Associate Consultant/ Consultant- Information Security

Job description

Roles and Responsibilities
- Conducting SAS 70/ ISAE 3402/ ISAE 3000/ SSAE 16 audits

- Conducting SOX audits, Third Party Security audits

- Conducting controls assessment in manual/ automated environment

- Information Security Assessments and Analysis

- Carrying out OS/DB/Network reviews

Qualifications and Skills
- A bachelor's degree in engineering and approximately2-6 years of related work experience; or a master's or MBA degree in business, computer science, information systems, engineering, or a related discipline degree and approximately relevant years of related work experience

- Strong project management, communication (written and verbal) and presentation skills

- A team player

- Preference given to significant experience in relevant technical knowledge: (a) financial statement audits; (b) internal or operational audits; (c) SAS 70 engagements

- Preferred Certifications - CISA, CISSP, ISO27001 Lead Auditor/Implementer and CISM

Experience and Background
- Experience in carrying out OS/DB/Network reviews

- Exposure to Risk Management and Governance Frameworks/ Systems will be an added advantage

- Exposure to ERP systems will be added advantage

- Exposure to assessment of networks and perimeter architecture from scalability, availability, resilience and security