EY and client information assets! Our Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond to security events as they happen. Together, the efforts of our dedicated team help protect the EY brand and build client trust. Within Information Security we blend risk strategy, digital identity, cyber defense, application security and technology solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting and enabling the business through innovative, secure solutions that provide speed to market and business value. The opportunity As a Security Consultant, the individual will provide security guidance to internal IT project teams responsible for delivering business solutions, with a focus on end user technology and related solutions. They will identify and prioritize security-related requirements, promote secure-by-default designs and ensure information systems and infrastructure will be secured throughout the system development life cycle (SDLC) in an agile environment. Your Key Responsibilities The successful candidate is expected to perform risk assessments of mobile applications, mobile and desktop end user technology platforms, infrastructure systems and solutions; effectively articulate findings and recommendations to internal customers and management; and they will be expected to work on multiple projects and tasks concurrently. Skills And Attributes For Success Solid understanding of key security and privacy issues, risks and threats, and ability to apply this expertise across business needs via internal consulting and security risk assessment types of activities. Strong written and verbal communication skills are essential Proven background in IT risk assessments, and knowledge of good security practices and controls used in applications and infrastructure. Translate technical vulnerabilities and security risks into business risk terminology for business units and recommend corrective actions to customers and project stakeholders. Ability to document and produce important artefacts on risk assessments, engagement Statements of Work, process, minimum security baselines and presentations on security risks. Manage customer expectations and deliver quality security consulting services while balancing business objectives with security requirements. Ability to partner with technical teams in a practical manner when conflicting interests arise while preserving EY core security principles and policies. Ability to proactively lead, own and research security related subject matters when required to take a position or resolve issues. Ability to collaborate to facilitate and enhance the understanding & compliance to security policies. To qualify for the role, you must have A minimum of 8-10 years of experience in an Information Security or Information Technology subject area. Two or more years of experience with iOS and Android security such as mobile application security analysis, mobile application penetration testing, mobile threat modelling, mobile device forensics, and assessing mobile device security capabilities. Three or more years of experience with understanding and defining good security practices for end user technology platforms (e.g., iOS, Android, macOS, Windows 10), multi-tier information systems, applications (e.g., web, mobile, desktop), and End Point Security solutions. Working experience in performing security risk assessments for information systems and applications such as those for web, desktop, and mobile. Develop appropriate risk treatment and mitigation options to address security risks identified during security reviews or risk assessments. Good interpersonal, communication, organizational and project management skills. Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change. Ideally,you will also have One or more years of experience with iOS and Android mobile application development, Agile Methodology, Continuous Integration / Continuous Delivery, and IoT security. Knowledge or experience with Microsoft Azure cloud technology stack (e.g., M365, SharePoint, OneDrive for Business, Intune, Conditional Access) and Azure cloud applications. Knowledge of common information security standards and risk analysis methodologies, such as: ISO 27001/27002, NIST, PCI, COBIT, ISF IRAM2, and OWASP. What We Look For We look for people who are customer-centric with good interpersonal, communication and organizational skills. The ideal candidate will have flexibility in adjusting to multiple demands, shifting priorities, ambiguity, rapid change, and an ardent desire to learn. What We Offer As part of this role, you will work in a highly coordinated, globally diverse team with the opportunity and tools to grow, develop and drive your career forward. Here, you can combine global opportunity with flexible working. The EY benefits package goes above and beyond too, focusing on your physical, emotional, financial, and social well-being. Your recruiter can talk to you about the benefits available in your country. Here is a snapshot of what we offer: Continuous learning: You will develop the mindset and skills to navigate whatever comes next. Success as defined by you: We will provide the tools and flexibility, so you can make a significant impact, your way. Transformative leadership: We will give you the insights, coaching and confidence to be the leader the world needs. Diverse and inclusive culture: You will be accepted for who you are and empowered to use your voice to help others find theirs. EY | Building a better working world EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets. Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow. EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories. Show more Show less

Technical Strong experience in review of guideline defined, conducting regulatory assessments for BFSI (E.g. RBI, SEBI, IRDAI). Global guidelines knowledge which includes NIST, ISO27001, PCI-DSS, COBIT, etc. Assisting in remediating gaps on the defined guidelines for the client. Performing System Audit and conducting technology landscape review. Having worked on Information Technology Risk Assessment areas such as NIST, ISO27001, PCI-DSS, COBIT, etc. Experience of handling IT audits and reviews. Good understanding on technology topics related to cyber security, encryption, architecture resiliency , business continuity, disaster recovery, IT Governance, Third party outsourcing risk and information security/technology risk. Certification - CISA, CISSP, ISO27001 Soft Skills Good presentation and report writing skills is mandatory. Excellent communication skills and confident demeanor Experience of working with client stakeholders Good problem-solving skills. Specially for Managers Experience of writing proposal and responding to RFP’s Handling team of 4-5 people Profiles from consulting background to be preferred.

About the Role We are seeking a proactive and detail-oriented Associate GRC (Governance, Risk & Compliance) Consultant to join our growing team in Mumbai . As an Associate Consultant, you will assist in delivering GRC-related services to clients across various industries, supporting risk management, regulatory compliance, and governance frameworks. Key Responsibilities Assist in conducting risk assessments, compliance reviews, and internal control evaluations. Support the implementation and maintenance of GRC tools and platforms. Assist in documenting policies, procedures, and control frameworks (e.g., ISO 27001, SOC 2, GDPR, HIPAA, etc.). Participate in client meetings, gather requirements, and help design and implement effective risk mitigation strategies. Conduct gap assessments and help prepare audit and regulatory readiness documentation. Monitor changes in regulatory and risk landscapes and assist in updating risk registers and compliance matrices accordingly. Collaborate with cross-functional teams, including IT, operations, and legal, to support GRC initiatives. Prepare reports, dashboards, and presentations for internal and client use. Required Qualifications & Skills Bachelor's degree in Information Security, Computer Science, Management, or a related field. 1–3 years of relevant experience in GRC, risk management, audit, compliance, or cybersecurity domains. Familiarity with frameworks such as ISO 27001, NIST, COBIT, SOX, PCI DSS, etc. Understanding of GRC tools (e.g., RSA Archer, MetricStream, ServiceNow GRC, etc.) is a plus. Strong analytical, problem-solving, and communication skills. Ability to handle multiple tasks and adapt in a fast-paced client-facing environment. Relevant certifications (optional but desirable): ISO 27001 LA/LI, CISA, CRISC, or similar. Urgent joining preferred. Show more Show less

