ZigZag is looking for IT Governance Risk and Compliance Manager to join our team!
We help companies to ensure contract, license and royalty compliance by offering highly specialized auditing and advisory solutions.
What makes us different from our competitors is expressed in our motto : Unparalleled Experience. Inspired outcomes. Every one of our highly skilled people has extensive real-world experience across industries and geographies, and together, we possess more than 100 years of combined knowledge gained from more than 1,000 audits.
The insights gained and retained from this experience mean that we provide our clients with not just auditing, but also with the perspective required to enable long-term and efficient compliance."
Assist our clients and executive team members in defining and executing Compliance, Audit and Assurance planning activities (i.
e. Organization of Risk Assessments, Annual Audit Plan Development and Definition, Audit Plan Execution, Reporting),
Mapping of controls to various frameworks (SOC2, SSPA, ISO), fieldwork, issue analysis, report writing, closeout and follow-up with little supervision.
Develop and execute test procedures to ensure that controls are operating as intended and provide an objective, independent, risk-based evaluation of the adequacy and effectiveness of the companyâ€™s technology, operational and financial controls
Identify and communicate IT audit findings to senior management and clients.
Conduct follow-ups to appraise adequacy of corrective action taken to improve deficiencies
Draft reports by clearly reporting controls, test procedures, and audit observations.
REQUIRED QUALIFICATIONS :
Experience with SSAE 16, SSAE 18, SOC1, SOC2, ISAE 3000, ISAE 3402, AICPA Trust Services Principles, HITRUST CSF, and other risk and control frameworks is preferred
Information Technology, Audit, Risk and Compliance related Certifications (i.e. CPA, CISSP, CISA, CISM, etc.) preferred, along with strong knowledge of internal auditing standards, ICOFR, COSO, COBIT and Information Security frameworks such as ITIL, NIST and SOX.
Preferable experience with SAP and Oracle with GRC activities like Segregation of Duties, User role provisioning and role base assessments.
Strong verbal and written communication skills, including working experience with communication to executive members of client
Bachelor's degree from an accredited college / university
Powered by JazzHR