risk specialist.

about the company
A global conglomerate with multiple big brands under their group


about the requirements

• IT Audit:

  • Plan, scope, and execute internal IT audits and control assessments across various technology platforms, applications, and infrastructure components.
  • Evaluate the design and operating effectiveness of IT general controls (ITGCs) and application controls.
  • Identify control deficiencies, security vulnerabilities, and areas of non-compliance.
  • Develop clear and concise audit reports, detailing findings, potential impacts, and actionable recommendations.
  • Track and validate the implementation of audit recommendations and remediation plans.
  • Assist in the development and maintenance of the annual IT audit plan.
  • Support external audit activities and regulatory examinations as required.

  Third-Party Risk Management (TPRM):

  • Conduct comprehensive cybersecurity risk assessments of new and existing third-party vendors, suppliers, and partners.
  • Evaluate vendor security controls, policies, and procedures against industry standards and internal requirements.
  • Review vendor SOC reports, penetration test results, and other security attestations.
  • Identify, analyze, and document third-party risks, and recommend appropriate mitigation strategies.
  • Collaborate with procurement, legal, and business stakeholders to ensure cybersecurity risks are addressed in contractual agreements.
  • Monitor the ongoing security posture of critical third parties and manage the TPRM lifecycle.