Job Description Manager - Data Protection Manager – Data Protection Officer (F/M) Location: Mumbai About Organisation At Worldline, our technology addresses persistent challenges of the payment world. We’ve established ourselves as a leading developer of creative software solutions for enabling the cashless society. If you are an authoritative Delivery Manager, then get ready to join our company. We have many hardworking and dedicated peers that would love for you to work with them. We are committed to continuous improvement. We are always looking for new and innovative ways to improve quality, reduce costs, build excellent solutions, and grow customer satisfaction. We are looking for an organized, creative, process driven colleague to be welcomed to our team. The Opportunity Worldline’s Merchant Services Global Business Line is a major international player in end-to-end Commercial Acquiring, Multichannel Payment Acceptance and Payment Terminal solutions. Merchant Services’ unique combination of payment, digital and transactional expertise allows merchants to boost sales and enhance the customer experience. We cover the full retail value chain, online and in-store, through a complete approach, delivering a real digital journey for retailers and their customers and facilitating consumer engagement, via seamless services, on any device – with payment at the heart of the shopping experience. Such activities require sound IT security practices and are subject to regulatory requirements, such as for example sensitive date protection or monitoring merchant accounts for activity that might be linked to money laundering or terrorist financing More Reasons To Join Us In addition to joining a global leader in digital transformation, you can also expect an excellent range of benefits. These include: a rewarding salary, 25 days’ annual leave, private medical insurance, an attractive pension scheme plus many more. We also operate a flexible benefits scheme, allowing you to purchase discounted products and services. What’s more, we really value your progress and it’s a top priority to engage, encourage and develop you to help you maximise your potential. In fact, we have comprehensive training and development programmes in place demonstrating our commitment to developing your career. Our success comes from strong skills, new ideas, diverse points of view and the energy of all women and men from Worldline. Not only do they represent our Human Capital, but they are also key players in our success. We make leading our talents a major asset in the success of our business. Y Our Day-to-day Responsibilities Include Reporting line: reporting to the Head Compliance MS – India. Must be conversant with DPDP Act, 2023. Knowledge/exposure to GDPR will be added benefit Good understanding of the basic frameworks relating to Information security, IT Risk and Compliance such as COBIT, COSO Frameworks, PCI Frameworks etc will be a strong positive Prepare policies, procedures, checklists and oversight material for Data Protection and Data Privacy management Monitor compliances to various Data protection, Data privacy regulations/statutory requirements at an enterprise level Providing guidance to the 1st line security organization in specific area of data protection and data privacy. Review arrangements entered by business from perspective of Data privacy and Data protection Review internal processes, information assets and databases from perspective of Data privacy and Data protection compliances Skills We’d Like Bachelor/Master in IT, IT Security, Engineering or equivalent Certificate in security (e.g. CISA, CISM, CRISC, CISSP, CIPP) is a strong plus Minimum 5-10 years of experience in information security, security risk management and/or cyber security Proven knowledge of relevant security frameworks (ISO27001, PCI) Knowledge of the payment industry is a plus Excellent analytical skills with eye for detail Excellent communication and presentation skills in English both verbally and written Results driven and persistent Multicultural mindset and flexibility, able to work in an international environment Show more Show less

TCS is conducting in-person interview drive for Hyderabad & Chennai location NOTE: Candidate interested in WALK-IN DRIVE in Hyderabad & Chennai must apply TCS is hosting an In-Person Interview Drive on Saturday, 21st June , we’d like to invite you to join us! This is a great opportunity to explore exciting career opportunities with us and meet our hiring team face-to-face. Role **: GRC Analyst / Consultant Desired Skill Set: C ybersecurity risk assessment, Control testing and Compliance audits Experience Range: 4-10yrs & 10+yrs Joining Location: PAN India Venue : Hyderabad : TCS Synergy Park Phase1 ,Premises No 2-56/1/36, Gachibowli, Opposite IIIT Hyderabad Campus, Seri Lingampally, RR District, Hyderabad, Telangana 500019 Chennai : TCS Siruseri ATL Building- 1/G1, SIPCOT IT Park Navalur, Siruseri, Tamil Nadu 603103 Job Description: Technical: Security Framework Alignment and Related Controls Testing (NIST, CoBIT, ISO 27001) SOX Testing for IT Controls IT Compliance audits Vendor Risk Assessments Contribute to documentation of Information Security Policies, Standards, Processes, and Procedures. Manage and perform cybersecurity assessments on emerging/ongoing business initiatives, third-party services Evaluate third-party products/services by reviewing standardized questionnaires, evidencing their controls Non-Technical: Analytical thinker Collaborative team player Eexcellent written and verbal communication Capable of bridging the gap between business demands and cybersecurity requirements Ability to articulate cybersecurity risks in business terms Demonstrable knowledge of information security standards, data security practices and procedures Understanding of the impact of various data protection and integrity controls, operating systems and network security controls, authentication controls, and security protocols Requires demonstrable knowledge of security principles to a diverse range of risk scenarios to coordinate acceptable solutions between business needs, technology operations, and information security best practices Good-to-Have Familiarity with GRC Tools (RSA Archer, ServiceNow GRC) Certifications like CISA, CISSP, CISM, CRISC etc. Show more Show less

