PCGJP00005313 Cyber security controls assessor, Senior- not avail for ref

Rate 75/hr

SPOTLIGHT CALL ON MONDAY

SOX, Solid understanding of AS5, COBIT framework, and COSO framework.

(1) IT systems (applications, operating systems, databases, and middleware),

(2) ITGCs,

(3) control impact on most IT and business processes, and

(4) SOD conflicts with IT access.

· Local candidates . The role is hybrid with at least once a week onsite expectation.

·

· TOP THINGS:

oStrong SOX IT / ITGC technical expertise and judgment

§ Deep understanding of SOX, ITGCs, application/OS/database controls, access and segregation of duties, COSO, COBIT, and AS5.

§ Can determine whether a control is properly designed, identify gaps.

oAbility to independently evaluate complex processes and controls

§ Can lead walkthroughs, ask probing questions, understand how systems and business processes connect, identify control gaps, and recommend appropriate controls with limited guidance.

§ Someone who can go beyond confirming that evidence exists to assess whether the control effectively addresses the underlying risk and whether testing is sufficiently thorough, clear, and well-documented to support the conclusion.

oStrong stakeholder communication and influence

§ Can explain SOX/control issues clearly to system owners, business process owners, leadership, and external auditors.