Audit and Vulnerability Management Analyst II
On-site · Mohali, Punjab, India
Job Summary
Senior Analyst, BT Compliance and Controls Assurance responsible for overseeing the design adequacy and operating effectiveness of BT and Cybersecurity internal controls, conducting risk assessments and internal audits, performing control testing, defining improvement actions, and ensuring regulatory compliance. The role partners with stakeholders to facilitate audits and compliance reviews, conducts root-cause analysis, leverages GRC automation, and collaborates across BT and Cybersecurity to strengthen the control environment. Requires strong knowledge of SOX, IT and cybersecurity controls, and experience with frameworks such as COBIT, NIST CSF, and ISO 27001, along with relevant certifications.
Required Qualifications
- Bachelor's degree in computer science or information systems, risk management, accounting, finance, or equivalent combination of education and work experience
- 7+ years of experience in compliance and controls assurance, internal audit, or a related field
- Extensive knowledge of Sarbanes-Oxley compliance required
- Knowledge of PCI compliance, GDPR or other applicable compliance programs preferred
- Demonstrated experience in monitoring and improvement of IT general controls, Cybersecurity controls, and/or compliance programs required
- Solid understanding of Governance, Risk and Compliance methodologies and effective automation through GRC tooling. Experience with Archer GRC preferred
- Proven experience implementing IT and Cybersecurity frameworks (COBIT, NIST CSF, ISO 27k)
- Certifications such as CIA, CISA, CGEIT, CISSP preferred
- Ability to manage multiple parallel activities in a fast-paced environment
- Ability to build and maintain relationships across the organization
- Excellent analytical and problem-solving skills
- Ability to influence both technical and non-technical audiences at all levels of the company including executives
- Ability to work independently and as part of a cross-functional team
- Demonstrates a company ownership mindset and aligns with corporate values
- Location-based context: Information Technology domain and global corporate environment
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.