Location: Vikhroli Experience: 6+ Years Notice Period: Immediate up to 60 days Mandatory Key skills: SAP FICO Consultant, SAP S4/HANA, Accounting (accounts payable, receivable, tax, and treasury systems). We are seeking an accomplished SAP FICO Consultant (Service Manager Finance) to oversee the full lifecycle of finance-related IT service delivery. This role will lead the operational and strategic management of complex SAP environments, including SAP FICO and S/4HANA, while driving seamless global operations and integration across key financial platforms such as accounts payable, receivable, tax, and treasury systems. Required Qualifications: Bachelor's degree in Computer Science, Information Technology, or a related engineering discipline. Minimum of 6 years in IT service delivery, with at least 2–5 years of hands-on experience in SAP Finance (FICO) and S/4HANA. Demonstrated expertise in managing global IT operations and integrating SAP with third-party financial systems (accounts receivable/payable, etc.). Solid understanding of ITSM/ITIL frameworks; certifications such as ITIL, COBIT, or DevOps are advantageous. Awareness of compliance, data security, and governance practices in financial IT ecosystems. Strong capabilities in vendor coordination, stakeholder engagement, and cross-functional collaboration. Key Responsibilities: Ensure seamless day-to-day operations of finance IT services through effective monitoring, timely issue resolution, and performance management. Oversee service delivery and system integration of SAP FICO and S/4HANA with modules related to tax compliance, treasury, and vendor invoice management. Lead ongoing service enhancement initiatives to improve quality, compliance, automation, and scalability. Manage incident, change, and request processes to minimize disruptions and maintain continuity across finance operations. Collaborate with global business teams and internal stakeholders to align IT services with evolving financial process requirements. Track and report on SLAs, OLAs, KPIs, and operational metrics while proactively identifying and addressing risks or service gaps. Serve as a subject matter expert in SAP finance operations and ensure adherence to governance and documentation best practices. Maintain updated service documentation, including SOPs, knowledge bases, and support resources to enable operational efficiency. Support budget planning, cost control, and procurement activities related to finance IT services. Facilitate smooth onboarding of new services by coordinating with solution design teams and ensuring readiness for operational integration. Key Competencies: Deep functional knowledge of SAP finance modules and integration landscapes. Excellent leadership, interpersonal, and communication skills. Strong analytical and problem-solving mindset, with a proactive approach to risk mitigation. Experience in managing service budgets, performance reporting, and cost optimization. Ability to work effectively under pressure in a global, fast-paced enterprise environment Job Types: Full-time, Permanent Pay: ₹1,500,000.00 - ₹3,000,000.00 per year Schedule: Day shift Monday to Friday Ability to commute/relocate: Vikhroli, Mumbai, Maharashtra: Reliably commute or planning to relocate before starting work (Required) Application Question(s): What is your Notice Period? What is your Expected CTC? What is your Current CTC? Education: Bachelor's (Required) Experience: SAP Finance & Controlling: 3 years (Required) SAP S/4HANA: 3 years (Required) Accounts payable: 1 year (Required) Location: Vikhroli, Mumbai, Maharashtra (Required) Work Location: In person

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Cyber Risk and Compliance Consultant - Senior The opportunity This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, designing security and privacy controls, advising client stakeholders, facilitating workshops and supporting business development. Your Key Responsibilities As a Cyber GRC Professional in our Cyber Security practice, you will be occupied in the following domains: a) Strategy, b) Risk, c) Compliance. As part of our team strategy you will be expected to take on responsibility and initiative early, providing you with real experience working with a wide range of major clients in EY. You will be taking responsibility for the quality of your work, while continually developing your personal and professional skills through formal training, hands-on experience and coaching. Skills And Attributes For Success To qualify for the role, you must have: Degree, or equivalent, in Information Security, Cyber Security, Information Technology, Informatics, or other similar and technical areas Evidence of self-motivation to continuously develop in the areas of cybersecurity Good organizational and time management skills with the ability to prioritize and complete multiple complex projects under tight deadlines Ability to translate security issues into business risks Excellent interpersonal skills and ability to work effectively within a team at all hierarchical levels Willingness to research client inquiries and emerging issues, including regulations, industry practices, and new technologies Experience, knowledge and strong interest in information and cyber security domains are essential for this role Experience on Cyber Governance, Risk & Compliance (GRC), Cyber risk assessments & management methodologies Experience on assessing, designing and implementing security strategies, governance frameworks over processes and controls, allowing organisations to optimally manage cyber security Experience on design and implementation of security policies, procedures, standards and controls in line with regulation and/or current standards, such as ISO27001, NIST, SANS etc. Experience in data classification exercises and controls / mechanisms enforcement Working knowledge of control frameworks such as ISO 27001/27002, COBIT, NIST, ITIL, etc. Ability to conduct Security regulatory and compliance assessment independently Hands on with assessment report preparation and presenting to senior technical and business stakeholders Hand on knowledge of excel, PowerPoint and word Articulative and confident in presentation to senior stakeholders Ability to lead workstreams or dedicated portions of projects Cyber maturity assessments, recommendations, roadmap and strategy creation knowledge of use of and risks related to modern and emerging technologies Cybersecurity audit Ability to plan and deliver cyber security training and awareness Ideally, you’ll also have: Security-related qualifications / certifications such as CISSP, SSCP, CISM, ISO27001 lead implementer or auditor, CompTIA Security+, are desirable Experience in Third Party Risk Management (TPRM) and / or vendor risk assessment engagements Experience in design and implementation of Information Security Management Systems (i.e. security policies, procedures and guidelines) according to leading International Standards Security-related vendor / technology certifications are desirable EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today. Show more Show less

