Manage technology audits (Infrastructure, application, cloud etc), Develop the audit work program. Review the workpapers and other audit documentation, Serve as an escalation point for stakeholders. Serve as a functional and people manager for the team members. Liaise with the management on audit issues identified. Review the audit report and provide timely feedback. Participate in Internal Audit management activities.

Participate in IT Risk council monthly meetings to provide Lines of Business an overview of the Risk Posture. Provide Cybersecurity inputs monthly to the Chief Risk Office.Performing Risk Assessments with respect to new/upgrade solutions in the bank.Preparing and guiding the CIO and CTO functions for the Internal Audits within the bank.Provide consulting and advisory services with respect to Audits and Information Security to the internal stakeholders.Performing organization wide Risk Assessment for Danske IT including the support functions.Performing control tests with respect to EU model clause compliance.Act as a liaison between Internal Audit team and various support functions within Danske IT to ensure timely completion of annual audit. Act as a liaison between Business units and IT Business Risk and Controls team with respect to IT security and risk assessment.Drive compliance committee to ensure compliance with local regulatory and statutory requirements.

Responsible for ensuring Information security compliance (ISMS) along with contractual compliance for accounts. Participate in RFP/RFI response and partnering with pre-sales teams across Health care vertical. Performing review of the information security assessments, approving policy exceptions, reporting information security status to the stakeholders. Preparing the accounts to face customer audits or SAS70/SSAE 16 audits.Supporting customer audits and due diligence activities.Involved in MSA negotiations with customers by partnering with legal team.

Managing a team of consultants, ensuring the delivery dates are met. Ensure effective utilisation of all team members.

Performing Infrastructure Audits / AssessmentsAuditing ITGC for SOX complianceAuditing ITGC for SOC1 complianceWorking closely with technology teams across board to ensure SOX compliancePerforming the Walkthroughs and documentation Providing consultation to the business to drive audit findings to closure

Implememtation of Data Security & Privacy framewkork for the accountFacilitate Risk Management processPerform testing of IT Generic controls designed based on COBIT - AUP (Agreed Upon Procedures)Testing of controls like Identity & Access Management, Change Management, Monitoring of Priviledges accesses, Incident Management, Data disposal etcFacilitate the Management reviews to keep the stakeholders informed about the overall status of Security & ComplianceConduct Training & awareness workshops/sessions for the project personnelGenerating the Audit report based on the findings.Provide security solutions to the project team ensure complianceFacilitate the Third Party Assurance Audits

Ensure Infrastructure Changes are compliant with Information Security Policy of the BankFacilitate Network changes by co-ordinating with different technical teamsMonitoring and reviewing the INCR (Inter Network Connectivity Requests) for firewall changes.Assessing the Risks involved in the INCRs raised for Firewall ChangesProvide solutions in compliance with the IS Policy in case of High Risk portsEnsure appropriate workflow for all Infrastructure changes according to existing ISO 27001 and ITIL V3 processes (Incident Management)Educating users about IS Policy of the bankEnsure all changes are appropriately tracked and recorded (Change Management)Participate in Functionality testing of the BPM (Business Process Management) portal during new releasesEscalating to I&TRG (Information & Technology Risk Governance) team in case of any violations of compliance.

Carrying Information Systems Audit efficientlyPerforming IS Audits to test Compliance status of clent organizationGenerating the report based on the Audit findingsCreating awareness about the importance of Information Systems Security and ComplianceAssisting the Lead Auditor while performing the Audits at the client location