Job Summary: We are seeking a highly skilled Tech Risk and Regulatory Compliance Manager/Assistant Manager for one of the Big4 Consulting Firms. The ideal candidate will have expertise in IT internal audit, information security/cybersecurity, IT SOX, and third-party risk assessment reporting (e.g., SOC1, SOC 2). This role requires a thorough understanding of various compliance requirements including CSA STAR, ISO control, NIST Standards, PCI DSS, and GDPR. The candidate should be proficient in performing control testing, IT/infosec risk assessments, and network security infrastructure assessments. Knowledge in cloud security and application security is also essential.
Key Responsibilities:
- Conduct IT internal audits and assessments for information security and cybersecurity.
- Perform IT SOX compliance testing and third-party risk assessments.
- Prepare and present reports for SOC1 and SOC2 assessments.
- Ensure compliance with CSA STAR requirements, ISO controls, NIST standards, PCI DSS, and GDPR.
- Conduct control testing, IT/infosec risk assessments, and network security infrastructure assessments
- Apply knowledge in technical domains such as cloud security and application security.
Requirements
Qualifications:
- Bachelor's degree in Information Technology, Computer Science, or a related field.
- Relevant certifications as listed above.
- Proven experience in IT internal audit, information security, IT SOX, and third-party risk assessments.- Strong knowledge of compliance requirements (CSA STAR, ISO control, NIST Standards, PCI DSS, GDPR).
- Certification: CISA, CISSP, CEH, ISO, PCI DSS, NIST
- Excellent report writing and presentation skills.- Effective communication skills and confident demeanor.
- Experience working with client stakeholders.
- Problem-solving skills.
Preferred Experience:
- Experience in consulting.
- Experience in writing proposals and responding to RFPs.
- Experience in managing a team.