Job Description:- Information Security Risk Specialist Experience: 7 to 9 years Location: Bengaluru Key Responsibilities: Develop, implement, and maintain an enterprise-wide information security risk management program. Identify, assess, and document information security risks, ensuring alignment with business objectives. Perform risk assessments, vulnerability analyses, and impact evaluations on IT systems and processes. Collaborate with cross-functional teams to establish risk mitigation strategies and action plans. Monitor, track, and report on risk metrics and key performance indicators (KPIs). Stay updated on regulatory requirements and ensure compliance with standards such as ISO 27001, NIST, GDPR, etc. Develop and maintain comprehensive process documentation and generate reports tailored to the needs of various stakeholders. Drive security awareness programs and train employees on risk management practices. Prepare and present detailed risk assessment reports to senior management. Lead incident response planning and participate in cybersecurity investigations when necessary. Qualifications: Education: Bachelor s degree in Information Security, Cyber Security, Computer Science, Information Science, or a related field. Advanced degrees (e.g., Master s) or certifications (e.g., CISSP, CRISC, CISM, CEH) are a plus. Experience: 5+ years of experience in information security, risk management, or related domains. Skills and Competencies: Comprehensive understanding of frameworks such as ISO 27001, NIST Cybersecurity Framework, COSO, and COBIT. Proven analytical expertise in evaluating and prioritizing risks effectively. Advanced proficiency in utilizing security tools for risk assessment and mitigation. Strong preference for candidates with certifications like CISSP, CISM, CRISC, or equivalent. Exceptional communication and presentation skills, with a proven ability to collaborate effectively across diverse teams. Demonstrated problem-solving capabilities, including critical thinking and informed decision-making under pressure. Skilled in leading security initiatives and managing projects across global teams. A strategic mindset paired with keen attention to detail. Resourceful and decisive under high-pressure situations. An effective team player with exceptional interpersonal and collaboration skills.

Job Description We are looking for an experienced Project Manager - Cybersecurity & Internal Audit to lead and coordinate audit-related projects with a focus on SOX compliance, IT controls, and Cybersecurity. This role requires strong project management capabilities, exceptional stakeholder management, and the ability to work seamlessly with cross-functional teams. The ideal candidate will possess deep knowledge of SOX IT control audits, cybersecurity risk frameworks, and have strong communication and coordination skills to drive successful audit engagements and ensure organizational compliance. Key Responsibilities: Manage and oversee internal audit projects, particularly focused on IT general controls, SOX compliance, and cybersecurity audits. Lead end-to-end project planning, including scope definition, resource allocation, timelines, issue tracking, and status reporting. Collaborate with internal audit, IT, Product & Engineering, Cybersecurity, Finance, and Business teams to ensure effective execution of audit plans and remediation activities. Coordinate SOX ITGC (IT General Controls) and process-level control testing, working with internal and external auditors as required. Facilitate the identification, assessment, and remediation of cybersecurity risks, ensuring alignment with frameworks such as NIST, ISO 27001, and COBIT. Develop and maintain stakeholder relationships to ensure transparency and alignment on audit priorities and expectations. Provide clear, concise project status updates to senior leadership and executive stakeholders. Drive continuous improvement in audit processes and control environments through feedback and lessons learned.. Qualifications Bachelor s degree in Information Systems, Business Administration, Accounting, Cybersecurity, or related field. 3 - 7 years of experience in project management,

Ericsson is seeking an experienced GRC Specialist with 8 to 15 years of expertise in Governance, Risk, and Compliance to join our team in Noida or Bangalore. The ideal candidate will have a strong background in managing risk frameworks, compliance programs, and governance processes within large enterprises, preferably in telecom or IT sectors. Key Responsibilities: Develop, implement, and maintain governance, risk, and compliance frameworks aligned with global standards and Ericsson policies. Perform comprehensive risk assessments and compliance audits to identify gaps and recommend remediation actions. Ensure adherence to regulatory requirements such as ISO 27001, GDPR, NIST, COBIT, and ITIL. Manage and monitor compliance controls and policies to mitigate organizational risks. Collaborate with internal stakeholders and external auditors to facilitate audit readiness and compliance reporting. Drive continuous improvement initiatives for GRC processes and tools. Support incident response and business continuity planning from a GRC perspective. Lead awareness programs and training sessions on governance, risk, and compliance topics. Utilize and optimize GRC platforms (e.g., RSA Archer, MetricStream, ServiceNow GRC) for automated risk management and reporting. Required Skills and Qualifications: Bachelors or Masters degree in Information Technology, Cybersecurity, Business Administration, or related field. 8 to 15 years of experience in Governance, Risk, and Compliance roles. In-depth knowledge of GRC frameworks and standards (ISO 27001, NIST, COBIT, GDPR, ITIL). Practical experience with GRC tools and platforms. Strong understanding of cybersecurity risk management and control frameworks. Excellent analytical, organizational, and communication skills. Ability to work collaboratively across teams and influence senior stakeholders. Relevant certifications such as CISA, CISM, CRISC, CISSP, or similar preferred. Connect with me over LinkedIn at : https://www.linkedin.com/in/nitin-tushir-abc0048/

