Job Summary: We are seeking a highly skilled Tech Risk and Regulatory Compliance Manager/Assistant Manager for one of the Big4 Consulting Firms. The ideal candidate will have expertise in IT internal audit information security/cybersecurity IT SOX and thirdparty risk assessment reporting (e.g. SOC1 SOC 2). This role requires a thorough understanding of various compliance requirements including CSA STAR ISO control NIST Standards PCI DSS and GDPR. The candidate should be proficient in performing control testing IT/infosec risk assessments and network security infrastructure assessments. Knowledge in cloud security and application security is also essential.
Key Responsibilities:
Conduct IT internal audits and assessments for information security and cybersecurity.
Perform IT SOX compliance testing and thirdparty risk assessments.
Prepare and present reports for SOC1 and SOC2 assessments.
Ensure compliance with CSA STAR requirements ISO controls NIST standards PCI DSS and GDPR.
Conduct control testing IT/infosec risk assessments and network security infrastructure assessments
Apply knowledge in technical domains such as cloud security and application security.
Requirements
Qualifications:
Bachelors degree in Information Technology Computer Science or a related field.
Relevant certifications as listed above.
Proven experience in IT internal audit information security IT SOX and thirdparty risk assessments. Strong knowledge of compliance requirements (CSA STAR ISO control NIST Standards PCI DSS GDPR).
Certification: CISA CISSP CEH ISO PCI DSS NIST
Excellent report writing and presentation skills. Effective communication skills and confident demeanor.
Experience working with client stakeholders.
Problemsolving skills.
Preferred Experience:
Experience in consulting.
Experience in writing proposals and responding to RFPs.
Experience in managing a team.