Global IT Divisional Director

The Location: Hyderabad (INDIA) The Team: S&P Global is a leader in credit ratings, benchmarks and analytics for the global capital and commodity markets. Reporting to the Global Auditor, you will be part of a global and diverse team with coverage for enterprise-wide Applications. The S&P Global Internal Audit function is a global team with auditors located in the U.S., London, India, Tokyo, & Taiwan. The Divisional Technology Audit team is a critical unit of the global Audit function and performs audits focusing on S&P Global Technologies (IT Applications and Information Security). The Impact: This leader will be part of audit leadership team, focusing on audit plan management and execution of Technology audits globally. This role will provide senior executives a companywide perspective of the state of the internal technology environment and act in a trusted advisory capacity. What’s in it for you: The role provides extraordinary learning opportunities and interact with senior management across all the Divisional Applications of Company. If you’re right for this role, you will interact meet and work with several key stakeholders in interesting and meaningful engagements. You’ll love this job because it provides new opportunities for professional growth daily. You will leverage cutting edge digital next generation capabilities and data analytics practices to improve the audit testing techniques. The role provides opportunities to be flexible by adopting Agile methodology to perform audits. This role will be primarily accountable for S&P Global annual audit plan development, internal audits execution (planning, fieldwork and reporting phases) and leadership. You will be responsible for performing annual and on-going risk assessment activities focused on Applications, Information and Cyber Security and the associated risks for S&P Global worldwide. The incumbent will be expected to oversee independent audit and work effectively with members of the Audit Leadership team. Responsibilities: Oversee the audit plan execution and provide leadership to IT Applications Audit team with responsibility of ensuring the efficient and timely execution of the approved Audit Plan. Review the outcomes and audit results, interface with key auditees for the agreement of remedial action plans and help enable smooth audit execution. Engage a variety of stakeholders (including IT senior management and security professionals) in an audience-appropriate manner with strong business acumen Assume responsibility for the ongoing development, implementation, and up-skilling of the Applications & Information Security Audit function team. Develop Annual Audit Plan by ensuring appropriate risk assessment of Applications, Platforms, Information Security domains covering cyber security, network and application architecture, data protection and supporting technology systems. Increment the use of digital next generation auditor capabilities, adoption of agile practices, data analytics and automation where possible, to improve efficiency and quality of Audit execution. Mentor and support staff teams with focus on career coaching to enhance their capabilities and foster a people first environment along with building trust and team cohesion. Participate in external and internal forums for keeping up to date on Information and Cyber Security practices, Compliance, Forensics, Internal Auditing, emerging trends and successful practices in audits related to Information Security audits. Leads others in identifying and solving complex problems using audit expertise, judgment, and precedents. Works with senior management of the business, external auditors, regulators, and professional counterparts to complete audits. For Special Projects, as assigned: Participate in activities related to systems development, new products, mergers and acquisitions, and analyze new policies to ensure that control considerations are evaluated in the early stages of these activities. What We’re Looking For: 10+ years of experience handling technology audits working with multi-function teams across diverse geographical regions. Experience in financial services industry with deep industry knowledge and best practices in audit execution. Knowledge of risk management frameworks, different security standards such as ISO 27001, NIST, regulatory and compliance requirements, Cybersecurity emerging trends and proficient carrying out technology and VAPT audits. Experience in dealing with web applications and/or network security. In-depth understanding of information security policies and related compliances. Use of data analytics tools such as Alteryx and Tableau is a plus. High level of technical and analytical capabilities, skilled at decision-making under uncertainty, combined with a commonsense approach. Strong work ethic, initiative, teamwork, and flexibility to assist IA department in meeting organizational goals. Excellent leadership skills and ability to manage diverse professionals in a way that inspires, develops, and delivers results; demonstrated track record of integrity, innovation, and excellence. Strong supervisory and time management skills. Strong written and oral communication, approachable style, and well-developed negotiation and listening skills Basic Qualifications: • A Bachelor/master’s degree in information technology or Computer Science or related major Preferred Qualifications: • Certified Information Systems Auditor (CISA), or Certified Information Systems Security Professional – CISSP, Certified Information Security Manager – CISM, Certified Ethical Hacker – CEH, Offensive Security Certified Professional certification - OSCP, CRISC, CDPSE, ISO 27001 LA. ----------------------------------------------------------- Equal Opportunity Employer S&P Global is an equal opportunity employer and all qualified candidates will receive consideration for employment without regard to race/ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, military veteran status, unemployment status, or any other status protected by law. Only electronic job submissions will be considered for employment. If you need an accommodation during the application process due to a disability, please send an email to: [email protected] and your request will be forwarded to the appropriate person.  US Candidates Only: The EEO is the Law Poster http://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf describes discrimination protections under federal law. ----------------------------------------------------------- 103 - Middle Management (EEO Job Group) (inactive), 10 - Officials or Managers (EEO-2 Job Categories-United States of America), FINANC103.2 - Middle Management Tier II (EEO Job Group) Job ID: 276634 Posted On: 2022-12-15 Location: Hyderabad, Telangana, India