Get to Know the Team: At Grabber Technology Solutions (GTS), we revolutionise the technology experience for every Grabber. Our mission is to empower our team with seamless and solutions that enhance their daily work. We are a diverse group of forward-thinkers committed to creating personalised IT experiences. If youre passionate about customer-centric innovation and technology at Grab, come join us and help shape the future of technology! Get to Know the Role: We are looking for an experienced Senior Configuration Manager to drive the accuracy, integrity, and strategic value of our Configuration Management Database (CMDB). This important individual contributor role will be the primary owner and performer of CMDB operations, ensuring it serves as the definitive source of truth for our IT landscape. You understand configuration management mechanics, including the seamless integration of hardware and software assets within the CMDB framework. You will report to Manager II, Change Release Management. This role is based in Bangalore. The Critical Tasks You will Perform: Own and maintain the Configuration Management Database (CMDB), ensuring accuracy and completeness by collaborating with cross-functional teams on Configuration Item (CI) identification, documentation, and lifecycle management. Lead and evolve Software Asset Management (SAM) processes, defining inclusive policies, tools, and procedures for licence tracking, compliance, usage, and optimisation. Identify and implement opportunities to streamline and automate Configuration Management processes within the ITSM platform, ensuring seamless integration with core ITSM functions like Change, Incident, Problem, and Release Management. Generate regular reports and KPIs, conduct configuration audits, and support risk assessments to address discrepancies and ensure compliance. Provide expert support for Change Management processes, contributing to accurate and collaborative impact assessments for changes affecting configurations. Stay current with industry trends and emerging technologies, recommending strategic process and tool improvements to enhance Configuration and Asset Management practices. Read more Skills you need What Essential Skills You will Need: Bachelors degree in Computer Science, Information Technology, or a related field 6 to 9 years hands-on experience in IT Operations, Service Management or Configuration Management roles. Deep, hands-on expertise in configuration management principles and practices, including CMDB data modelling, CI lifecycle, relationships and data quality. Track record in defining and implementing Hardware Asset Management (HAM) and Software Asset Management (SAM) processes, policies and tools. Hands-on experience with automated discovery and reconciliation tools and integrating data from multiple IT systems. Demonstrated experience defining and generating reports on KPIs and building data visualisations. Good to have ITIL Expert (v3/v4) certified COBIT 5 Foundation certified Lean/SixSigma certified Read more What we offer About Grab and Our Workplace Grab is Southeast Asias leading superapp. From getting your favourite meals delivered to helping you manage your finances and getting around town hassle-free, weve got your back with everything. In Grab, purpose gives us joy and habits build excellence, while harnessing the power of Technology and AI to deliver the mission of driving Southeast Asia forward by economically empowering everyone, with heart, hunger, honour, and humility. Read more Life at Grab Life at Grab We care about your well-being at Grab, here are some of the global benefits we offer: We have your back with Term Life Insurance and comprehensive Medical Insurance. With GrabFlex, create a benefits package that suits your needs and aspirations. Celebrate moments that matter in life with loved ones through Parental and Birthday leave , and give back to your communities through Love-all-Serve-all (LASA) volunteering leave We have a confidential Grabber Assistance Programme to guide and uplift you and your loved ones through lifes challenges. What We Stand For at Grab We are committed to building an inclusive and equitable workplace that enables diverse Grabbers to grow and perform at their best. As an equal opportunity employer, we consider all candidates fairly and equally regardless of nationality, ethnicity, religion, age, gender identity, sexual orientation, family commitments, physical and mental impairments or disabilities, and other attributes that make them unique. Read more

Location: Vikhroli Experience: 6+ Years Notice Period: Immediate up to 60 days Mandatory Key skills: SAP FICO Consultant, SAP S4/HANA, Accounting (accounts payable, receivable, tax, and treasury systems). We are seeking an accomplished SAP FICO Consultant (Service Manager Finance) to oversee the full lifecycle of finance-related IT service delivery. This role will lead the operational and strategic management of complex SAP environments, including SAP FICO and S/4HANA, while driving seamless global operations and integration across key financial platforms such as accounts payable, receivable, tax, and treasury systems. Required Qualifications: Bachelor's degree in Computer Science, Information Technology, or a related engineering discipline. Minimum of 6 years in IT service delivery, with at least 2–5 years of hands-on experience in SAP Finance (FICO) and S/4HANA. Demonstrated expertise in managing global IT operations and integrating SAP with third-party financial systems (accounts receivable/payable, etc.). Solid understanding of ITSM/ITIL frameworks; certifications such as ITIL, COBIT, or DevOps are advantageous. Awareness of compliance, data security, and governance practices in financial IT ecosystems. Strong capabilities in vendor coordination, stakeholder engagement, and cross-functional collaboration. Key Responsibilities: Ensure seamless day-to-day operations of finance IT services through effective monitoring, timely issue resolution, and performance management. Oversee service delivery and system integration of SAP FICO and S/4HANA with modules related to tax compliance, treasury, and vendor invoice management. Lead ongoing service enhancement initiatives to improve quality, compliance, automation, and scalability. Manage incident, change, and request processes to minimize disruptions and maintain continuity across finance operations. Collaborate with global business teams and internal stakeholders to align IT services with evolving financial process requirements. Track and report on SLAs, OLAs, KPIs, and operational metrics while proactively identifying and addressing risks or service gaps. Serve as a subject matter expert in SAP finance operations and ensure adherence to governance and documentation best practices. Maintain updated service documentation, including SOPs, knowledge bases, and support resources to enable operational efficiency. Support budget planning, cost control, and procurement activities related to finance IT services. Facilitate smooth onboarding of new services by coordinating with solution design teams and ensuring readiness for operational integration. Key Competencies: Deep functional knowledge of SAP finance modules and integration landscapes. Excellent leadership, interpersonal, and communication skills. Strong analytical and problem-solving mindset, with a proactive approach to risk mitigation. Experience in managing service budgets, performance reporting, and cost optimization. Ability to work effectively under pressure in a global, fast-paced enterprise environment Job Types: Full-time, Permanent Pay: ₹1,500,000.00 - ₹3,000,000.00 per year Schedule: Day shift Monday to Friday Ability to commute/relocate: Vikhroli, Mumbai, Maharashtra: Reliably commute or planning to relocate before starting work (Required) Application Question(s): What is your Notice Period? What is your Expected CTC? What is your Current CTC? Education: Bachelor's (Required) Experience: SAP Finance & Controlling: 3 years (Required) SAP S/4HANA: 3 years (Required) Accounts payable: 1 year (Required) Location: Vikhroli, Mumbai, Maharashtra (Required) Work Location: In person

