Log In
Sign Up
Software Developer
Guidewire Software, Inc. Looking for Senior IT Auditor_Bangalore at Bengaluru, Karnataka Full Time
The Guidewire Internal Audit team is evolving into a value-add, strategic business partner that proactively drives the success of the company’s operations. We are currently seeking a Senior IT Auditor to join our team. He/she will assist in the completion of a risk-based IT audit plan for all activities of the company and perform security, privacy, and regulatory compliance audit and monitoring activities to support an overall effective control environment and assist management with increasing the efficiency and effectiveness of IT operations.
Primary Responsibilities
Perform tasks for completion of various compliance requirements that include Sarbanes-Oxley Act of 2002, SSAE 18 controls and other compliance programs, including the testing of IT-related internal controls and the identification and communication of deficiencies, which may occur concurrently either as an individual contributor or in a supervisory role.
Document and evaluate the design adequacy of internal controls via a variety of methods, including flowcharting, walkthroughs, best practices benchmarking, as well as detailed test work (operating effectiveness).
Testing responsibilities will include IT General Controls, covering logical access, security reviews, change management, and IT operations, as well as IT application controls, key reports testing, and SDLC testing (for new IT systems and projects impacting internal controls), and for other IT operational audits identified by Internal Audit Management.
Effectively complete the assigned tasks and report the progress of assigned tasks accurately to Internal Audit Management.
Build relationship and work closely with external auditors to complete SOX compliance and financial audit requirements.
Execute individual audit tasks in accordance with the audit plan and with the Standards for the Professional Practice of Internal Auditing of The Institute of Internal Auditors (IIA).
Properly document work papers, providing proper documentation of audit steps performed and evidence gathered. Ensure audit issues are well defined and root causes are identified.
Track and develop recommendations to improve the IT control environment.
Work with control owners throughout the company on documentation that supports compliance with various laws and industry requirements and specifically information security related requirements.
Develop and maintain relationships with personnel throughout the organization to ensure the understanding and acceptance of audit issues in connection with business risks and controls.
Assist in the evaluations of governance practices, among others to include authorizations, management reviews, policies and procedures, code of conduct, segregation of duties, system access rights, and compliance with accounting standards.
Assist in the development and rollout of IT-related internal controls and procedures.
Provide supporting information for reporting of results of internal audit activities and tracking of open audit issues.
Provide supporting information for audit reports, including action plans to achieve visible improvements to internal controls, risk management, and processes.
Required Knowledge/Skills/Abilities
Bachelor’s degree in computer science, Management Information Systems, Computer Engineering, Accounting, Finance, Business or related degree
Professional or popular vendor certifications preferred; Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Information System Security Professional (CISSP), and other related certifications.
Minimum 3+ years of full-time security consulting or technical auditing experience.
Experience or familiarity with security frameworks such as NIST, ISO 27001, ISO 27011, CoBiT, PCI-DSS, etc.
Experience or familiarity with SaaS-based applications (e.g., Oracle Fusion, Salesforce), operating systems (e.g., Microsoft Windows Server, Linux), databases (e.g., Microsoft SQL Server, and Oracle), and network cloud computing technologies that the Company utilizes.
Proficient in MS Office/Google Workspace applications including Word, Excel/Sheets, PowerPoint and Visio (process flowcharting)
Business acumen, cross-functional competence, interpersonal savvy, and strong analytical capabilities
Excellent oral and written English skills.
Highly developed planning, time management, and organizational skills
Strong analytical, execution and project management skills
Diversity skills to connect with people and management styles across different cultures.
Flexibility to work in a growth environment.
Preferred Knowledge/Skills/Abilities
Experience with “Big 4” public accounting experience is preferred
Demonstrated competency with data analytics and continuous monitoring
Experience in the technology industry is a plus
Candidate should possess or be working toward a relevant professional such as Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Information System Security Professional (CISSP), etc.
Due to overwhelming response, only shortlisted candidates will be contacted. Thank you for your understanding.
