LTIMindtree-posted 3 months ago
Senior
Erlanger, KY
5,001-10,000 employees
Professional, Scientific, and Technical Services

The Senior Specialist - CyberSecurity will liaise with business teams to ensure a comprehensive understanding of business processes and the mapped IT controls and testing procedures. The role involves performing ITGC control assessments in a timely manner, validating test artifacts, and ensuring that assessments are closed within the specified time frame. The specialist will also perform SOC report analysis, identify gaps, and highlight remediation measures if necessary. Compliance SLA adherence and timely audit support are crucial, as well as managing external audits. The position requires driving and meeting compliance program milestones such as SOX, NIST, and ISO. A customer delivery mindset and strong project management skills are essential. The specialist will act as a trusted advisor to the client and drive the IT Risk compliance office to manage the entire Audit Compliance Risk Management Program. Stakeholder management is key to communicate IT GRC issues and explain them in business language to key members of the GRC Program at the client. Conducting workshop sessions with business and control owners and providing walkthroughs is also part of the role, along with management communication and participation in all GRC-related meetings and status reporting.

  • Liaise with business teams to ensure a comprehensive understanding of business processes and the mapped IT controls and testing procedures.
  • Perform ITGC control assessments in a timely manner, validate test artifacts, and ensure assessments are closed within the time frame.
  • Perform SOC report analysis, identify gaps, and highlight remediation measures if any.
  • Ensure compliance SLA adherence and timely audit support, managing external audits.
  • Drive and meet compliance program milestones such as SOX, NIST, and ISO.
  • Act as a trusted advisor to the client and drive the IT Risk compliance office to manage the entire Audit Compliance Risk Management Program.
  • Manage stakeholder communication regarding IT GRC issues and explain them in business language.
  • Conduct workshop sessions with business and control owners and provide walkthroughs.
  • Participate in all GRC-related meetings and status reporting.
  • 8 years of experience in IT GRC with a good understanding of regulations and standards including SOX compliance, NIST 800-53, SOC2, ISO 27001, and GDPR.
  • Exposure to IT GRC tools like Service Now, OneTrust, Risk Recon, and Microsoft eDiscovery.
  • Expertise in security principles, controls testing, test of design and test of effectiveness, and privacy regulations like GDPR and PII information.
  • Expertise in security risk compliance and audit management.
  • Experience with technology stacks such as One Trust, Risk Recon, Microsoft eDiscovery, Power BI, and MS Excel.
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service