ASSISTANT MANAGER IT AUDIT /ADVISORY SERVICE

Position Requirements:
• Candidate must have minimum 5+ years of corporate experience and preference will be given to candidates with following background;
i. Big4 companies experience is a nice-to-have
ii. Any of the CERT-In empaneled companies or dedicated information and cybersecurity consulting firms .
iii. Any other consulting firm
• Candidate must have OSCP certification and preferable CRTP, OSWE, CEH, CISSP, etc.
Position Description
• You have significant experience in testing Information Security Governance and Management.
• You have significant experience in assessing IT Infrastructure, configuration and Network Architecture in accordance with appropriate standards such as:
• National Institute of Standards and Technology (NIST)
• SANS Institute
• Information Security Forum (ISF) and
• ISO 27001
• ISO 22301
• You are an expert in IT General Controls Audits
• You have significant experience in external and internal vulnerability and penetration testing of IT Infrastructure firewalls, routers and switches.
• Perform manual and automated network and application penetration tests.
• Perform manual and automated penetration tests on mobile and cloud platforms.
• Identify and exploit security risks within applications and network infrastructure.
• Analyze vulnerability impacts to customer s business, regulatory compliance and IT operations
• Contribute towards developing our methodologies, processes, techniques, standards, especially NESA, ADHICS and NIST Cyber Security framework.
• Understand and stay current with the critical threats to client s IT infrastructure and continually analyzing cyber threat intelligence sources and techniques utilized by cybercriminals.
• Preferable to have Internal Audit experience but not essential as we can train you and give you exposure to Internal Audit within Technology Risk Assurance.
• Experience in Business Continuity Management would be a plus but not essential as we can train you in this area.
• Pursuit of highest professional standards, specialist skills in technology and credibility in the market through continuous professional education, certification, contributions to professional groups and appropriate networking.
• Contribute towards managing the overall client service delivery in accordance with company s quality guidelines & methodologies.
• Ensure thorough project documentation and maintain electronic filing in accordance to company guidelines.
• Complete project assignments with minimum supervision and within the timelines provided by the management.