Responsibilities:
- Leveraging AI for Audit and Controls Transformation:
- Explore and evaluate the potential applications of Artificial Intelligence (AI) and Machine Learning (ML) to enhance audit processes and transform internal controls for FinTech.
- Collaborate with data science and technology teams to identify use cases for AI in areas such as anomaly detection, predictive risk assessment, and continuous monitoring of controls.
- Participate in the development and implementation of AI-powered tools and solutions to improve the efficiency and effectiveness of audit and control functions.
- Stay abreast of the latest advancements in AI and their potential impact on audit methodologies and control frameworks within the financial technology sector.
- Contribute to the development of strategies and roadmaps for the adoption of AI in the FinTech audit and controls landscape.
- Work with stakeholders to understand their needs and identify opportunities where AI can provide valuable insights and automation capabilities.
- Controls Automation & Optimization:
- Design, develop, and implement automated controls within FinTech applications and related systems to enhance efficiency, accuracy, and reduce manual effort in control execution.
- Identify opportunities for automation of existing manual controls across the FinTech application landscape, prioritizing high-risk and repetitive processes.
- Utilize scripting languages, workflow automation tools, and other technologies to build and deploy automated control solutions.
- Maintain and optimize existing automated controls, ensuring their continued effectiveness and alignment with evolving business processes and regulatory requirements.
- Collaborate with business process owners and IT teams to understand control requirements and translate them into robust automation designs.
- Participate in the evaluation and selection of control automation tools and technologies relevant to the FinTech environment.
- Recommend efficient and effective system controls and develop recommendations to improve internal controls and operating efficiency.
- SOX Audit & Control:
- Manage Control activities, including ITGC, ITAC, UAR, Change Management, SOD, and SDLC methodologies.
- Participate actively in control design reviews, assisting in the preparation of audit documentation, evidence gathering, and responses to audit inquiries while providing expert recommendations and ensuring alignment with best practices and regulatory requirements.
- Serve as the key point of contact and subject matter expert for SOX audits related to FinTech applications.
- Monitor and report on the effectiveness of implemented controls, identifying and addressing any deficiencies.
- Assist FRM in establishing effective processes and controls within FinTech systems, conducting risk assessments, and liaising on audit findings and remediation, ensuring management action plans, follow-up, and execution.
- Verify user accounts, profiles, and authorization lists for sensitive transactions and SOD conflicts, and assist in remediation.
- Security, Identity and Access Management (IAM) Enablement:
- Participate in the design and implementation of robust IAM strategies and solutions for FinTech applications, ensuring seamless integration and optimal security posture.
- Collaborate closely with the IAM team to provide solutions that enable FinTech to effectively manage user identities, access controls, and related processes such as provisioning, access requests, segregation of duties and certifications for various FinTech applications.
- Participate in the design and implementation of security controls related to user provisioning, de-provisioning, role-based access control (RBAC), and privileged access management (PAM) for FinTech systems.
- Help enable new integrations, features, APIs, rules, workflows, analytics, and reports within the IAM landscape, specifically tailored to the requirements of FinTech applications.
- Lead initiatives to strengthen the cybersecurity posture of FinTech applications, ensure alignment with industry best practices and regulatory requirements relevant to the FinTech industry and proactively recommend and implement preventative measures.
- Work with development teams to ensure security is integrated into the software development lifecycle (SDLC) for FinTech applications.
Required Skills and Qualifications:
- 7+ years of experience in developing, designing, and consulting on Identity Governance and Administration solutions and authentication platforms.
- Proven experience in SOX audits, Control implementation, Cybersecurity for SOX audits, and Identity & Access Management (IAM) solutions.
- Experience collaborating with Finance, Accounting, Regulatory, Risk, Operations, External Auditors, and Support teams.
- Strong techno-functional skills in Oracle EBS Financials R12.
- Prior working knowledge and hands-on experience with the following tools would be an added advantage:
- SailPoint IIQ
- Okta
- Coupa
- Oracle APEX (Application Express)
- Oracle EPM Cloud (EDM, FCCS, ARCS, PCMCS, etc.), Fusion Financials
- Understanding of Access Control (RBAC, ABAC, PBAC, etc.), Governance, and Access Certification.
- Strong analytical, written/verbal communication, and interpersonal skills.
- Ability to adapt to change, multi-task, and manage multiple projects and priorities.
- Certifications such as:
- Certified in Risk and Information Systems Control (CRISC)
- Certified Information Systems Security Professional (CISSP)
- Certified Information Systems Auditor (CISA)
- Certified Information Security Manager (CISM) (preferred)
