You will be responsible for ensuring that the policies, procedures and internal controls objectives in scope for Vodafone CIoud and Infrastructure (VCI) workstreams are fulfilled.
You will ensures that the policies, standards, processes and control activities are designed and operated to meet external regulations, financial audit requirements, internal audits, such as: Sarbanes-Oxley (SOx), PCI-DSS and ISAE 3402 requirements. The role acts as main point of contact during audits (internal or external audits.), assumes control coordination and operation, as needed.
You will ensures the efficient operation of assigned audit processes throughout the VCI organization, covering On-Premises and both Private/Public Cloud Infrastructure.
You will be responsible to coordinate VCI compliance activities with Security Departments, Local Markets and other VCI internal departments. This role oversees the implementation of new services and technologies at VCI, focusing on transitioning services from an On-Premises datacenter to a private/public cloud.
•You will manage the assigned controls, from design, documentation, implementation, and execution.
•You will coordinate the audit session for the assigned area/controls from planning, evidence delivery and resolution.
•You will coordinate the communication between Central/Group Teams with VCI management and external/internal auditors.
•You will anticipate risks/gaps and takes pro-active action to address them without impacting the processes operation and audit cycles.
•You will ensure the efficient remediation of deficiencies identified by the auditors; implements controls and new activities as required by the auditors.
•You will be responsible with the continuous improvement of the processes and controls to obtain simple, efficient and error free processes.
•You will build control documentation and templates for new services together with service/product owners.
•Effectiveness of assigned controls
•Updated and efficient control processes
•Control enablement documentation
•You have a very good knowledge of SOX IT General Controls (Access management, Computer Operations: Back Up and Recovery, Change Management, Information Security Policies, Program Development, SOC Reports Review).
•You have a good knowledge of PCI-DSS; ISAE 3402 (and similar).
•You have experience in internal and external audits, in implementation of compliance requirements in cloud environments.
•You have a understanding of IT-Service Management ISO 20000)/ ISO 27001 / 9000 (optional GDPR requirements).
•Good knowledge of Data Centre technologies (on premise vs cloud).
•Customer focus and communication skills.
•Good project management and coordination skills.
•Strong analytical skills.
•Experience in coordinating virtual teams
•You have minimum 5 years of experience in IT internal/ external audit (e.g. ICOFR/SOX audits)
•Good to have: CIA/ CISA/ CRISC/COMPTIA or similar.
•Fluent in English
•Work from Home – hybrid approach
•Medical and dental services
•Life and hospitalization insurance
•Dedicated employee phone subscription
•Special discounts for gyms and retailers
•Annual Company Bonus
•Ongoing Education – we continuously invest in you to ensure you have everything needed to excel on the job and enhance your skills
•You get to work with tried and trusted web-technology
•Getting in on the ground floor of a technology changing company
•We let you write your own story by planning vacations: go for a trip, experience new things, have fun and enjoy your 23 days off.
•Special Paternal Program - 4 months of paid paternity leave
Job ID: 1970
Are you known for yourcommunication and critical thinking skills?Are you capable...
Job summaryAs the Head of Facilities Management at GCHQ, your work will help to ...
Job summaryAs one of our Security Officers, you’ll be the first point of conta...
Job summaryDo you have the passion, values and ability to make a real difference...