Job Summary: We are seeking a highly skilled Tech Risk and Regulatory Compliance Manager/Assistant Manager for one of the Big4 Consulting Firms. The ideal candidate will have expertise in IT internal audit, information security/cybersecurity, IT SOX, and third-party risk assessment reporting (e.g., SOC1, SOC 2). This role requires a thorough understanding of various compliance requirements including CSA STAR, ISO control, NIST Standards, PCI DSS, and GDPR. The candidate should be proficient in performing control testing, IT/infosec risk assessments, and network security infrastructure assessments. Knowledge in cloud security and application security is also essential.

Key Responsibilities:

- Conduct IT internal audits and assessments for information security and cybersecurity.

- Perform IT SOX compliance testing and third-party risk assessments.

- Prepare and present reports for SOC1 and SOC2 assessments.

- Ensure compliance with CSA STAR requirements, ISO controls, NIST standards, PCI DSS, and GDPR.

- Conduct control testing, IT/infosec risk assessments, and network security infrastructure assessments

- Apply knowledge in technical domains such as cloud security and application security.

Requirements

Qualifications:

- Bachelor's degree in Information Technology, Computer Science, or a related field.

- Relevant certifications as listed above.

- Proven experience in IT internal audit, information security, IT SOX, and third-party risk assessments.- Strong knowledge of compliance requirements (CSA STAR, ISO control, NIST Standards, PCI DSS, GDPR).

- Certification: CISA, CISSP, CEH, ISO, PCI DSS, NIST

- Excellent report writing and presentation skills.- Effective communication skills and confident demeanor.

- Experience working with client stakeholders.

- Problem-solving skills.

Preferred Experience:

- Experience in consulting.

- Experience in writing proposals and responding to RFPs.

- Experience in managing a team.

CA Monk jobs

Tech Risk and Regulatory Compliance