Job Description WHO WE ARE Led by the Chief Information Security Officer (CISO), Technology Risk is responsible for governing and overseeing the information security and cybersecurity risk and controls landscape for the Firm. We are responsible for detecting and preventing attempted cyber intrusions against the firm, helping the firm develop more secure applications and infrastructure, developing software in support of our efforts, measuring information security & cybersecurity risk through intelligent tooling, and designing and driving implementation of information security & cybersecurity controls. The team has global presence across the Americas, APAC, India and EMEA. Within Technology Risk, Digital and Risk Assurance is the execution arm, responsible for analysing, triaging, and reporting on newly discovered risks, supporting Engineering Divisions in risk management, supporting our external audits from a technology standpoint, overseeing internal assessments as well as ensuring the integrity of the environment. Goldman Sachs has one of the most progressive Technology Risk teams in the industry and is continuing to push the development of risk in preference to security within technology and the business. Year on year success has led the team to work deeper into the organization and gain valuable insights into how technology needs to function, what its risk really is and how this impacts the business. YOUR IMPACT You will be a key addition to the Digital Risk Office Assurance team, which is primarily responsible for supporting the Engineering Monitoring & Testing program. As part of the first line of defense, the Engineering Monitoring & Testing program was established to independently evaluate the design and performance of key controls. We partner with engineering teams across the firm to help them understand what they can do to reduce and manage their risk and make their systems more resilient. How You Will Fulfill Your Potential Your responsibilities will include governance aspects of Controls Assurance programs, and issue management. You will work with all pillars within Technology Risk to understand the risks being identified and their potential impact. This will be an opportunity to build broad knowledge of the business and technologies across the entire firm and work with engineers at all levels in the organization. Job Responsibilities Partner with business units to perform control evaluation, monitoring and testing efforts of key internal controls to identify control gaps as well as opportunities for effectiveness and efficiency improvements. These assessments will include coverage for other regulatory programs including SOX and RCSA. Collaborate with cross functional teams and stakeholders to evaluate and validate the design, implementation, and performance of key engineering controls. Perform remediation testing to validate if the identified vulnerabilities have been successfully remediated, providing independent assurance that corrective measures have been implemented in a manner that prevents exploitation. Basic Qualifications & Skills Relevant bachelor’s degree (such as computer science, information technology, management information systems or related fields). 0-3 years experience in risk management, risk reporting, audits, control assessment and evaluation, governance, etc. Basic understanding of IT audit methodologies and control frameworks of IT platforms, processes, systems and controls, including areas such as logical access, physical security and change management controls at an infrastructure and application level. Familiarity with risk management framework, industry standards, financial industry regulatory requirements. Experience with any data analysis/visualization tool such as Excel, Tableau, Power BI, R, SQL, etc. Basic understanding of risk management principles or Sarbanes–Oxley Section 404, SOC 1 and SOC 2 reporting. Familiarity with general and cyber security related Information technology controls design and reviews. Ability to work effectively in a global team environment and drive results in a matrixed organization. Results oriented, strong sense of ownership and eagerness to learn. Strong sense of ownership and accountability. Clear communication skills, both verbally and in writing. Preferred Qualifications Understanding of information technology audit and control frameworks such as NIST COBIT and ITIL #TechRiskCybersecurity About Goldman Sachs At Goldman Sachs, we commit our people, capital, and ideas to help our clients, shareholders, and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities, and investment management firm. Headquartered in New York, we maintain offices around the world. We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers . We’re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html © The Goldman Sachs Group, Inc., 2024. All rights reserved. Goldman Sachs is an equal employment/affirmative action employer Female/Minority/Disability/Veteran/Sexual Orientation/Gender Identity Show more Show less

At PwC, our people in audit and assurance focus on providing independent and objective assessments of financial statements, internal controls, and other assurable information enhancing the credibility and reliability of this information with a variety of stakeholders. They evaluate compliance with regulations including assessing governance and risk management processes and related controls. In digital assurance at PwC, you will focus on providing assurance services over clients' digital environment, including processes and controls, cyber security measures, data and AI systems, and their associated governance, to help organisations and their stakeholders build trust in their technology while complying with relevant regulations. Enhancing your leadership style, you motivate, develop and inspire others to deliver quality. You are responsible for coaching, leveraging team member’s unique strengths, and managing performance to deliver on client expectations. With your growing knowledge of how business works, you play an important role in identifying opportunities that contribute to the success of our Firm. You are expected to lead with integrity and authenticity, articulating our purpose and values in a meaningful way. You embrace technology and innovation to enhance your delivery and encourage others to do the same. Skills Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to: Analyse and identify the linkages and interactions between the component parts of an entire system. Take ownership of projects, ensuring their successful planning, budgeting, execution, and completion. Partner with team leadership to ensure collective ownership of quality, timelines, and deliverables. Develop skills outside your comfort zone, and encourage others to do the same. Effectively mentor others. Use the review of work as an opportunity to deepen the expertise of team members. Address conflicts or issues, engaging in difficult conversations with clients, team members and other stakeholders, escalating where appropriate. Uphold and reinforce professional and technical standards (e.g. refer to specific PwC tax and audit guidance), the Firm's code of conduct, and independence requirements. The Opportunity When you join PwC Acceleration Centers (ACs), you step into a pivotal role focused on actively supporting various Acceleration Center services, from Advisory to Assurance, Tax and Business Services. In our innovative hubs, you’ll engage in challenging projects and provide distinctive services to support client engagements through enhanced quality and innovation. You’ll also participate in dynamic and digitally enabled training that is designed to grow your technical and professional skills. As part of the Digital Assurance and Transparency - AC India team you are expected to lead the creation and implementation of impactful digital assurance initiatives. As a Manager you are expected to guide the execution of digital assurance engagements, focusing on a customer-centric approach that supports PwC's goals and vision. You are expected to be responsible for supervising, developing, and coaching teams, managing client service accounts, and driving assigned client engagement workstreams by independently solving and analyzing complex problems to develop impactful deliverables. Responsibilities Lead the creation and implementation of digital assurance initiatives Guide digital assurance engagements with a client-focused approach Supervise and mentor digital assurance teams to enhance performance Manage client service accounts and deliver elevated-quality deliverables Analyze complex problems and develop practical solutions Drive engagement workstreams independently Assure adherence to PwC's quality standards and vision Foster a collaborative and supportive team environment What You Must Have Bachelor's Degree in one of the following fields of study: Accounting, Finance, Management Information Systems, Computer and Information Science, Information Technology, Economics, Business Administration/Management, Engineering, Statistics, Management Information Systems & Accounting, Computer and Information Science & Accounting, Economics and Finance, Economics and Finance & Technology, Accounting & Technology, Mathematical Statistics, or Technology Mathematics 7 years of combined relevant experience (SAP/Oracle controls auditing, consulting and/or implementing, data analysis, compliance, internal audit, or risk experience) Employees to have an active primary credential as follows, CISA or India Chartered Accountant (CA) Oral and written proficiency in English required In lieu of Bachelor Degree, Chartered Accountant What Sets You Apart Financial reporting and information technology risks, processes and controls Current and emerging technologies including Cloud-computing, Oracle, SAP Risks, processes and internal controls related to financial reporting COSO Framework, CoBIT, ITIL and other leading control frameworks Leading IT related controls assurance or controls readiness projects Identifying key risks and controls, recommend improved controls Leading the adoption of a work program and practice aid Demonstrating significant project management skills related to IT audit projects Show more Show less

