Maverick Consulting Corp · 5 days ago
IT Audit and Compliance Consultant
New York, NY
Full-time
Onsite
Entry, Mid Level
2+ years expMaverick Consulting Corp is a consulting firm specializing in IT audit and compliance services. They are seeking an IT Audit and Compliance Consultant to conduct audits, perform risk assessments, and ensure compliance with various regulations such as SOX, PCI, and HIPAA.
ConsultingCyber SecurityRisk Management
Hiring Manager
Nik Chugh
Responsibilities
Conduct IT application and general controls review for multiple clients, which covers all key risks in a technology environment and all operational areas (Physical Security, Logical access and data security, Change Control, Data backup, Network Monitoring)
Perform risk assessments of various applications including financial, ERP, and other IT systems in scope of the audit
Create and execute SOX IT Audit plans to test IT security controls for Sarbanes-Oxley requirements
Perform mapping of internal IT controls framework to external auditor’s control framework and identify gaps and missing controls
Perform in-depth pre and post implementation controls review to validate system security design from a compliance with internal IT audit framework
Collaborate with client’s IT teams to perform data privacy reviews for PCI, HIPAA Compliance, provided feedback on completeness and accuracy of controls
Use various IT controls frameworks like COBIT, NIST, ISO 27001 etc. to validate client’s control environment and to ensure alignment with industry standard frameworks
Assist senior team members in ongoing implementation, testing and reporting requirements for SOX for various clients
Work closely with engagement managers and cyber security leads to assist with network security assessments and support penetration and vulnerability testing
Perform pre and post implementation reviews for outsourcing an IT infrastructure and application administration for clients
Perform bulk audit data analytics and controls monitoring using industry standard tools
Conduct IT, compliance and detailed infrastructure audits, aligned audit procedures with control objectives and risks, prepared audit reports
Prepare work papers which record and summarize data on the assigned auditable entity
Lead and manage several IT control framework redesign efforts
Perform IT vendor security reviews like SSAE16, SOC1, and SOC2 detailed reviews for clients’ third party providers
Review, evaluate and provide recommendations on improving IT Policies and procedures to meet necessary control objectives
Support senior team members with PCI Compliance, SOC readiness preparation, HIPPA controls implementation
Qualification
Required
Min 2 years of Information Technology Audit experience
Bachelor's Degree with a major in Information Systems or other related IT discipline
Experience performing IT application control reviews, change management and IT infrastructure security reviews
Experience in performing database security reviews
Knowledge of some or all of the following platforms: Windows, Linux, Oracle Financials, Peoplesoft, AS400 and Mainframes
Experience with CAAT and GRC tools
Prior experience with IT security testing, IT risk assessment, IT auditing, and business systems analysis
Excellent verbal, written, communication and analytical skills
Ability to work independently or as part of a team
Company
Maverick Consulting Corp
Maverick Consulting is a premier Risk Consulting firm.
11-50 employees
Funding
Current Stage
Early StageCompany data provided by crunchbase