Senior Manager - Controls & Compliance (IT)

Role Specification

Role Title: Senior Manager - Controls (IT)

Reporting Manager: Deputy General Manager - Controls (IT)

Location: Pune

Purpose of the Role:ITGC Controls testing specialist with a core experience in ITGC testing for OS/DB, Infrastructure related controls.

Job Responsibilities:

• Oversee and execute ITGC testing as part of ICoFR testing program for Tata Motors Limited and/or its subsidiaries in domestic and international markets.
• Establish a standardized, consistent and re-performable approach towards testing and submission of work papers and review of work papers of team members.
• Perform walkthroughs and assess the adequacy of design and operating effectiveness of ITGC controls over various Applications at App, OS & DB layers for On-prem/On Cloud applications
• User their expertise in evaluating ITGC controls environment for vendor managed On-Cloud solutions and review gaps if any to identify complementary end user entity controls
• Liaise with control owners (and third party vendors in some instances) for testing controls over SOC1/SSAE review and perform top up testing where due.
• Use their understanding of IT applications, infrastructure and architecture to perform testing and identify control deficiency and support remediation efforts to improve overall control environment.
• Lead, manage, develop and coach a team of ITGC control testers to build a high performing team delivery quality and timely results.
• Proactively identify opportunities for process improvements and automation of controls testing in ITGC domain.
• Collaborate with business assurance leads, control owners and IT to track and effectively communicate program status to management.
  
  

Desired Candidate Profile:Functional Knowledge of Skills (Must Have):

• Sound knowledge of IT infrastructure
• Audit experience in controls testing in various areas of IT, including databases [Oracle, SQL],operating systems[Unix/Linux, Windows] and applications
• Conducting IT audits, SOX / ICoFR testing over ITGC controls
• Familiar with audit and control test methodology such as completeness & accuracy, IPE/IUC.
• Experience in conducting IT risk assessments
• Demonstrable audit mind-set with excellent problem solving, conflict management and time management skills.
• Ability to plan and organise effectively to meet audit deadlines.
• Fluent in English, excellent written and verbal communication skills.
• Team management skills including the ability to plan and organize teams effectively to meet audit deadlines.
  
  

Leadership Behavior: Stakeholder management

Educational Qualification:1.BE/BTech or similar professional qualification

• Professional certification CISA/ DISA/ CIA certification (Must have)
  
  

Technical Skill required:Auditing skills for DB [ like Oracle, SQL ] and OS [ Windows, Unix/Linux]

MS Office

Language Proficiency: Fluent English, excellent written and verbal communication skills

Experience Required:1.Overall Total experience of 1 to 12 years with atleast 5+ years in IT controls testing/ Risk and Controls/ Internal Audit in ITGC domain

• Performed test of design and operative effectiveness in a complete audit cycle.
• Managed multiple stakeholders / senior management to agree on risk based issues and remediation.
  
  

Added Advantage

• Experience of managing small teams.
• Worked on international IT testing programme or specific ICOFR programmes.
• Experience of working in Big 4 / cross border control testing teams.
• Performed risk based control testing with for legacy applications as well as SAP.