At PwC, our people in audit and assurance focus on providing independent and objective assessments of financial statements, internal controls, and other assurable information enhancing the credibility and reliability of this information with a variety of stakeholders. They evaluate compliance with regulations including assessing governance and risk management processes and related controls. Those in internal audit at PwC help build, optimise and deliver end-to-end internal audit services to clients in all industries. This includes IA function setup and transformation, co-sourcing, outsourcing and managed services, using AI and other risk technology and delivery models. IA capabilities are combined with other industry and technical expertise, in areas like cyber, forensics and compliance, to address the full spectrum of risks. This helps organisations to harness the power of IA to help the organisation protect value and navigate disruption, and obtain confidence to take risks to power growth. Enhancing your leadership style, you motivate, develop and inspire others to deliver quality. You are responsible for coaching, leveraging team member’s unique strengths, and managing performance to deliver on client expectations. With your growing knowledge of how business works, you play an important role in identifying opportunities that contribute to the success of our Firm. You are expected to lead with integrity and authenticity, articulating our purpose and values in a meaningful way. You embrace technology and innovation to enhance your delivery and encourage others to do the same. Skills Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to: Analyse and identify the linkages and interactions between the component parts of an entire system. Take ownership of projects, ensuring their successful planning, budgeting, execution, and completion. Partner with team leadership to ensure collective ownership of quality, timelines, and deliverables. Develop skills outside your comfort zone, and encourage others to do the same. Effectively mentor others. Use the review of work as an opportunity to deepen the expertise of team members. Address conflicts or issues, engaging in difficult conversations with clients, team members and other stakeholders, escalating where appropriate. Uphold and reinforce professional and technical standards (e.g. refer to specific PwC tax and audit guidance), the Firm's code of conduct, and independence requirements. Job Description Main purpose of the job and key background information Professional responsibilities for this manager position include but are not limited to: Applying internal control principles and technical knowledge, including Application Controls and IT General Controls; Developing and/or supervising the execution of detailed audit work plans for the IT audit component of the IA team through resource allocation, stakeholder coordination and quality review; Managing the identification of key risks and controls, including evaluation of control design; Evaluation of operational effectiveness of IT System Controls, utilizing appropriate testing techniques and professional skepticism; Providing regular status reports to IA management and internal clients/stakeholders, when necessary, to keep relevant parties informed of progress and potential issues; Assessing audit results, translating findings into level of risk, to produce meaningful insights and recommendations; Communicating risk findings, verbally and written, to clients in a pragmatic and helpful manner; Driving follow up and remediation of reported issues in a timely manner; Building meaningful relationships with clients through client engagements and networking; Managing and delivering against deadlines while working on multiple projects; Participating in development and delivery of training curriculum; and Coaching team members and reviewing their work. Requirements These should include essential and desirable requirements such as: Level of experience Education/qualifications Industry experience Technical capability Sales/BD capability Metrics Key personal attributes Consulting experience Minimum Years Of Experience 5+ year(s) of external/ internal audit experience (big four experience is preferred) Minimum Degree Required Bachelor’s or master’s degree in accounting, Management Information Systems, Computer Science, Engineering or business related field Preferred Certifications CISA, CISM, CISSP, CA and/or CIA Preferred Knowledge/ Skills Demonstrates extensive knowledge and/or proven record of success in the following areas: Security and controls for various on-premise and cloud-based technologies; Control standards (COSO, COBIT), control testing strategies; Public accounting practices and internal audit processes i.e., technology and tools for planning, testing and reporting; IT general controls concepts in the areas of system development, change management, computer operations and access to programs; Identifying and assessing business process controls and linkage to IT systems; and, IT security fundamentals across multiple domains including security management, security architecture, access control, application development, operations security, physical security, cryptography, telecommunications and networking, business continuity planning, investigations and ethics. Additionally, candidates should have excellent communication (written and verbal) skills and should be able to work with global teams independently with minimal supervision. Additional Information Flexible work hours are required to align with US and UK hours as agreed upon. Show more Show less

