It Compliance Analyst

Job description

**Role & responsibilities** - The candidate must have experience in IT auditing, IT risk management, or related fields. - Plan, execute, and report on internal IT audits. - Proficiency in compliances with frameworks like ISO 27001, SOC 2, PCI DSS, ITGC or other relevant standards. - Hands-on experience conducting on-site and remote assessments of third-party vendors to evaluate their security posture and related controls. - Must be CISA certified. - Proficiency in MS Office Suite with experience in creating and presenting dashboards and reports. - Comfortable to travel for on-site visit to client side for audits purpose. - Evaluate the effectiveness of IT controls, identify risks, and provide recommendations for improvement. - Proficiency in compliances with frameworks like ISO 27001, SOC 2, PCI DSS, ITGC or other relevant standards. - Conduct regular access reviews to ensure that users have appropriate access levels based on their roles. - Evaluate the effectiveness of access controls in safeguarding sensitive information. - Recommend improvements for identity and access management (IAM) processes. - Perform internal risk assessments to identify vulnerabilities and ensure timely mitigation strategies. - Work closely with IT, legal, and business teams to address audit findings and track remediation efforts. - Must have capability to represent the audit reports to Management. - Stay updated on the latest developments in IT audit and compliance practices.