Primary Responsibilities
Perform tasks for completion of various compliance requirements that include Sarbanes-Oxley Act of 2002, SSAE 18 controls and other compliance programs, including the testing of IT-related internal controls and the identification and communication of deficiencies, which may occur concurrently either as an individual contributor or in a supervisory role.
Document and evaluate the design adequacy of internal controls via a variety of methods, including flowcharting, walkthroughs, best practices benchmarking, as well as detailed test work (operating effectiveness).
Testing responsibilities will include IT General Controls, covering logical access, security reviews, change management, and IT operations, as well as IT application controls, key reports testing, and SDLC testing (for new IT systems and projects impacting internal controls), and for other IT operational audits identified by Internal Audit Management.
Effectively complete the assigned tasks and report the progress of assigned tasks accurately to Internal Audit Management.
Build relationship and work closely with external auditors to complete SOX compliance and financial audit requirements.
Execute individual audit tasks in accordance with the audit plan and with the Standards for the Professional Practice of Internal Auditing of The Institute of Internal Auditors (IIA).
Properly document work papers, providing proper documentation of audit steps performed and evidence gathered. Ensure audit issues are well defined and root causes are identified.
Track and develop recommendations to improve the IT control environment.
Work with control owners throughout the company on documentation that supports compliance with various laws and industry requirements and specifically information security related requirements.
Develop and maintain relationships with personnel throughout the organization to ensure the understanding and acceptance of audit issues in connection with business risks and controls.
Assist in the evaluations of governance practices, among others to include authorizations, management reviews, policies and procedures, code of conduct, segregation of duties, system access rights, and compliance with accounting standards.
Assist in the development and rollout of IT-related internal controls and procedures.
Provide supporting information for reporting of results of internal audit activities and tracking of open audit issues.
Provide supporting information for audit reports, including action plans to achieve visible improvements to internal controls, risk management, and processes.
Required Knowledge/Skills/Abilities
Bachelor’s degree in computer science, Management Information Systems, Computer Engineering, Accounting, Finance, Business or related degree
Professional or popular vendor certifications preferred; Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Information System Security Professional (CISSP), and other related certifications.
Minimum 3+ years of full-time security consulting or technical auditing experience.
Experience or familiarity with security frameworks such as NIST, ISO 27001, ISO 27011, CoBiT, PCI-DSS, etc.
Experience or familiarity with SaaS-based applications (e.g., Oracle Fusion, Salesforce), operating systems (e.g., Microsoft Windows Server, Linux), databases (e.g., Microsoft SQL Server, and Oracle), and network cloud computing technologies that the Company utilizes.
Proficient in MS Office/Google Workspace applications including Word, Excel/Sheets, PowerPoint and Visio (process flowcharting)
Business acumen, cross-functional competence, interpersonal savvy, and strong analytical capabilities
Excellent oral and written English skills.
Highly developed planning, time management, and organizational skills
Strong analytical, execution and project management skills
Diversity skills to connect with people and management styles across different cultures.
Flexibility to work in a growth environment.
Preferred Knowledge/Skills/Abilities
Experience with “Big 4” public accounting experience is preferred
Demonstrated competency with data analytics and continuous monitoring
Experience in the technology industry is a plus
Candidate should possess or be working toward a relevant professional such as Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Information System Security Professional (CISSP), etc.
Due to overwhelming response, only shortlisted candidates will be contacted. Thank you for your understanding.
About Guidewire
Guidewire is the platform P&C insurers trust to engage, innovate, and grow efficiently. We combine digital, core, analytics, and AI to deliver our platform as a cloud service. More than 450 insurers, from new ventures to the largest and most complex in the world, run on Guidewire.
As a partner to our customers, we continually evolve to enable their success. We are proud of our unparalleled implementation track record with 1000+ successful projects, supported by the largest R&D team and partner ecosystem in the industry. Our Marketplace provides hundreds of add-ons that accelerate integration, localization, and innovation.
For more information, please visit www.guidewire.com and follow us on Twitter: @Guidewire_PandC.
Guidewire Software Inc. provides equal employment opportunities to all applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. All offers are contingent upon passing a criminal history and other background checks where it’s applicable to the position.
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.