This job is with Morningstar, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. T he Area: Morningstar is a leading global provider of independent investment insights. Our core competencies are data, research, and design, and we employ each of these to create products that clearly convey complex investment information. Our mission is to empower investor success and everything we do at Morningstar is in the service of the investor. Reporting to the Audit Committee of the Board of Directors, the purpose of the Global Audit and Assurance (GAA) function is to strengthen Morningstar's ability to create, protect, and sustain value by providing the Company with organizationally independent, risk-based, and objective assurance and consulting services to evaluate and improve Morningstar's governance, risk management and control processes. The Role: Morningstar's GAA function seeks a highly motivated Senior Internal Auditor who thrives on new experiences and challenges. As a Senior Internal Auditor, you will play an integral role in evaluating the company's business and information technology processes and effectiveness of internal controls. You will have the opportunity to work on a variety of operational, compliance, financial, and information technology reviews as well as evaluate the effectiveness of internal controls over external financial reporting as part of the company's Sarbanes-Oxley Section 404 compliance activities. Based in Mumbai, the Senior Internal Auditor may be required to travel to a number of domestic and international locations in support of our annual internal audit plan. You will work closely with all levels of management across the organization, recommending changes to strengthen controls for increased efficiencies and reduced risks. The Senior Internal Auditor will have the opportunity to utilize and reference world-class audit tools and audit methodologies in the performance of his or her duties. Key Responsibilities Planning and execution of financial, operational, compliance; and information technology related reviews. Perform walkthroughs of complex business and information technology processes and test the design and effectiveness of internal controls. Execute audit procedures in accordance with audit objectives and document work in accordance with professional standards. Preparation of observations and recommendations for corrective action and documentation of work Effectively apply the COSO internal control framework, COBIT IT governance framework, IIA Global Internal Audit Standards and US GAAP accounting principles. Assist audit management with the execution of continuous risk assessment and audit plan development. Serve as an independent advisor and business partner with management. Requirements Action-oriented, self-starter with strong verbal and written communication skills. Comfortable working both independently or in teams and working within a complex environment. Ability to diagnose problems, determine root causes, and recommend solutions to complex challenges. Undergraduate degree in accounting, business, information technology, management information systems, or a related field. Minimum of 5 years of internal or external audit experience. Experience in working for a Big 4 or Tier-Two public accounting firm highly preferred. Experience in performing data analytics and using data extraction and analysis software Professional accreditation (e.g., CIA, CPA, CISA) highly preferred. Understanding of the technical aspects of accounting and financial reporting. Experience in performing multiple projects and working with varying team members. Flexibility/ adaptability to work a non-standard schedule as needed to accommodate various time zones where some process owners are located. Willingness to travel to domestic and international offices. Morningstar is an equal opportunity employer Morningstar's hybrid work environment gives you the opportunity to work remotely and collaborate in-person each week. We've found that we're at our best when we're purposely together on a regular basis, at least three days each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you'll have tools and resources to engage meaningfully with your global colleagues. I10_MstarIndiaPvtLtd Morningstar India Private Ltd. (Delhi) Legal Entity Show more Show less

T he Area: Morningstar is a leading global provider of independent investment insights. Our core competencies are data, research, and design, and we employ each of these to create products that clearly convey complex investment information. Our mission is to empower investor success and everything we do at Morningstar is in the service of the investor. Reporting to the Audit Committee of the Board of Directors, the purpose of the Global Audit and Assurance (GAA) function is to strengthen Morningstar’s ability to create, protect, and sustain value by providing the Company with organizationally independent, risk-based, and objective assurance and consulting services to evaluate and improve Morningstar’s governance, risk management and control processes. The Role: Morningstar’s GAA function seeks a highly motivated Senior Internal Auditor who thrives on new experiences and challenges. As a Senior Internal Auditor, you will play an integral role in evaluating the company’s business and information technology processes and effectiveness of internal controls. You will have the opportunity to work on a variety of operational, compliance, financial, and information technology reviews as well as evaluate the effectiveness of internal controls over external financial reporting as part of the company’s Sarbanes-Oxley Section 404 compliance activities. Based in Mumbai, the Senior Internal Auditor may be required to travel to a number of domestic and international locations in support of our annual internal audit plan. You will work closely with all levels of management across the organization, recommending changes to strengthen controls for increased efficiencies and reduced risks. The Senior Internal Auditor will have the opportunity to utilize and reference world-class audit tools and audit methodologies in the performance of his or her duties. Key Responsibilities Planning and execution of financial, operational, compliance; and information technology related reviews. Perform walkthroughs of complex business and information technology processes and test the design and effectiveness of internal controls. Execute audit procedures in accordance with audit objectives and document work in accordance with professional standards. Preparation of observations and recommendations for corrective action and documentation of work Effectively apply the COSO internal control framework, COBIT IT governance framework, IIA Global Internal Audit Standards and US GAAP accounting principles. Assist audit management with the execution of continuous risk assessment and audit plan development. Serve as an independent advisor and business partner with management. Requirements Action-oriented, self-starter with strong verbal and written communication skills. Comfortable working both independently or in teams and working within a complex environment. Ability to diagnose problems, determine root causes, and recommend solutions to complex challenges. Undergraduate degree in accounting, business, information technology, management information systems, or a related field. Minimum of 5 years of internal or external audit experience. Experience in working for a Big 4 or Tier-Two public accounting firm highly preferred. Experience in performing data analytics and using data extraction and analysis software Professional accreditation (e.g., CIA, CPA, CISA) highly preferred. Understanding of the technical aspects of accounting and financial reporting. Experience in performing multiple projects and working with varying team members. Flexibility/ adaptability to work a non-standard schedule as needed to accommodate various time zones where some process owners are located. Willingness to travel to domestic and international offices. Morningstar is an equal opportunity employer Morningstar’s hybrid work environment gives you the opportunity to work remotely and collaborate in-person each week. We’ve found that we’re at our best when we’re purposely together on a regular basis, at least three days each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you’ll have tools and resources to engage meaningfully with your global colleagues. I10_MstarIndiaPvtLtd Morningstar India Private Ltd. (Delhi) Legal Entity